Last updated: 13 June 2026 · Effective worldwide for all users of the Aayi mobile apps (iOS, Android) and website (aayi.ai)
Quick summary: we collect only what you give us (profile, health logs, AI prompts), we keep tracker logs for up to 5 years, we never sell your data, and you can delete your entire account from Profile → Delete Account at any time — instant and irreversible.
Aayi ("we", "our", "us") is a mobile and web application that offers pregnancy and parenting support to Indian families. The app is operated by Aayi and registered in India. This policy explains how we collect, use, share, store, retain, and delete your personal data when you use our mobile apps (iOS and Android) or visit aayi.ai.
For any privacy question, contact us at privacy@aayi.ai. For general support, support@aayi.ai.
When you create an account: your name, email, phone (optional), profile photo (optional), language preference, pregnancy stage or child date-of-birth.
Health data you choose to enter: symptoms, mood, weight, kick counts, contractions, breastfeeding logs, sleep logs, diapers, vaccination records, lab report photos, and any photos you upload to your private journal.
Authentication data: when you sign in with Apple, we receive a stable identifier from Apple; we do NOT receive your password. When you sign in with Google (web/Android), we receive your email and Google profile basics. When you sign in with email + password, we store a salted, one-way hashed version of your password (bcrypt) — we cannot see the original.
Device & technical data: device model, OS version, app version, IP address (for security), crash reports.
Payment data (web subscriptions only): handled directly by Stripe and Razorpay. We receive only the subscription status and a transaction ID — never your card number or CVV.
To personalise content (week-by-week pregnancy info, daily checklist) based on your stage.
To provide AI-powered features (lab report explainer, meal analysis, AI Saheli chat) by sending your inputs to third-party AI services (see section 4).
To send notifications you opt into (kick-count reminders, milestone alerts, doctor messages, emergency SOS).
To connect you to a doctor if you provide a clinic code or scan a doctor QR.
To detect abuse, prevent fraud, and meet legal obligations.
We do NOT sell your personal data. We do NOT use your data to train third-party AI models without your explicit opt-in.
AI service providers (only when you actively use an AI feature and consent on the in-app modal):
• Anthropic (Claude) — text guidance and chat
• OpenAI — image, voice, and meal analysis
• Google Gemini — illustration and image generation
Payment processors (only if you subscribe on web): Stripe, Razorpay.
Push notifications: Apple Push Notification service, Firebase Cloud Messaging.
Communications: Resend (email), Twilio (SMS / WhatsApp), Slack (internal alerts only — no user data).
Hosting: our backend runs on cloud servers in Asia (India-region preferred); MongoDB Atlas stores the database.
Doctors you link to: if you connect to a doctor via a clinic code, the doctor can see ONLY the health logs you choose to share via the consent screen.
Legal authorities: if compelled by a valid court order or law-enforcement request from India or your jurisdiction.
We never share your data with advertisers.
Active account: as long as you keep your account, we retain all the data you have entered so that you can see and update it.
Tracker logs (weight, kicks, feeds, etc.): up to 5 years after the last entry, then archived to anonymised statistics.
Lab report photos and journal photos: up to 5 years; you can delete any photo from within the app at any time, immediately removing it from our storage.
Chat / AI conversation history: 12 months from the last interaction, then automatically purged.
Email and push notifications opt-ins: until you turn them off in Profile → Notification Settings.
After account deletion: all personal data is permanently deleted within 30 days (see section 6). Anonymised, aggregated analytics may be retained indefinitely (this data cannot be traced back to you).
Backups: encrypted database backups are retained for 30 days for disaster recovery, then irreversibly destroyed.
Self-service in-app deletion (instant):
1. Open the Aayi app or website.
2. Go to Profile → "Delete Account".
3. Re-enter your password to confirm. (Apple / Google sign-in users skip this step.)
4. Tap "Permanently delete my account".
This immediately removes your profile, journal, tracker logs, photos, gamification progress, and session tokens from our active database. Encrypted backups retaining a copy are destroyed within 30 days.
If you cannot access the app, email privacy@aayi.ai from the address associated with your account; we will delete your account within 7 working days and reply with confirmation.
You may also request a copy of your data ("data portability") by emailing privacy@aayi.ai.
Our service is intended for adults who are pregnant or who care for a child. We do not knowingly collect personal data from children under 13. If you believe a child has provided us their data, contact privacy@aayi.ai and we will delete it.
Under India's Digital Personal Data Protection Act 2023 (DPDP Act) you have the right to: access your data, correct inaccurate data, request deletion, withdraw consent, and lodge a complaint with the Data Protection Board of India.
If you are in the European Economic Area, you have GDPR rights including data portability and the right to object to processing.
If you are in California, you have CCPA rights including the right to know, the right to delete, and the right to opt out of sale (note: we do not sell personal data).
To exercise any right, email privacy@aayi.ai.
We use TLS / HTTPS for all data in transit.
Passwords are stored only as bcrypt salted hashes.
Sensitive health data and uploaded photos are encrypted at rest.
Access to production systems is restricted to a small number of engineers with multi-factor authentication.
No system is perfectly secure — if you suspect a breach, please email privacy@aayi.ai.
Our servers are primarily located in India. When you use AI features, your inputs may be processed in the United States by Anthropic, OpenAI, or Google. These transfers are subject to the privacy policies of those providers and standard contractual clauses where applicable.
We may update this Privacy Policy from time to time. Material changes will be announced in-app and via email at least 30 days before they take effect. The "Last updated" date below shows when this policy was most recently revised.
Privacy questions: privacy@aayi.ai
General support: support@aayi.ai
Postal: Aayi, India
Grievance Officer (DPDP Act): the same address above, attention: Grievance Officer. We respond within 7 working days.