Privacy Policy

Effective Date: 30 September 2026

In plain words, before the legal detail

This is the short version of everything below — the full detail, including exactly which company receives what and when, is in "Information Sharing" further down this page.

  • Your database is SpacetimeDB, always. Notes, settings, memory and quotas live there and nowhere else — it is the one store every account's data always goes through, not an optional vendor.
  • Uploaded files (images, audio, video, PDFs) go to Vercel Blob, served from a separate origin so an uploaded file can never masquerade as part of the app.
  • Using an AI feature sends the relevant content to Google (Gemini) — the one AI recipient every account reaches on any AI action. Voice, calendar, web search and the code sandbox are separate, optional features that only reach their own third party when you turn that specific feature on.
  • Importing a ChatGPT or Claude export — the first reading is made on your device, and the assistant's replies never leave it. Your own messages from up to 20 of the conversations become notes, which Google (Gemini) reads once to find the claims in them.
  • If you write a contract, its words go to Google (Gemini) with each chat message, so the chat can quote them back to you, along with how hard you asked to be pushed. The contract is a note in your vault; delete it and it stops being sent.
  • If you connect GitHub, issue text the AI writes for you goes to GitHub, posted under your account in the repository you or the AI chose; until you connect it, nothing reaches GitHub.
  • Subscribing sends your email and payment details to Stripe, which is its own controller for your payment records.
  • If you get the weekly letter, its text goes through Resend, our transactional email provider, to deliver it — a quoted line from your own notes, read to write that one email, nothing else.
  • We do not sell your data. The one analytics service in the app is Vercel Web Analytics — aggregate page-view statistics that Vercel describes as cookie-free and not linked to your activity on other sites. It is described in full under "Page-View Analytics" below.
  • A card link you create ("Make a card") is public to anyone who has the link — it shows the observation text you chose to put on it, in the toggles you chose (your own words are included only if you turn that on). It can be revoked or left to expire, like every other public link in Maios.
  • Sharing a pack makes your name and founding number public. A saved question, a template, or a folder you choose to share as a pack gets a public link (/p/<token>) showing its title, description, your display name and founding number, and how many people installed it, to anyone who holds the link. Nothing else from your vault is on that page, and nothing from your vault crosses to an installer beyond the pack's own content.
  • You can export everything, any time — see "Your Rights" below.
  • You can delete your account, and it is immediate and irreversible — see "Data Retention" below.
  • "Ask a friend" links (/q/…) are readable by anyone who holds the link. The two lines you choose, and the answer the other person sends back, are described under "Links You Create for Others" below.

1. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name (optional)
  • Password — stored only as a bcrypt hash. We cannot read it, recover it, or tell you what it is.

Google Account Integration

When you sign in with Google, we access:

  • Basic profile information (name, email)
  • Google Calendar data (when explicitly authorized)

Content and Files

We store content you create in Maios:

  • Notes and documents
  • Uploaded files
  • AI conversation history
  • Personal preferences and settings

Links You Create for Others ("Ask a friend")

You can turn one of your own notes-in-tension into a link (/q/…) and send it to someone else. That person does not need a Maios account, and does not sign in to open it. The page shows them the two lines you chose (which you may edit before sending), and nothing else of yours — not your name, not your vault, not any other note. They answer A, B, Both or Neither, and may optionally write a sentence saying why; that answer, including anything they wrote, is saved as a new note in your own vault. It never reaches anywhere of theirs.

Each link expires (30 days by default) and can be revoked at any time, after which it stops working for anyone who still holds it. Because the link itself is what lets someone answer with no account, how many times it has been opened and answered is limited to prevent abuse.

Usage Counts

We count how many times each account uses a named feature on a given day — for example that the graph was opened four times — so we can see which parts of Maios are worth building on.

These counts are first-party: they are stored in our own database, they record only a fixed list of feature names and a number, and they never include note content, titles, file names, searches, or the time of day you did anything. They are separate from the page-view analytics described next, which is a third-party service.

Check-in Answers (optional)

Maios may ask you a few optional questions about how life is going: five short statements you rate from 0 to 10, on your first day and again at each monthly check-in (the first twelve), and at each check-in one question about whether your life has got better, worse or stayed the same. Each check-in asks the statements once. You can skip any statement, or the whole set, and nothing in Maios depends on what you answer.

Your answers, and anything you choose to write beside the monthly question, are kept in your own record in our database. We also count each answer as one name from a fixed list (for example, "day one, meaning, seven") filed under your account, which is how we can compare the same people on their first day and at each check-in. Those counts never include anything you wrote, and we look at them only as totals, averages and answer rates.

We may also ask one further question, once, between your tenth and fourteenth day: how you would feel if you could no longer use Maios, with an optional note on what you would miss. The note stays in your own record; only your choice is counted, the same way the monthly check-in is.

Page-View Analytics (Vercel Web Analytics)

The app loads Vercel Web Analytics, run by Vercel (our host, listed under "Information Sharing" below), so we can see aggregate traffic: which pages are visited, and roughly how often. It loads on every page of the app except the public home page, in all its languages, the blog, this page and the other plain documents (Terms of Service, Guide), and the "ask a friend" page (/q/…) a friend with no account reads, and it runs in production only. It receives:

  • With every page view: the time, the address of the page (its path only: we remove everything after a ? or #, and replace the private token of a shared-note link with a placeholder before anything is sent), the page you came from, your approximate location (country, region and city), your device type, and your browser and operating system with their versions.
  • Named events: a short event when you send a chat message, start a voice session, use MoodScroll, or pick a command in the command palette, each with a few small details — for example whether a message had an attachment, which voice, or how many cards. None of those details is text you wrote or chose: no note titles, folder names, message text, note bodies or file contents are sent.
  • Who it is about: we attach no account ID or email address to any of it. Vercel documents that it tells visitors apart by a hash of the incoming request rather than by a cookie, that the hash is discarded after 24 hours, and that it collects no identifiers that track you across other sites or apps. Those are Vercel's statements about its service; see Vercel's page on Web Analytics privacy.

None of this is used for advertising, and we use the results as aggregate statistics only.

2. How We Use Your Information

  • Provide Services: Enable core Maios functionality including AI chat, note management, and file organization
  • Personalization: Customize your experience based on preferences and usage patterns
  • AI Features: Process your content to provide intelligent responses, search, and content creation
  • Calendar Integration: Access your Google Calendar to provide scheduling and event information (only when authorized)
  • Account Security: Protect your account and prevent unauthorized access

3. Information Sharing

We do not sell, rent, or share your personal information with third parties except in the following circumstances:

  • Service providers (sub-processors): the companies listed below, each for the stated purpose and nothing else
  • Legal Requirements: When required by law or to protect our rights
  • Your Consent: When you explicitly authorize sharing
  • Who invited you: if you join on someone's invite code, their name and founding number are shown to you on your welcome screen — and if you invite someone, yours are shown to them the same way

In full, every company that receives any of your data:

  • Google (Gemini) — receives note content, chat messages, and uploaded media you ask the AI about, for generating responses, summaries, embeddings and transcriptions.
  • Vercel — receives requests to the app, and files you upload (Vercel Blob); the address, referrer, approximate location, device, browser and operating system of each page view, and the named events the app reports, through Vercel Web Analytics (which Vercel documents as cookie-free and aggregate; on every page but the public landing and the blog; see “Page-View Analytics” above); when the `gateway` Jev door is configured (#1051), the same short excerpts, headlines, tool names and arguments the TypeSafe AI row below describes, routed through Vercel AI Gateway instead of directly, for hosting the application, storing uploaded media, measuring aggregate traffic, and — when configured — routing bounded decision questions to Jev.
  • SpacetimeDB (Clockwork Labs) — receives your notes, settings and everything else the app stores, for the database the product runs on.
  • ElevenLabs — receives audio you record, and text you ask to be read aloud, for speech-to-text and text-to-speech in voice mode.
  • E2B — receives code you or the AI run in the sandbox, for executing that code in an isolated environment.
  • Resend — receives your email address and the contents of emails we send you, for account email and the optional digest.
  • Stripe — receives your email and payment details, for subscription billing; Stripe is the controller of its own payment records.
  • BetterStack — receives error reports and application logs, which are scrubbed of personal data before sending; and, when real-user monitoring is enabled, page views and performance timings sent directly from your browser, for diagnosing crashes, aggregating logs, and measuring page performance.
  • Brave Search — receives the search terms you or the AI submit, when web search is enabled, for returning web results.
  • DeepInfra — receives the text of a note you ask to be read aloud, if the Kokoro voice is selected, for text-to-speech.
  • Modal — receives text, audio or video you submit to the neuro features, when they are enabled, for running the TRIBE encoder and the brain-render service.
  • Auto Content API — receives the prompts and source material you give the content generator, when enabled, for generating long-form audio and video content.
  • TypeSafe AI — receives short excerpts, headlines, tool names and arguments, and candidate descriptions — never a whole note and never the vault; the emotional-insights excerpt only if you opted in, for answering the bounded yes/no, pick-one and rank questions the app asks about its own decisions, when configured.
  • Push notification services (your browser’s own: Google FCM, Mozilla, or Apple) — receives the device’s push subscription endpoint and user-agent string — never a headline, never note content, and never anything else about what triggered the notification, for waking a device to show a reminder notification, on devices where you turned "Enable reminders on this device" on; off unless you opt in, and per device.
  • GitHub — receives the title, body and labels of issues the AI creates for you, and which of your repositories, issues and pull requests it reads — only after you connect GitHub, for letting the assistant read and file issues in your repositories.

If you choose to share something with a specific person:

  • A witness you add: the only content that reaches them, each week, is that week's one move in your own words and whether you marked it done. They never see your notes, your contract, or any chat, and they need no account. You can remove a witness at any time, which ends the link immediately.

4. Google Calendar Access

Signing in with Google does not give Maios your calendar. You connect it separately, from the Calendar space, and only if you choose to. Once it is connected:

  • We read your events when you open the Calendar space, when you open a daily note (its header shows that day's events), and when you, or an agent you have connected to Maios, ask about your calendar
  • Maios creates, changes or deletes events only when you ask it to, or when an agent you have connected with permission to make changes does
  • Events you ask the assistant about are sent to the AI provider listed above to answer you, like any other content you ask about
  • We do not permanently store your calendar events: they are fetched from Google each time they are shown. We store the access token Google issues, so the connection keeps working
  • You can revoke calendar access at any time in your Google Account, under third-party apps with account access

5. Emotional Insights (optional)

Maios can offer observations about how your own writing feels over time. It is a separate category of data, it is off unless you switch it on, and it carries one clause about serious content that we state here in full rather than leaving you to discover it.

  • It is off unless you turn it on: Emotional insights are opt-in. With the setting off nothing is computed — no scores are joined, no writing is screened, and no rows are created. It is not a hidden feature; it is an absent one. Turning it off stops it immediately; anything it already recorded stays in your data export until you delete your account, which deletes it.
  • What it says is a question, not a conclusion: An observation is phrased as something you can correct — "you seem to write with more strain about X — is that right?" — and your correction changes what it asks next. Corrections are recorded in our self-correction log.
  • If you write about wanting to end your life: One named person, bound by a confidentiality and data-processing agreement, is shown the flagged passage and nothing else — not your name, not the note, not your vault. They read it and decide. If they judge it would help, you receive a confidential message with help resources for your country. No message is ever sent without that human decision, and none of this runs for anyone who has not opted in. Where no responder is named for a deployment, the whole path is switched off and the setting says so.
  • Nothing here is a diagnosis: The screen decides whether a person should look at one passage. It does not name a condition, produce an assessment, or record one, and no message it leads to describes you.
  • It is exportable and it is erasable: The opt-in record, every observation and every row of the safety log — including the flagged excerpt — are in your data export and are deleted with your account.

You can turn this off at any time in Settings → AI → Emotional insights.

6. Data Security

We protect your information through:

  • Encryption of data in transit and at rest
  • Secure authentication using industry standards
  • Regular security updates and monitoring
  • Access controls limiting who can view your data

7. Your Rights

You have the right to:

  • Access and portability: Settings → Advanced → Your data → Download my data. A JSON file of everything we hold for you.
  • Erasure: Settings → Advanced → Your data → Delete my account. Immediate and irreversible.
  • Rectification: Edit your content in the app directly, or email privacy@laifea.app.
  • Restriction and objection: Email privacy@laifea.app. You can also turn AI features off in Settings → AI, which stops your content being sent to a model.
  • Withdraw consent: Turn off the morning digest (Settings → Advanced) or emotional insights (Settings → AI) at any time, and revoke Google Calendar access in your Google Account.
  • Complain to a supervisory authority: If you are in the EEA or UK you may complain to your local data protection authority. We would rather hear from you first at privacy@laifea.app.

8. Data Retention

We keep your content for as long as your account is active, and until you revoke a specific permission (Google Calendar access, for example).

When you delete your account, deletion is immediate and irreversible. Your notes, maps, conversations and uploaded files are erased as part of the request — there is no grace period and no recovery window, so download your data first if you want a copy. An earlier version of this page said we kept data for 30 days after deletion for recovery purposes. That was never what the software did.

Two things do survive, and only these:

  • Stripe payment records — Stripe retains invoices and payment history under its own legal obligations for tax and fraud prevention. We cancel the subscription; we cannot erase their financial records, and neither can you.
  • Aggregated, non-identifying counts — Usage figures — how many AI requests were served and what they cost, which features were used on which day, when sign-ups and first notes happened — stay so the totals stay true. When an account is deleted, its id and email are cut from those rows and replaced by an id that is not stored anywhere, so they carry no personal data and cannot be traced back to you.

9. Children's Privacy

Maios is not intended for children under 16 years of age. Everyone who creates an account is asked to confirm they are at least 16: on the sign-up form, and after a first sign-in with Google. We do not ask for a date of birth and we do not verify the answer. If you tell us you are not 16, we sign you out and delete the account that was just made.

Accounts opened while the minimum age was 13 were confirmed by their owners to be at least 13 and stay open. We do not knowingly collect or solicit personal information from anyone under 13, or from anyone under 16 who opened an account after the minimum age became 16.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@laifea.app so we can promptly remove the data.

10. International Users

Maios is operated from the United States. If you are accessing our service from outside the US, please be aware that your information may be transferred to, stored, and processed in the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the effective date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at:

privacy@laifea.app