Privacy Policy.

Last updated: 5 August 2026

Aya exists because families trust it with things they have never said out loud. That only works if the privacy promises are absolute, simple, and enforced in the product itself, not just written here. This page explains, in plain language, what we collect, why, and the promises we will not break.

The three promises

• Nothing ever crosses families. Your family's voice notes, transcripts, and questions live inside your family and nowhere else. There are no cross-family features, and there never will be.
• Sealed stays sealed. When a parent marks an answer as private ("this one I keep to myself"), that answer is locked. It is never transcribed into any AI prompt, never shown to any family member, never reviewed by us, and never included in any feature. Sealing is permanent.
• Your archive is yours. At any time you can export every voice note, transcript, question, and conversation in one archive, and leave with it. No lock-in, no retention games.

What we collect

From the answering parent

• WhatsApp phone number and display name, to send the evening question.
• Voice notes they choose to send in reply, and the transcripts we produce from them.
• Preferences: language, delivery time, skipped questions, sealed answers, and STOP requests.

From family members who ask

• Account details: name, email, phone number.
• Your private questions to Aya and its replies. These are visible to you alone: not to the parent, not to siblings, and not routinely to us (see "Safety" below for the one exception).

Payments

Subscriptions and gifts are processed by our payment provider. We never see or store full card numbers.

How your data is used

• To send one question each evening and keep the ritual running.
• To transcribe voice notes and generate the next question. Unsealed transcripts are processed by our AI provider under a data-processing agreement that prohibits training on your content.
• To let family members ask Aya questions, answered only from the parent's unsealed words.
• To operate, secure, and improve the service using aggregate, non-content metrics (e.g. how many nights were answered, never what was said).

We never: sell your data, share it with advertisers, use your family's content to train AI models, or listen to your recordings for product research.

The one exception: safety

If a conversation with Aya raises signs of immediate danger to a person (self-harm, abuse, or an emergency), Aya drops its persona, points to real help, and the specific exchange is flagged for human review so we can respond responsibly. This is the only circumstance in which private ask content becomes visible to us, and each case is logged.

Consent and control for the parent

• The ritual begins only after a personal heads-up from their own family member and a clear introduction from Aya.
• Any question can be skipped, without explanation.
• Any answer can be sealed with a spoken sentence.
• STOP ends everything the same day. It is honored immediately, logged, and never argued with.

Storage, security, and retention

• Voice notes and transcripts are stored encrypted, in the EU.
• Access inside our team is restricted and audited; content access is not part of normal operations.
• We keep your family's archive for as long as your family keeps its account. If you close it, everything is deleted within 30 days, after we offer you a full export.

Your rights

Under the GDPR and applicable law, every family member and every answering parent can, at any time: access their data, export it, correct it, restrict its processing, or delete it. Write to privacy@aya-family.com; privacy requests are handled with priority. You may also lodge a complaint with your data-protection authority (in Italy, the Garante per la Protezione dei Dati Personali).

Third parties we rely on

• WhatsApp (Meta): message delivery. WhatsApp's own terms apply to the messaging channel.
• AI processing provider: transcription and question/reply generation on unsealed content only, under a no-training data-processing agreement.
• Payment processor: subscriptions and gifts.

Each processor is bound by contract to use your data only to provide the service.

Children

Aya is designed for adults. Family members who ask Aya questions must be 16 or older; younger family members may participate only through a parent or guardian's account.

Changes to this policy

If we change this policy in any way that matters, we will tell every family directly and in plain language before the change takes effect. The three promises at the top are not subject to change.

Contact

Aya · privacy@aya-family.com · Contact page