Privacy Policy

1. Information we collect

We collect information you provide directly and data generated by using the service:

• WhatsApp identity — your phone number and display name as provided by WhatsApp/Twilio.
• Messages — text you send Maya, including reminders, lists, expenses, and other household requests.
• Voice notes — if you send audio, we transcribe it (via OpenAI Whisper) to process your request.
• Images — if you send photos (e.g. receipts, school notices), we may analyze them to extract dates or details you ask for.
• Household profile — household name, your role (e.g. Partner, Dad), city/timezone, invite codes, and member relationships.
• Household data you create — reminders, grocery lists, shared expenses, contacts, food preferences, and similar records stored for your household.
• Payment information — subscription status and billing metadata from Razorpay. We do not store full card numbers; payment details are handled by Razorpay.
• Website usage — anonymous analytics on our marketing and checkout pages (via Vercel Analytics / PostHog), such as page views and referral source.

2. How we use your information

We use your data to operate Maya and improve the product:

• Read and respond to your WhatsApp messages using AI (OpenAI models).
• Store household context (reminders, lists, memory, schedules) so Maya can follow up over time.
• Send proactive reminders, summaries, and relay messages you request to household members or contacts.
• Enforce plan limits (free, Family, Family+) and process subscriptions.
• Detect abuse, enforce rate limits, and keep the service reliable and secure.
• Measure aggregate product usage to improve features (not to sell your personal data).

3. Encryption and storage

Message content in our database is encrypted at rest with AES-256-GCM, using a data-encryption key unique to each household. A leaked database backup would not reveal readable chat text without our master key, which is stored only in our server environment.

Other fields (such as phone numbers, household names, expense notes, and contact details) may be stored in plaintext where needed for search, billing, or household coordination. When you delete a household, its encryption key is discarded and encrypted message history becomes unrecoverable.

4. Who we share data with

We use trusted processors to run Maya. They access data only as needed to provide their service:

• Twilio — WhatsApp message delivery and webhook handling.
• OpenAI — language models, embeddings, speech-to-text, and vision for images you send.
• Supabase — hosted PostgreSQL database and file storage.
• Razorpay — subscription payments (India).
• Railway / Modal — application hosting and background workers.
• PostHog / Vercel — product and site analytics.

Within a household, reminders, lists, expenses, and similar shared records are visible to all members by design. We do not sell your personal information to advertisers.

5. Retention

We keep your data while your household account is active and as needed for legal, billing, or security purposes. Raw Twilio webhook payloads are retained for a limited period for debugging, then cleared. You can ask us to delete your household; encrypted messages cannot be recovered after the household key is destroyed.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, or delete personal data we hold about you. To exercise these rights:

• Stop using Maya by ceasing to message our WhatsApp number.
• Ask your household admin to remove you, or request household deletion.
• Email us at leanlabsinnovations@gmail.com with the phone number associated with your account.

We will respond within a reasonable time. Some data may be retained where required by law or for dispute resolution.

7. Children

Maya is intended for household coordination among adults and families. We do not knowingly collect personal information from children under 13 without parental involvement. If you believe a child has provided us data without consent, contact us and we will delete it.

8. Security

We use signed webhooks, rate limiting, encrypted message storage, and access controls on production systems. No method of transmission or storage is 100% secure; please avoid sending highly sensitive information (passwords, full bank credentials, government IDs) via chat.

9. International users

Maya is built for shared living globally, including families across time zones. Your data may be processed in the United States, India, or other regions where our providers operate. By using Maya, you consent to this transfer subject to applicable law.

10. Changes to this policy

We may update this policy from time to time. We will post the revised version on this page with an updated “Last updated” date. Continued use of Maya after changes constitutes acceptance of the updated policy.

11. Contact

Questions about privacy? Email leanlabsinnovations@gmail.com.

Lean Labs Pvt. Ltd.
Maya — AI for the life you share