Maya

Privacy

Your thoughts are yours.

People tell Maya things they might not tell anyone else. This page explains, in plain words, what we keep, why, who helps us run Maya, and how you stay in control.

Last updated 12 November 2026

The short version

  • What you write to Maya is private. We don't sell it, use it for advertising, or read it except when you ask us to help with something.
  • To reply to you, Maya sends your conversation to OpenAI. OpenAI doesn't use it to train its models.
  • You can delete your chats, maps and memories at any time, or turn memory off entirely.
  • Share links show a map only. They never include your chat or your private notes, and you can turn them off.
  • Nothing is public unless you publish it to Explore. A published map is a reviewed copy with identifying details taken out, with your first name only if you choose, and you can unpublish it.

What we collect

Your account

When you sign up, our sign-in provider (Clerk) stores your name, email address, profile picture and how you signed in (for example, with Google). We use these to keep your account yours.

What you create in Maya

  • Maps: their titles, everything on them, and any private notes you add.
  • Chats: your conversation with Maya for each map.
  • About you: anything you choose to write in Settings for Maya to keep in mind.
  • Memories: if memory is on, Maya may save short notes from your chats, like people in your life or what helps you, so you don't have to repeat yourself. Sensitive details are only saved if you ask. You can see, delete or turn off memories in Settings.
  • Perspectives: which perspectives and practices you've turned on, starred or set aside.
  • Lessons: which lessons you've completed, and any things to try that you save from them. What you type into a lesson's practice questions stays in your browser and isn't sent to us.
  • Share links: which of your maps you've shared.
  • Published maps: the copy of a map you publish to Explore, the first name on it if you chose one, and the flags and “This helped me” marks you leave on other people's maps.

If you try Maya without an account

You can start talking to Maya on the home page without signing up. Your map and conversation are stored the same way as an account's, linked to a random code in a cookie on your browser rather than to you. If you create an account, they move to it. If you don't, we delete them after 30 days without use.

To keep the free trial fair and stop abuse, we limit how many messages can come from one internet connection. For this we store a scrambled form of your IP address (a keyed hash, which can't be turned back into the address), and we delete it after three days.

If you subscribe

Payments are handled by Stripe. We receive a record that you subscribed and your email address, but never your card number.

When you contact us or join the waitlist

We receive what you send: your name (if you give it), your email address and your message. To stop spam, we keep a count of messages from your IP address for one hour.

How the site is used

Like most websites, we collect basic usage information: pages visited, browser and device type, approximate location from your IP address, which features are used, and errors that happen in the app. For each AI reply we record how long it took, how many tokens it used and what it cost, but not what you wrote or what Maya replied.

Cookies and browser storage

Our sign-in provider uses cookies to keep you signed in, and if you haven't signed in, we set one cookie that links you to the map you're trying out. These are needed for Maya to work. Google Analytics also sets cookies to count visits. You can block or clear these in your browser settings, or use Google's opt-out add-on, and Maya will still work. Your browser also stores a few small preferences, such as whether the sidebar is open and lessons you finished before signing in.

How we use it

We use your information only to:

  • run Maya: show your maps, continue your conversations and remember your settings;
  • reply when you contact us;
  • find and fix problems, and understand which parts of Maya are useful;
  • keep Maya secure and prevent abuse.

We don't sell your information, use it for advertising, or share it with data brokers. We don't read your maps or chats. If you ask us to help with a problem that needs us to look at something specific, we'll only look at what's needed, with your permission.

How the AI works with your words

Maya's replies are written by an AI model from OpenAI. Each time you send a message, we send OpenAI what it needs to reply well: the recent conversation for that map, what's on the map, your perspectives, and, if you've added them, your “About you” note and memories. When you use “Look for patterns” on a thought, we send that thought and the map around it. Private notes on a thought aren't sent with your messages.

If you speak a message instead of typing it, your voice goes to OpenAI to be turned into text, which appears in the message box for you to check before sending. We don't keep the audio.

Under OpenAI's API terms, this data isn't used to train their models. OpenAI may keep it for up to 30 days, for example to detect abuse, and then deletes it. We don't use your conversations to train AI models either. Before your message reaches the AI, Maya also checks it for signs of crisis, so it can share helplines straight away. That check happens on our server and isn't stored or reported to anyone.

Sensitive information

What you write to Maya may say a lot about your feelings, relationships, health or beliefs. We treat all of it as sensitive health information. We use it only to provide Maya to you, keep it to the services listed below, and never sell it or use it to profile you for advertising. We won't use it for anything else, or share it with anyone else, without asking you first.

Maya is a space to think things through, not therapy or a medical service, and it isn't monitored by people. If you're in crisis, please contact your local emergency number or find a helpline at findahelpline.com.

Who helps us run Maya

These companies process information on our behalf, only to provide their service to us. We don't share your information with anyone else unless the law requires it, or to protect someone's safety.

ServiceWhat it does for us
OpenAIGenerates Maya’s replies and map suggestions from your messages, and turns what you say into text when you use the microphone.
ClerkSign-in and your account: name, email address and profile picture.
Vercel and UpstashHosting the app, and the database that stores your maps, chats and settings.
PostHogUsage analytics, error reports, and the size, cost and speed of AI replies (not their content).
Google Analytics and Vercel AnalyticsCounting visits and which pages are used.
StripeTaking payment, if you subscribe. Stripe handles your card details; we never see them.
ResendDelivering messages you send through the contact form.
AirtableStoring waitlist sign-ups, if you join the waitlist.

Because these services are based in the United States, your information may be processed there. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses.

When you share a map

A share link lets anyone who has it view one map, as it is now. It never includes your chat, your private notes or suggestions you haven't accepted. You can turn a link off at any time, and deleting a map turns off its link. Treat a link like a key: anyone you pass it to, and anyone they pass it to, can see the map until you turn it off.

When you publish a map to Explore

Explore is public: anyone can read a map there, signed in or not. Nothing of yours appears on it unless you publish it. When you do, we make a separate copy of the map. It holds the cards' text, their types, and the patterns and practices on them. It never includes your chat, your private notes or suggestions you haven't accepted.

Before the copy is public, OpenAI's model reviews it and rewords names and other identifying details, you see and approve every change, and then one of us reads the reviewed copy and approves it. We see the reviewed copy only, not your original map. You choose whether it carries your first name or no name. No review is perfect, so read it once more yourself before you submit: don't publish anything you wouldn't want a stranger, or someone who knows you, to read.

When you publish, you can also let Maya mention your map to people working through something similar. That is off unless you tick it. If you do, Maya may describe the published copy in someone else's conversation and link to it; it never knows or says who you are. Readers can mark a map as having helped them, and you see how many did, not who.

The copy is separate from your map: it doesn't change when you edit your map, and it stays up if you delete your map unless you choose to remove it too. You can unpublish it at any time, and deleting your account removes it. Other readers can make their own copy of a published map while it's up, and we can't take those back. We keep maps that people publish out of search engines. Signed-in readers can flag a map, and we may hide or remove one that could identify or harm someone. Anyone can report a map, with or without an account. The rules for publishing are in the Terms.

Your choices and rights

In Maya you can, at any time:

  • delete a map, or clear all your chats;
  • view and delete memories, or turn memory off;
  • edit or remove your “About you” note;
  • turn share links off;
  • unpublish a map from Explore;
  • delete your account and everything in it, from Settings.

You can also ask us for a copy of your information, to correct it, or to delete it for you. Just send us a message, and we'll respond within 30 days. Depending on where you live, you may have further rights, including to object to how we use your information or to complain to your local data protection authority.

How long we keep it

We keep your maps, chats, memories and settings for as long as you have an account, unless you delete them sooner. When you delete something in Maya, it's removed from our database straight away. Messages you send us are kept in our email for as long as we need them to help you. Usage and error data is kept by our analytics and error-tracking providers for a limited period under their own retention settings.

Keeping it safe

Your information is encrypted in transit, access to our systems is limited and protected, and sign-in is handled by a dedicated provider so we never see or store your password. No system is perfectly secure, but we'll tell you promptly if a breach affects your information.

Children

Maya is not designed for children. You need to be at least 16 to use it, and at least 18 to publish a map to Explore. If you think a child has given us information, please let us know and we'll delete it.

Changes to this policy

If we change how we handle your information, we'll update this page and the date at the top. If the change is significant, we'll also let you know in Maya or by email before it takes effect.

Questions

If you have any questions about privacy, or want to use any of your rights, get in touch. A real person reads every message.

Maya is not a substitute for professional care, and doesn't diagnose or treat any condition. If you're in crisis, in the US you can call or text 988, or find a free helpline in your country at findahelpline.com. In an emergency, call your local emergency number.