The short version. ToTa-Ai reads your WhatsApp message notifications to draft replies, keeps that memory on your phone, and sends message text to an AI provider only to write a draft. It never sends messages for you. You press send.
Who we are
ToTa-Ai is built by Dhumketu Ai Labs ("we", "us"). This policy explains what the ToTa-Ai Android application and this website collect, why, and what control you have. Questions go to hello@dhumketu.space.
What the app accesses
1. WhatsApp message notifications (Notification access)
With your explicit permission, ToTa-Ai uses Android's Notification Listener to read incoming WhatsApp message notifications — the sender name and message text. This is how it knows what to draft a reply to. It does not read notifications from other apps for any purpose beyond what you've approved, and you can revoke this access at any time in your phone's Settings.
2. Contacts (READ_CONTACTS)
To open the correct WhatsApp chat with your draft pre-filled, ToTa-Ai needs the contact's phone number. When you tap Open in chat, it looks up the sender's name in your device contacts to find the matching number. This lookup happens on your device, only when you tap that button, and the resolved number is cached locally so it doesn't have to look again. You can also enter a number manually instead of granting contacts access. We never upload your address book.
3. On-device memory and contacts list
ToTa-Ai stores conversation history, per-contact memory, drafts, and your approved/blocked sender list in a local database on your phone. This data is what lets the next draft "remember" the conversation. It is not synced to our servers.
4. AI drafting (network call)
To compose a draft, ToTa-Ai sends the relevant message text and conversation context to a third-party AI provider (by default OpenRouter; Gemini and other providers may be selectable in settings). The provider processes the text to generate the draft and returns it. This is the primary time your message content leaves your device, and it happens for the sole purpose of writing a reply. The provider's own handling of that text is governed by their privacy terms — review them for the provider you select.
5. Diagnostic and usage telemetry
ToTa-Ai may collect limited diagnostic and usage telemetry (for example: app version, crash and error reports, and anonymous events such as "a draft was generated") to understand reliability and improve the app. Telemetry is not used to read your message content for advertising and is not sold. Where the app offers a setting to limit telemetry, your choice is respected.
What we do not do
- We do not auto-send messages on your behalf — ever.
- We do not use AccessibilityService automation to tap or control your screen.
- We do not sell your data or your contacts.
- We do not upload your conversation memory or address book to our servers.
- We do not show advertising inside the app.
Legal basis and purpose
We process the data above to provide the core function you asked for — drafting and delivering a reply you then choose to send — and to keep the app reliable. Permissions are requested at the point they're needed, with a plain explanation, and are optional in the sense that declining them limits the related feature rather than blocking the app outright.
Data retention
On-device data stays until you remove it. ToTa-Ai includes a Reset memory action that clears stored conversations and contacts, and a hard reset that wipes everything the app has stored. Uninstalling the app removes its local database. Telemetry, where collected, is retained only as long as needed for diagnostics.
Your controls
- Notification access: grant or revoke in Android Settings → Notification access.
- Contacts: grant or revoke in Android Settings → Apps → ToTa-Ai → Permissions.
- Approved senders: manage who ToTa-Ai pays attention to in the Review Senders screen.
- Erase: use Reset memory or hard reset, or uninstall the app.
Children
ToTa-Ai is not directed at children under 13 (or the minimum age in your jurisdiction) and we do not knowingly collect their data.
This website
tota.dhumketu.space is a static marketing site. It stores a single preference in your browser — your light/dark theme choice — using local storage. It does not set tracking cookies. Fonts are loaded from Google Fonts, which may log request metadata per Google's policies.
Changes
We may update this policy as the app evolves. Material changes will be reflected in the "Last updated" date above and, where appropriate, surfaced in the app.
Contact
Privacy questions or data requests: hello@dhumketu.space.
ToTa-Ai is an independent product of Dhumketu Ai Labs and is not affiliated with, endorsed by, or sponsored by WhatsApp LLC or Meta Platforms, Inc. "WhatsApp" is a trademark of its respective owner.