Privacy Policy.

Last updated: 8 September 2026

Aya exists because families trust it with things they have never said out loud. That only works if the privacy promises are absolute, simple, and enforced in the product itself, not just written here. This page explains, in plain language, what we collect, why, and the promises we will not break.

Who we are (data controller)

Data controller: [TO BE COMPLETED · legal entity name and registered address]. Contact: privacy@aya-family.com.

The three promises

• Nothing ever crosses families. Your family's voice notes, transcripts, and questions live inside your family and nowhere else. There are no cross-family features, and there never will be.
• Sealed stays sealed. When a parent marks an answer as private ("this one I keep to myself"), that answer is locked. It is never transcribed into any AI prompt, never shown to any family member, never reviewed by us, and never included in any feature. Sealing is permanent.
• Your archive is yours. At any time you can export every voice note, transcript, question, and conversation in one archive, and leave with it. No lock-in, no retention games.

What we collect

From the answering parent

• WhatsApp phone number and display name, to send the evening question.
• Voice notes they choose to send in reply, and the transcripts we produce from them.
• Preferences: language, delivery time, skipped questions, sealed answers, and STOP requests.
• Typed messages they send back: if the answering parent writes a free-text reply (rather than a voice note), we store it and the family operator can see it. It is never put into any AI prompt and never becomes a banked answer; it stays separate, forward-only. STOP messages, replies choosing how often to receive a question, and messages from numbers we do not recognise are never stored.

From family members who ask

• Account details: name, email, phone number.
• Your private questions to Aya and its replies. These are visible to you alone: not to the parent, not to siblings, and not routinely to us (see "Safety" below for the one exception).

How your data is used

• To send one question each evening and keep the ritual running.
• To transcribe voice notes and generate the next question. Unsealed transcripts are processed by our AI provider under a data-processing agreement that prohibits training on your content.
• To let family members ask Aya questions, answered only from the parent's unsealed words.
• To operate, secure, and improve the service using aggregate, non-content metrics (e.g. how many nights were answered, never what was said).

We never: sell your data, share it with advertisers, use your family's content to train AI models, or listen to your recordings for product research.

Why we are allowed to do this (legal bases)

• To deliver the service the family asked for. Sending the evening question, keeping the archive, and letting the family ask are all part of the service you signed up for.
• With the answering parent's consent. Their replies are given freely, and any of them can be sealed or stopped at any time.
• Our own reasonable interest. We look at aggregate, non-content numbers and keep the service secure, so it keeps working and stays safe.
• When the law requires it. Acting on a safety flag, as described just below.

The one exception: safety

If a conversation with Aya raises signs of immediate danger to a person (self-harm, abuse, or an emergency), Aya drops its persona, points to real help, and the specific exchange is flagged for human review so we can respond responsibly. This is the only circumstance in which private ask content becomes visible to us, and each case is logged.

Consent and control for the parent

• The ritual begins only after a personal heads-up from their own family member and a clear introduction from Aya.
• Any question can be skipped, without explanation.
• Any answer can be sealed with a spoken sentence.
• STOP ends everything the same day. It is honored immediately, logged, and never argued with.

Storage, security, and retention

• Voice notes and transcripts are stored encrypted, on our server in the EU (Frankfurt).
• Access inside our team is restricted and audited; content access is not part of normal operations.
• We keep your family's archive for as long as your family keeps its account. If you close it, everything is deleted within 30 days, after we offer you a full export.

Where your data is processed

• Voice audio stays on our EU server. The audio is turned into text right there, on our own server in the EU, and the recording itself is never sent anywhere else. This is something we are proud of.
• The text does travel. To write the next question and to answer what the family asks, the unsealed transcript text is sent to Anthropic, which operates in the United States. So some processing involves a transfer outside the EU.
• Message delivery also sits in the United States. Twilio carries the WhatsApp messages to and from the phone, and it operates in the United States too.
• These transfers are covered by each provider's data-processing agreement and Standard Contractual Clauses, the safeguards the law asks for when data leaves the EU.

Your rights

Under the GDPR and applicable law, every family member and every answering parent can, at any time: access their data, export it, correct it, restrict its processing, or delete it. Write to privacy@aya-family.com; privacy requests are handled with priority. You may also lodge a complaint with your data-protection authority (in Italy, the Garante per la Protezione dei Dati Personali).

Third parties we rely on

• WhatsApp (Meta): the messaging channel. WhatsApp's own terms apply to the channel.
• Twilio: delivery of the WhatsApp messages to and from the phone.
• Anthropic: writing the next question and the replies to the family, from unsealed transcript text only, under a no-training data-processing agreement.

Each processor is bound by contract to use your data only to provide the service.

Children

Aya is designed for adults. Family members who ask Aya questions must be 16 or older; younger family members may participate only through a parent or guardian's account.

Changes to this policy

If we change this policy in any way that matters, we will tell every family directly and in plain language before the change takes effect. The three promises at the top are not subject to change.

Contact

Aya · privacy@aya-family.com · Contact page