Privacy Policy

Effective September 12, 2026

This policy explains how AYE-AYE (“we”) handles information when you use our app and website. No account is required. We do not sell or rent personal information, use advertising trackers, or build marketing profiles.

Information We Use

With your permission, the app uses your microphone for live voice and your precise location to show your position to people in your session. Location sharing can continue in the background while you are in a session, including its waiting room. Your chosen display name and connection status are also visible to participants. Nearby devices may see discovery identifiers and a display name. Camera access is used only to scan invitation QR codes; camera images are not uploaded.

Voice and location content is encrypted between participants. We do not record conversations or store audio, transcripts, or location history on our servers. Live captions are generated on your device using Apple’s speech technology; language downloads may be required. People you share with can still see, hear, or independently save what you share. When you share an invitation, its session code and any information included in the invitation are shared with the people and service you choose. People with your invitation may also see a host display name before joining.

To connect sessions and deliver push-to-talk notifications, our backend processes limited operational information: display names, participant and session identifiers, authentication data, connection and expiry timestamps, and push-notification tokens stored encrypted on our backend. We use this information to provide the service, manage session access, and prevent abuse.

The app stores settings, device identity credentials, and information needed to rejoin your last session on your device. It also generates limited system diagnostics, such as connection state and error codes, without logging audio, transcripts, precise coordinates, or invitation codes. If you contact us, we receive the contact details and information you choose to send and use them to respond.

Service Providers

We use Vercel to host the website and backend, MongoDB Atlas to store operational session information, and LiveKit Cloud to relay encrypted real-time traffic. Apple provides maps, location services, push notifications, support email through iCloud Mail, and other system features. Push notifications include a device push token, the speaker’s display name, and session-related identifiers; they do not contain voice or location content.

These providers may process IP addresses, device and software details, request timestamps, and connection or diagnostic information needed to deliver and protect their services. Apple may also process map and location requests. Our providers handle information under their applicable service and data-protection terms. Processing may take place in the United States or other countries where they operate.

Retention and Security

Relay sessions expire after 24 hours. Our database schedules session and membership metadata for deletion seven days after session expiry, and short-term security counters after about ten minutes. Push tokens are removed when unregistered or scheduled for deletion when the session expires. Automated deletion may take additional time to complete. Providers may retain their own operational logs according to their terms.

We use encryption, access controls, and limited retention to protect information. No system can guarantee absolute security. We may preserve or disclose information when required by law or necessary to address abuse or protect people and the service.

Your Choices

Leave a session to stop sharing, and manage microphone, location, camera, and other permissions in your device’s Settings. Some features will not work without the relevant permission. Local settings remain until changed or removed; device credentials may persist in the system Keychain. Settings may be included in your device backups; identity and saved-session credentials are stored in device-only Keychain entries. We do not operate a cloud backup of your conversations or location history.

Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal information, object to processing, withdraw consent, or complain to a privacy authority. Contact us to make a request. We may need enough information to verify and locate a record; please do not send invitation codes or private keys.

Website and Policy Updates

Our website does not use advertising or analytics cookies. Invitation codes and host names in shared links are processed in your browser and are not sent to our web server. We may update this policy as the service changes and will revise the effective date above.

Contact

For privacy questions or requests concerning your information, email help@ayeaye.site.