Privacy Notice

Last updated: July 11, 2026

1. Who we are

This Privacy Notice describes how Maatha.ai ("Maatha.ai", "we", "us") handles personal data when you use our website, applications, and services (the "Service"). Maatha.ai acts as the data controller for the personal data described below. You can contact us about privacy matters via our contact page.

2. Personal data we collect

Account data — name, email address, login credentials, authentication identifiers.
Content you upload — photos of you and your family that you provide to generate personalized lessons.
Lesson data — the lessons, narrations, and images we generate for you.
Support communications — messages you send us and our replies.
Usage and device data — IP address, browser type, device identifiers, pages viewed, and basic telemetry used to operate and improve the Service.
Billing identifiers — limited identifiers we receive from our payment processor (e.g. customer ID, subscription status). Card and bank details are collected and stored directly by our payment processor and are not stored on our systems.

3. How we use your data and legal basis

To provide the Service (creation of your account, generation of lessons from photos you upload, delivery of content) — performance of our contract with you.
To process payments and manage subscriptions — performance of our contract and compliance with legal obligations (tax, accounting).
To secure the Service and prevent fraud or abuse — legitimate interests.
To improve and debug the Service — legitimate interests.
To respond to your support requests — performance of our contract and legitimate interests.
Marketing emails, where applicable — your consent, which you can withdraw at any time.

We do not sell your data. We do not use the photos you upload to train third-party AI models, and we do not share them with advertisers.

4. Who we share data with

Service providers / subprocessors — cloud hosting, database, file storage, email delivery, error monitoring, and AI inference providers strictly used to deliver the Service on our behalf.
Payment processor — our payment processor handles transactions, manages subscriptions and payments, and processes payment credentials on our behalf.
Professional advisors — legal, accounting, and similar advisors where necessary.
Authorities — where required by law, court order, or to protect rights and safety.

5. International transfers

Our providers may process data outside your country of residence. Where data is transferred from the UK or EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. Data retention

We keep personal data only as long as needed for the purposes described above. Account and lesson data are retained while your account is active. After account deletion, we delete or anonymize personal data within a reasonable period, except where we are required to retain certain records (e.g. billing records) to comply with legal obligations.

7. Your rights

Depending on where you live, you may have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to withdraw consent at any time. You can exercise these rights by contacting us via our contact page. If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority.

8. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and least-privilege practices. No service is 100% secure, but we work continuously to safeguard the data you entrust to us.

9. Cookies

We use cookies and similar technologies that are strictly necessary to run the Service (e.g. authentication and security) and, where applicable, limited analytics to understand product usage. You can control cookies through your browser settings.

10. Children

The Service is intended to be used by parents and guardians. It is not directed to children, and we do not knowingly collect personal data directly from children.

11. Changes to this notice

We may update this notice from time to time. We will post the updated version on this page and update the "Last updated" date above.

12. Contact

Questions about this notice? Reach us via our contact page.