Privacy Policy

AAYO is a personal memory. It holds what you write down and hands it back when you return. That only works if the contents of your life are treated as yours, so this policy is written to be read rather than to be survived.

The short version

• Your captures belong to you. We do not sell them, mine them for advertising, or use them to train AI models.
• Captures are written to your device first and work offline.
• Some features send content to an AI provider. The app tells you which, and sends only what the request needs.
• We never read the content of your notes to build a profile of you.
• You can export everything and delete everything, at any time, for free.

What we collect

What you write. The notes, voice recordings, photos and links you capture, and everything AAYO derives from them — titles, extracted commitments, people, subjects and the connections between them.

Your account. The email address and identifier supplied by your sign-in provider, the devices you have signed in on, and your plan and usage counts (how many memories were formed, how many questions were asked).

Payment. If you subscribe, our payment processor handles your card or UPI details. We never see or store them. We keep the subscription identifier, amount and dates.

Technical. Server logs containing IP address, timestamp and request path, kept briefly for security and debugging. On this website, privacy-preserving analytics with no cookies and no cross-site tracking.

What we never collect

We do not build behavioural, emotional or psychological profiles from your writing. We do not infer sensitive attributes — health, beliefs, politics, sexuality — from what you capture. Our analytics never include the content of a capture, a question, a transcript or an attachment. We do not use trackers or advertising identifiers, and we do not sell or share data with data brokers.

How we use it

To run the product you asked for: storing captures, syncing them between your devices, turning them into memories, answering your questions from your own material, and telling you where you left off. To take payment if you subscribe. To keep the service secure and working. That is the whole list.

AI processing, specifically

Some features send your content to an AI provider: turning a capture into a memory, transcribing a voice note, answering a question, and reading a page you linked. The app discloses this and shows you which provider is in use.

We currently use OpenAI as our model provider. Content sent through their API is not used to train their models, and is retained by them only briefly for abuse monitoring before deletion. Only what a given request needs is sent — never your whole archive.

Reaching your own writing — searching it, reading it, exporting it — never involves an AI provider at all.

Who processes your data

These are every third party involved in running AAYO, and what each one does:

• OpenAI — AI processing: extraction, transcription, and answering questions. United States.
• Auth0 (Okta) — sign-in and identity. United States.
• Amazon Web Services — servers, database, media and backup storage. Mumbai, India.
• Razorpay — subscription payments, if you subscribe. India.
• Google Firebase — delivering push notifications, if you enable them. Notification content is composed on your device.
• Plausible Analytics — visitor counts on this website only. Never in the app, no cookies. European Union.

Your data is stored in India. Where a processor above operates elsewhere, that transfer is limited to the purpose named and governed by our agreement with them.

How long we keep it

Your content is kept until you delete it or delete your account. Server logs are kept for up to 30 days. Payment and invoice records are kept for as long as Indian tax law requires, which is the one category that survives account deletion — it contains no content, only the fact and amount of a transaction.

Deleting everything

Deleting a memory removes it and everything derived from it. Deleting your account removes your entire corpus from our systems within 30 days, with an export offered first. There are no shadow archives, and deletion is never behind a paywall.

You can do this yourself in the app under Settings → Your data, or request deletion here without installing anything.

Your rights

You can ask us to show you what we hold, correct it, export it, or delete it. You can withdraw consent to AI processing and keep using capture, search and export. You can object to how we handle your data, and you can complain to a data protection authority. Write to privacy@aayo.in and we will answer within 30 days.

Security

Captures are written to your device first. Sync is encrypted in transit and at rest. Access to production systems is restricted and logged. No system is perfect; if a breach ever affects your data we will tell you and the relevant authority promptly, and we will tell you what actually happened.

Children

AAYO is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has an account, write to us and we will delete it.

Changes

If this policy changes we will update the date above, and for anything material we will tell you in the app before it takes effect. We will not quietly broaden what we do with what you have already written.

Contact

Privacy questions and requests, including to our Grievance Officer under India’s Digital Personal Data Protection Act: privacy@aayo.in. Anything else: hello@aayo.in.