Rinno Privacy Policy

Effective date: August 21, 2026 Last updated: August 21, 2026

1. Summary

Rinno places phone calls for you using an automated assistant. To do that, we collect the account details you give us and the tasks you ask us to handle, and, with the other party's consent, we keep a written record of your calls. We never record call audio, and our assistant identifies itself as an automated assistant at the start of each call. We do not sell your personal information, and we do not use your calls to train AI models. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It covers both people who use Rinno and the people Rinno calls on their behalf.

Contents: 2. Who we are and scope · 3. Information we collect · 4. How we use information · 5. Sensitive and health-related information · 6. The people you call · 7. How we share information · 8. AI and your data · 9. How long we keep information · 10. Security · 11. Your privacy rights · 12. Do Not Sell or Share and opt-out signals · 13. Children · 14. Where we process information · 15. Changes to this policy · 16. Contact us.

2. Who We Are and Scope

Rinno is operated by Rinno Inc., a Delaware corporation, 169 Madison Ave, STE 67666, New York, NY 10016. This policy applies to the Rinno mobile app, our website at rinnoapp.com, and related services (the "Service"). It applies both to you as a Rinno user and to people a Rinno user asks us to call (we call them "callees"), whose information we handle as described in Section 6.

3. Information We Collect

We collect the following categories of personal information. We collect it directly from you, automatically as you use the Service, and, for callees, from the call itself.

Some task information or a transcript can reveal sensitive information (for example, a financial account number, or a medical appointment). See Section 5.

Saved details (your vault). You can save details in the app to help Rinno complete your tasks, such as an account or member number, a mailing address, or the last four digits of a card or ID used for verification. We store these encrypted and use them only to complete the tasks you request. We never store full Social Security numbers, full payment-card numbers, passwords, or one-time passcodes. There is no place in the app to save these, and Rinno blocks an obvious Social Security or full card number typed into another field. We also do not store full bank-account numbers today; that may become an optional feature in a future release with additional protections. The assistant will not collect these from the business it calls, and it will not read a saved detail to anyone other than the business you asked us to contact. We also do not read or relay your Social Security number on a call. If a business needs it to verify you, Rinno hands the call to you so you can provide it directly, then takes the call back.

Cookies and analytics. On our website, we and our analytics provider use cookies and similar technologies (such as local storage and pixels) to run the site, remember your preferences, and understand how the site is used so we can improve it. We use these for our own analytics as a service provider, not for cross-context behavioral advertising, and we do not sell or share the information they collect (Section 12). You can control cookies through your browser settings, and we honor Global Privacy Control and similar opt-out signals (Section 12). Our mobile app does not use cookies; it uses device and app identifiers for the same operate-and-improve purposes described above.

4. How We Use Information

We use information to: provide the Service and place the calls you request; verify your identity to a business when you direct us to, using the information you supply; show you your call results and history; operate, secure, troubleshoot, and improve the Service; process your subscription; communicate with you about the Service; comply with law and enforce our Terms and Acceptable Use Policy; and detect and prevent fraud, abuse, and misuse.

5. Sensitive and Health-Related Information

Some information we handle may be "sensitive personal information" under state law, including your date of birth and any sensitive details that appear in a task or transcript. We use sensitive information only to provide the Service you request and for the limited purposes above, and not to infer characteristics about you. Where state law requires your consent to process sensitive information, we ask for it, and where California law applies you can limit our use of your sensitive personal information (Section 11).

If you ask Rinno to call a medical or healthcare provider, the task or transcript may include consumer health data (for example, that you have an appointment, the provider's identity, or a stated reason for a visit). We minimize what we keep, and separate rules apply to that data. Those rules, and your choices, are described in our Consumer Health Data Privacy Policy, which is a separate document. Rinno is not a healthcare provider and is not a HIPAA-covered entity; it acts only as your agent to handle a scheduling or administrative task.

6. The People You Call (Callees)

When you ask Rinno to place a call, our assistant speaks with a third party, usually a business (the "callee"). We want to be clear about how we handle their information:

• No audio is recorded. The conversation is turned into a written transcript, and we generate a written summary. We keep a transcript only when consent is given, and at the start of the call Rinno discloses that it is an automated assistant calling on the user's behalf and that it is keeping a written transcript, and asks for consent. You can learn how we handle call information at rinnoapp.com/callee.
• A callee is a person with privacy rights, even though they do not have a Rinno account. If you are someone Rinno called and you want to know what we have, delete it, or object to our processing, contact us at contact@rinnoapp.com with the date of the call and the number that was called, and we will honor your request as the law requires. Because you do not have an account, we verify these requests in a way that matches their sensitivity (for example, details of the call known to you, or the business and department involved) rather than requiring you to prove control of a shared business line, and we redact other people's information from anything we provide.
• You, the Rinno user, are responsible for ensuring you have the right to contact each person you ask us to call and for any consent the law requires (see our Terms of Service).

7. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information with service providers ("sub-processors") that help us run the Service, under data-processing agreements. These agreements prohibit them from selling your information and require them to protect it. Providers process your data to deliver and secure their services to us; some, under their own contracts and policies, may also use de-identified or aggregated information to maintain and improve their own services. We do not use identifiable call content for advertising. The providers that handle call content retain it only as needed to provide the service and under their own policies (for example, brief security and abuse monitoring, or as the law requires). We do not record call audio, and transcripts and summaries in our own systems delete after 90 days (Section 9).

Some of these providers rely on their own sub-processors (for example, cloud infrastructure) to deliver their services; Vapi keeps its current sub-processor list at security.vapi.ai. We may update this list as our providers change, and we will give notice of material additions. We may also share information to comply with law, respond to lawful requests, protect the Service and its users, or in a merger or sale of the business, in which case this policy will continue to apply to your information.

8. AI and Your Data

Rinno uses automated (AI) systems to place calls and write summaries. We do not sell your data, and Rinno does not use your calls, transcripts, or summaries to train AI models. At the start of each call, the assistant identifies itself as an automated assistant calling on your behalf. We rely on established AI and cloud providers to place, transcribe, generate the voice for, and summarize your calls. They process your data to deliver that service under data-processing agreements that prohibit selling it, and under their own privacy terms; some may use de-identified or aggregated information to improve their own services. Rinno uses a synthetic assistant voice; we do not create a voiceprint of you or of the person you call.

9. How Long We Keep Information

We keep information only as long as we need it.

Call content is removed after 90 days. The written transcript, the summary, anything you or the person you called told us during the call, and the description of what you asked Rinno to do are all deleted automatically 90 days after the call. What stays is the record that the call happened: the number, the date, how long it lasted, and how it ended. Your history still shows the call. The content of it is gone. A saved task you have not used in 90 days is emptied the same way.

The providers that help place and transcribe calls may keep limited copies or logs for their own short periods under their terms.

Deleting your account. You can delete your account at any time from Settings. We will not ask you to prove who you are again: being signed in is enough. Your profile, your saved details, your tasks, and your call history are deleted right away. Removing your verified phone number from our calling provider and deleting call records from our voice provider happen afterward and can take up to 30 days to finish.

A few things outlast your account. We would rather say so plainly than tell you everything is gone when it is not:

• If you or someone you called asked us never to call a number again, that entry stays. It exists to protect the other person, so it cannot depend on your account still being here.
• If your account was restricted or removed for abuse, we keep a record of it. That record holds a code derived from your phone number rather than the number itself, which lets us tell whether a new signup is the same number without keeping the number. This is still information about you, so we hold it only as long as we need to: up to five years for the most serious conduct, less otherwise. We use it only to enforce the restriction, and for nothing else.
• If we are legally required to preserve records, for example under a court order, we keep them until that requirement is lifted, and for up to a year afterward as a record that it happened.
• Routine backups expire on their own schedule, so a copy can remain there for a short time after deletion.

We may also keep information where the law requires it, or to resolve a dispute or enforce our agreements.

10. Security

We protect personal information with administrative, technical, and physical safeguards. We encrypt personal information in transit (TLS) and at rest (AES-256), and we manage encryption keys separately from the data they protect. Access to decrypted content is limited to authorized personnel and systems that need it to provide the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the appropriate authorities as required by applicable law.

11. Your Privacy Rights

Depending on where you live, you may have the right to: know and access the personal information we hold about you; delete it; correct it; obtain a portable copy; opt out of any sale or sharing (we do not sell or share); and limit our use of sensitive personal information.

To exercise a right, email contact@rinnoapp.com or use the tools in the app. If you delete your account from inside the app, being signed in is the verification and we will not ask for anything else. For a request sent by email we may need to check who you are before we act on it. We will confirm your request and respond within the time the law allows. You may use an authorized agent to submit a request on your behalf, and we may ask the agent to show proof of authorization. We will not discriminate against you for exercising your rights, and we do not offer financial incentives in exchange for your personal information.

Appeals. If we deny your request and your state's law provides an appeal, you may appeal by replying to our decision or emailing contact@rinnoapp.com. We will respond to your appeal within the time the law requires.

12. Do Not Sell or Share, and Opt-Out Signals

We do not sell or share your personal information, so there is nothing to opt out of on that basis. Where the law requires, we honor Global Privacy Control and other recognized universal opt-out signals sent by your browser or device, and, for California residents, we confirm when we have honored the signal.

13. Children

The Service is for adults. You must be at least 18 years old to use it, and we do not knowingly collect information from anyone under 18. We use your date of birth only to confirm your age. If we learn we have collected information from someone under 18, we will delete it.

14. Where We Process Information

Rinno is offered in the United States, and we process information in the United States.

15. Changes to This Policy

We may update this policy. We will post the updated policy with a new "Last updated" date and, for material changes, give you notice in the app or by email. We will not apply materially different practices to information we already collected without giving you notice and, where required, obtaining your consent.

16. Contact Us

Questions or requests: contact@rinnoapp.com, or Rinno Inc., 169 Madison Ave, STE 67666, New York, NY 10016. For general support, support@rinnoapp.com.