Who we are
sunva.ai is operated by Zenlead, a sole proprietorship registered in India (Udyam registration dated 2 September 2026), based in Visakhapatnam, Andhra Pradesh. For anything on this page, write to zenlead.info@gmail.com.
Under India's Digital Personal Data Protection Act, 2023, Zenlead is the Data Fiduciary for the information described here.
How the service works, in one paragraph
Your mobile carrier forwards calls you do not take to a number we operate. Our server answers, speaks with the caller, and shows you what happened in the app. The assistant runs on our servers, not on your phone — which is why the call information described below reaches us at all.
Whose information this covers
Yours, as the account holder, and the caller's — the person who rang you. Callers never signed up with us. We collect the least about them that still lets the assistant do its job, and the sections below say what that is.
What we collect from you
- Your phone number. You sign in with it, and an SMS one-time code confirms it is yours. It is the only thing we ask for.
- Your settings — the language you prefer, the voice, how you want to be greeted, whether recording is on, and the state of your call forwarding.
- What you tell the assistant to do — your standing notes about what you are expecting, and the handling instruction on each contact group.
- What you are doing right now, if you set it — "In a meeting", "Driving", or a line in your own words. Your assistant tells callers that, and nothing more. It ends by itself within 12 hours. If you say it rather than type it, the recording is turned into text and not kept.
- Your chat with the assistant — what you type or say to it in the app, and its replies. To answer questions like "who called today?", it reads your recent call summaries.
- Contacts you choose to sync. Only a name and a phone number for each. See Your contacts below, which is the section most worth reading.
- A notification token for your device, so we can tell you a call is happening.
What we collect about a call
- The caller's phone number, and the time and length of the call.
- A transcript of what was said, and a short summary of it written by the AI.
- A name, if the caller states one. When someone says who they are, we keep that against their number so you are not guessing next time. It is stored as a claim the caller made, not as a verified fact.
- A recording of the call, only if you turned recording on. See the next section.
Recording, and what the caller is told
Recording is off unless you turn it on. By default no audio of your calls is stored anywhere — only the transcript and the summary.
If you switch recording on, we keep an audio recording of the whole conversation, both voices, and delete it after 30 days. Transcripts and summaries are kept whether recording is on or off, and are not covered by that 30 days — see How long we keep things.
Telling the caller they are being recorded is a separate setting, and it is also off by default. The assistant can announce the recording at the start of the call, in any of the eleven languages it speaks, but it only does so if you switch that on. If you record without announcing it, whether that is lawful is your responsibility, and it depends on where you and the caller are. We would rather you turned it on.
Every caller is told, in their language, that they have reached an AI assistant acting for the person they called, and it never claims to be a person. With the standard greeting it says so straight away. If you choose the "Just say hello" greeting, it says so later in the call: at once if the caller asks or seems to think they reached you, and always before the call ends.
If you take a call over while recording is on, the conversation between you and the caller is recorded too, and kept for the same 30 days.
Listening live. While your assistant is answering a call, you can listen to it in the app, both voices, a moment behind. The audio goes only to your own signed-in phone, over an encrypted connection, and listening stores nothing: whether a call is recorded is decided only by your recording setting above. Nobody else can listen to your calls.
Your contacts
The app can read your address book so it knows who is ringing. What happens next depends on which permission you gave:
- Reading contacts to show you names — this happens on your phone.
- Letting the assistant manage everyone — if you switch this on, a name and phone number for each person in your address book is copied to our servers, so the assistant can recognise them when they call. Nothing else from a contact card is sent: no email, no photo, no address, no notes.
- Your call log stays on your phone. The app reads it to show you your own history. It is never sent to us.
Turning the second one off deletes the copies we made, except for anyone you had since put into a group or written an instruction for — that is your own work, so we keep it until you delete it yourself. To remove everything, see Deleting your data.
If the app told you your address book never leaves your phone, that was wrong for the "manage everyone" setting, and we are correcting it. This page describes what the software actually does.
The shared caller database
When a caller says who they are — "this is Rajesh from Blue Dart" — we keep that against their number, and it is shared with other sunva.ai users so that the next person that number rings knows who it is. This is how the service recognises couriers, banks and spam.
What goes into it, and what does not:
- It is built only from what callers volunteer about themselves on a call. Nothing is taken from anyone's address book, and nothing is bought or scraped.
- Your contacts are never contributed to it, and neither is who called you.
- A name is only shown to other users once it has been said consistently more than once, so one mistake does not stick to a number.
- An entry goes stale and stops being used if nobody has heard it for 180 days.
If you are a caller rather than a user and you want your number's entry removed, write to zenlead.info@gmail.com and we will remove it.
Caller ID before your phone rings
On Android you can make sunva.ai your phone's Caller ID & spam app. You choose this yourself, in Android's own popup, and can switch it off or to another app at any time.
- Only numbers that are not in your contacts reach it. Android never passes your saved contacts to a caller ID app.
- When an unknown call is about to ring your phone, its number is sent to our server to look up a label. Calls sent straight to your assistant are not looked up. The number travels in the body of the request and is not saved against your account.
- The label is only ever a business name ("Swiggy", "HDFC Bank") or a kind of call ("Delivery", "Sales call"), never a person's name.
- When you press Report spam on a call, or its summary marks it as spam, that counts as your report on the number. A number is labelled "Likely spam" once two users have reported it. Not spam takes your report back.
- Each phone gets its own key for these lookups. Signing out or deleting your account switches it off.
Who else sees this
We do not sell anything and we do not share anything for advertising. We use these companies to run the service, and each one only receives what it needs:
| Who | What reaches them |
|---|---|
| Sarvam AI India |
The caller's speech, to turn it into text; the conversation text, to work out what to say; and the reply, to turn it back into speech. Your chat messages with the assistant, and the call summaries it reads to answer them. |
| ElevenLabs USA |
The assistant's replies, as text, to turn them into the voice the caller hears. Not the caller's own voice. |
| Plivo | Carries the call itself, so both voices and both numbers. When you take a call over, your own mobile number too. It also places the calls we make to you (see below). |
| Google Firebase | Your phone number, to send the sign-in code and confirm it is you. Firebase Cloud Messaging also delivers notifications to your phone; a notification names the caller and can quote what they just said. |
| Expo | Delivers notifications when Google's direct route is not available, with the same content. |
| MongoDB Atlas | Stores everything described on this page. |
| Google Cloud India |
Runs our servers and this website. |
| Amazon Web Services India |
Keeps the master key that locks each account's encryption key. It never receives calls, transcripts or recordings, only the small keys it locks and unlocks. |
We may also disclose information where the law requires it — a court order, or a lawful request from an authority.
What we do not do
- There is no analytics or tracking in the app. No Google Analytics, no Firebase Analytics, no Crashlytics, no Sentry, no advertising SDK. We do not know which screens you open.
- This website collects nothing. No cookies, no analytics, no forms, no third-party scripts that report back.
- We do not use your calls or your contacts to train AI models of our own.
How long we keep things
| What | How long |
|---|---|
| Call recordings, if you enabled them | 30 days, then deleted |
| Transcripts and summaries | Until you ask us to delete them |
| Your account and settings | Until you ask us to delete them |
| Your chat with the assistant | Until you delete your account |
| Contacts you synced | Until you turn syncing off, or ask |
| A name a caller stated | Stops being used after 180 days unheard |
| Technical call logs | 7 days |
To be precise about the first two rows: the 30 days covers the audio only. The written transcript and the summary of the same call are kept until you ask us to remove them. If you want both gone, ask — see Deleting your data.
Calls we make to you
We ring your number from ours in three cases, and no others:
- When you take a call over. Your phone rings, and when you answer you are connected to the caller.
- When you test call forwarding during setup. You decline the call or let it ring, and if it comes back to us, forwarding works. Nothing is said and nothing is recorded.
- Once, if the app seems to have been removed. See the next section.
If you uninstall the app
Removing the app does not switch call forwarding off, so your missed calls keep coming to us. When notifications stop reaching your phone, we treat the app as removed: from then on callers hear one sentence, that you can't take the call right now, and the call ends, without the assistant taking a message. The call is still listed, so you see who rang if you come back. We also ring you once, between 9 am and 9 pm, to say forwarding is still on and how to switch it off. Opening the app again undoes all of this.
Where your information is stored
On managed cloud infrastructure operated by the providers named above. Speech processing is done in India by Sarvam AI, and our servers run in India too, on Google Cloud. Our database may be outside India; information is transferred and stored there in order to run the service.
Keeping it safe
Access to our systems is limited to the people who operate them. Every request for your information must carry your verified sign-in, and every message from our call provider must carry its signature. Calls and API traffic travel over encrypted connections, and stored information sits behind provider access controls. No service can promise perfect security, and we will not pretend otherwise; if a breach affects you, we will tell you and the Data Protection Board of India, as the law requires.
Since 17 October 2026, call transcripts and recordings are encrypted before they are stored, with AES-256-GCM and a separate key for each account. Those keys are kept locked by Amazon Web Services' Key Management Service in India and are never stored in readable form, so a copy of our database alone does not reveal what was said. Deleting your account destroys your key: a transcript or recording of yours that survives anywhere, a backup included, can no longer be read. Our server logs note a call's numbers and timings, never the words.
Security explains all of this in more detail, including what is not yet locked with your own key.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask us to:
- tell you what we hold about you, and who we have shared it with;
- correct anything that is wrong or out of date;
- delete your account and everything attached to it;
- withdraw a consent you gave — for contact syncing, or for recording;
- nominate someone to exercise these rights if you die or are incapacitated.
Most of this you can do yourself in the app: Settings > Privacy & data exports everything we hold about you, deletes your recordings, and deletes your account. For anything else, write to the Grievance Officer below from the number on your account, and we will answer within 7 days. Deleting your data explains deletion in full.
Grievance Officer
For a complaint, a question about your data, or a request about your rights, under the Digital Personal Data Protection Act, 2023:
Grievance Officer, Zenlead (sunva.ai)
zenlead.info@gmail.com,
with the subject Grievance
Visakhapatnam, Andhra Pradesh, India
We acknowledge within 48 hours and aim to resolve within 7 days; in every case within the time the DPDP Rules allow. Callers, not only users, can write here. If you are not satisfied with how we handled it, you may complain to the Data Protection Board of India.
Children
sunva.ai is not for anyone under 18, and we do not knowingly keep information about a child. If you believe we have, write to us and we will delete it.
Changes to this policy
If we change how the service handles information, this page changes with it and the date at the top moves. If the change is significant, we will tell you in the app rather than quietly editing the page.
Contact
Zenlead, Visakhapatnam, Andhra Pradesh, India — zenlead.info@gmail.com.
This page explains what the software does. It is not legal advice.