Privacy Policy

AYSA (“Are You Still Alive?”) is a personal safety check-in application operated by AruAI Labs. This Privacy Policy explains how we collect, use, and protect your information when you use the AYSA mobile application.

By using AYSA, you consent to the data practices described in this policy. If you do not agree, please do not use the application.

Account Information: Name, email address, and profile photo (via Google OAuth sign-in).

Check-in Data: Daily check-in timestamps, streak history, check-in method (manual, smartwatch, auto).

Trusted Contacts: Names, phone numbers, email addresses, and notification preferences of contacts you designate.

Location Data: GPS coordinates shared with trusted contacts during emergency alerts (only with your explicit opt-in).

Biometric Data: Face ID or fingerprint authentication data is processed locally on your device and never transmitted to our servers.

Vault Documents: Documents, passwords, videos, and notes you store in the Will Vault. All vault content is encrypted with AES-256-GCM before storage.

Activity Data: Step count and accelerometer data from device sensors for smartwatch activity detection.

Device Information: Device type, operating system, app version, and push notification tokens.

We use your information solely to provide and improve AYSA’s safety features:

• Process daily check-ins and maintain streak records

• Send emergency alerts to your trusted contacts when you miss a check-in

• Store and protect your Will Vault documents

• Detect activity via device sensors for auto check-in eligibility

• Send check-in reminders and app notifications

• Process premium feature purchases

AYSA uses the following third-party services:

Supabase: Database, authentication, and file storage (hosted on AWS infrastructure).

Twilio: WhatsApp, SMS, and voice call notifications to trusted contacts.

Google: OAuth authentication for account sign-in.

Google Play: Payment processing for premium features.

Each third-party service operates under its own privacy policy. We only share the minimum data necessary for each service to function.

We implement industry-standard security measures:

• AES-256-GCM encryption for all Will Vault content with random initialization vectors

• SHA-256 hashing for PIN storage (PINs are never stored in plaintext)

• Hardware-backed storage for encryption keys (iOS Keychain / Android Keystore)

• TLS 1.3 for all data in transit

• Row Level Security on all database tables (users can only access their own data)

• Biometric authentication processed entirely on-device

Account data: Retained until you request account deletion.

Check-in history: Retained for 1 year, then automatically archived.

Vault documents: Retained until account deletion.

Activity logs: Retained for 90 days.

Alert records: Retained for 1 year for safety audit purposes.

You have the right to:

• Access all personal data we hold about you

• Rectify inaccurate personal data

• Delete your account and all associated data

• Export your data in a portable format (CSV)

• Withdraw consent for optional data processing (location, contacts)

• Restrict or object to specific data processing activities

To exercise any of these rights, contact us at issa@burjix.com.

AYSA is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or via email. Your continued use of AYSA after changes constitutes acceptance of the updated policy.

For privacy-related inquiries, data requests, or concerns:

Email: issa@burjix.com

Developer: AruAI Labs

Location: Dubai, United Arab Emirates