Privacy Policy

Last Updated: November 4, 2026

At Mai School Inc. ("Mai School," "we," "us," or "our"), we are deeply committed to protecting the privacy of children and families. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website (mai.school) or use the Mai School app and services.

We understand that trusting us with your child's education means trusting us with your family's information. We take that responsibility seriously.

The Short Version

  • Mai is an AI learning companion. To talk with and teach your child, Mai shares some of your child's information with the AI providers named in this policy.
  • A parent must agree before Mai shares any of this information. Children cannot give this permission themselves.
  • You can turn off AI sharing at any time in the app under Settings › Privacy & Terms.
  • We do not store recordings of your child's voice. We do save conversation transcripts to your family account so you can review them.
  • We do not sell your family's information, show ads, or use your child's conversations to train AI models.

Information We Collect

Parent Account Information

  • Your name and email address
  • Sign-in identifiers from Apple or Google, if you use them to sign in
  • Information you choose to add, such as your teaching goals and preferences
  • Subscription status (payment details are handled by Apple, Google, or Stripe)

Child Profile Information

  • First name or nickname
  • Age, birth month and year, or grade
  • Interests, learning preferences, and an avatar
  • Learning history and progress, and a learning profile Mai builds over time from your child's activities so future lessons fit them better

Learning Interactions

  • Transcripts of conversations with Mai (the text of what your child and Mai said)
  • Messages your child types and photos you choose to share
  • Lessons created for your child and their activity in them
  • Summaries and learning insights we create for parents, and feedback you give us

Voice and Camera

Voice: When your child talks with Mai, their voice is streamed live to our AI provider so Mai can understand and answer. We do not record or store audio of your child's voice on our systems. We save the text transcript of the conversation instead. Not storing audio does not mean voice is never processed: it is sent to OpenAI during the conversation, as described below.

Mai's voice and face: Mai's spoken replies are generated by AI. That generated audio, not your child's voice, is sent to Simli to animate Mai's face.

Camera and photos: The camera is off by default. If you turn it on during a conversation, the video is carried by LiveKit to Mai's session; Mai's AI does not analyze the video stream, and it is not recorded. The app may also ask for camera or photo access so you can take or choose a picture to share with Mai, for example for an activity. Only the pictures you choose are shared, and they are sent to OpenAI so Mai can respond.

You control microphone, camera, and photo access in your device's settings.

Information Collected Automatically

  • App usage: Limited events, such as the app being opened and subscription screens viewed, through Google Firebase Analytics
  • Device and connection information: Device type, operating system, app version, and IP address
  • Session and diagnostic information: Technical details about conversations (such as when they start and end) and error logs, so we can keep Mai working
  • Website usage: Pages visited, time spent on pages, and navigation patterns through Google Analytics, and spam checks on our forms through Google reCAPTCHA
  • Ad measurement: When you visit our website or tap a link in one of our ads, posts, or printable packs, the Meta pixel and Meta's Conversions API tell Meta which page you opened or which link you tapped, along with your IP address, browser type, and Meta's cookie or click identifiers

We do not use session-recording tools. Our website uses the Meta pixel to see which of our ads on Facebook and Instagram work and to show our ads to people who have already visited us. We never send Meta names, email addresses, your child's information, or anything your child says, and the pixel does not run in the app or on any page that shows your child's information. You can limit this by blocking third-party cookies in your browser, or in your Facebook or Instagram settings under "Your activity off Meta technologies".


How We Use Your Information

We use the information we collect to:

  • Provide and personalize our educational services for your child
  • Hold voice conversations with your child and create AI-powered lessons
  • Adapt lessons to your child's interests, preferences, and progress
  • Show you your child's learning history, progress, and insights
  • Animate Mai's face during conversations
  • Check conversations for safety concerns
  • Keep the app secure and reliable, and fix problems
  • Improve our app, website, and services in the ways described in this policy
  • Communicate with you about your account
  • Send you updates about Mai School (you can opt out at any time)

Personalization is not model training. Mai uses your child's learning history to make their own future lessons better. Mai School does not use your child's conversations or personal information to train AI models, and our AI providers do not use it to train theirs, as described below.


Asking Your Permission Before Mai Uses AI

Before Mai shares any information with an AI provider, a parent must agree in the app. Before a parent can use the app, whether setting up or signing in, the "Before We Can Talk" screen explains what is shared (your child's voice, typed messages, camera video when you turn it on, photos you choose, and their first name, age, interests, and learning history), who receives it (OpenAI, Google Gemini, LiveKit, and Simli), and why. Mai does not start a conversation or create a lesson until you tap Accept & Continue.

  • Your permission covers your whole family, including children linked to your account.
  • Children cannot give this permission. If a child tries to use an AI feature first, the app asks them to get a parent, who approves by entering their parent PIN.
  • If we change what is shared or who receives it, we will ask you again.
  • You can withdraw your permission at any time in Settings › Privacy & Terms › AI Data Sharing. Turning it off ends any conversation in progress and stops new information from being shared. AI features stay off until a parent agrees again. Withdrawing does not delete information already saved; see "Data Retention and Deletion" to delete it.

Third-Party Services and AI Providers

We share information with the technology providers below only as necessary to deliver the services described in this policy. We require them to protect it under contractual privacy and security obligations that provide the same or equal protection of your information as described in this policy, and we do not allow them to use it for their own advertising. The one exception is Meta, which receives the limited website and link information described in its entry below to measure and deliver our own ads.

AI Providers

These providers receive information only after a parent has agreed, as described above.

OpenAI

Live voice conversations with Mai

What it receives: Your child's voice while they talk with Mai, what they type, photos you choose to share in a conversation, and the learning context Mai needs to respond (such as your child's first name, age or grade, interests, learning preferences, and the lesson in progress).

Why: To understand your child, turn their speech into text, and generate Mai's spoken replies in real time.

Model training: OpenAI does not use data sent through its API to train its models unless a customer opts in. Mai School has not opted in.

Retention: OpenAI may keep API inputs and outputs for up to 30 days to monitor for abuse, after which they are deleted unless the law requires longer.

Google Gemini

Lessons, personalization, and safety checks

What it receives: Your child's profile details (such as first name, age or grade, interests, and learning preferences), conversation transcripts, lesson requests, and content you or your child add to an activity.

Why: To create and personalize lessons, summarize what your child learned for you, recommend next activities, understand requests during a conversation, and check conversations for safety concerns.

Model training: Google does not use this data to train its models.

Retention: Google may keep this data for up to 30 days, after which it is deleted.

LiveKit

Real-time audio and video connection

What it receives: The live audio stream, and video if you turn on the camera, between your device and Mai, your device's IP address, and technical session information.

Why: To carry the conversation between your device and Mai in real time.

Retention: LiveKit passes audio and video through during the conversation; it is not recorded. We do not use LiveKit to record conversations.

Simli

Mai's animated face

What it receives: Mai's own spoken replies (generated audio, not your child's voice) and technical session information such as a session identifier and how long the session lasted. Simli does not receive your child's microphone audio, camera, profile, or conversation transcripts.

Why: To animate Mai's face so her lips move with what she says, and to stream that video into the conversation.

Retention: Simli processes this data only to render the video, under its agreement with us.

Other Service Providers

Microsoft Azure

Hosting and database

What it receives: The account, profile, and learning information described in this policy, including saved conversation transcripts.

Why: To run our servers and store your family's account securely.

Retention: Kept as described under "Data Retention and Deletion" below.

Google Firebase Analytics

App usage statistics

What it receives: Limited app events (such as the app being opened and subscription screens being viewed or purchased), an app-installation identifier, device type, operating system, and approximate location derived from your IP address. We do not send names, email addresses, or conversation content to Firebase.

Why: To understand how the app is used and fix problems.

Retention: Kept according to Google's Firebase data-retention settings.

Apple and Google sign-in

Account sign-in

What it receives: The sign-in request you start, and returns your name and email address (or Apple's private relay address) to us.

Why: To let you sign in without a separate password.

Retention: Governed by Apple's and Google's own privacy policies.

Apple App Store, Google Play, and Stripe

Payments

What it receives: Your purchase and billing details. Purchases in the app are handled by Apple or Google, and purchases on our website by Stripe. We never see your full card number.

Why: To process subscriptions.

Retention: Governed by Apple's, Google's, and Stripe's own privacy policies.

SendGrid (Twilio)

Email

What it receives: Your email address and the content of emails we send you.

Why: To send account emails and, if you have not opted out, updates about Mai School.

Retention: Kept while you receive emails from us.

Google Analytics and Google reCAPTCHA

Our website only

What it receives: Pages visited, time on pages, browser and device type, and IP address. reCAPTCHA checks form submissions for spam.

Why: To understand how our website is used and protect our forms from abuse.

Retention: Governed by Google's own privacy policy.

Meta (Facebook and Instagram)

Ad measurement, our website and links only

What it receives: The page you opened or the link you tapped (with its campaign tags), the time, your IP address, browser type, and Meta's cookie or click identifiers. We never send names, email addresses, children's information, or conversation content.

Why: To see which of our ads work and to show our ads to people who have already visited our website.

Retention: Governed by Meta's own privacy policy and terms.

Lesson pictures and videos: To add images and videos to lessons, we search services such as YouTube, Pexels, and Unsplash using the lesson's topic. These searches are about the subject being taught, not about your child.


Children's Privacy

Mai School is designed for families with children, including children under 13, and we take children's privacy extremely seriously. Mai is designed to follow the Children's Online Privacy Protection Act (COPPA):

  • A parent or guardian sets up Mai and must agree before any of their child's information is shared with an AI provider
  • If a child starts the app on their own, we store only a placeholder name until a parent links their account. The child's other details stay on the device until then.
  • Parents decide which features their children can use, and can review their child's conversations, lessons, and progress in the app
  • Parents can review, correct, or delete their child's information, and withdraw permission at any time
  • We only collect information necessary to provide educational services
  • We do not condition a child's participation on collecting more information than necessary
  • We do not show children advertising or sell their information

How We Protect Your Data

  • Encryption: Conversations and data are encrypted in transit
  • No Data Selling: We never sell your personal information or your child's data to third parties
  • Minimal Data Collection: We only collect information necessary to provide our services
  • Parental Control: Parents can see and manage their child's information and AI sharing
  • No Ads in Mai: We do not show advertisements in Mai, and we never share your child's information or conversations with advertisers. Our website uses the Meta pixel to measure our own ads, as described above

No system is completely secure, but we work hard to protect your family's information and will notify you as required by law if a breach affects it.


Data Retention and Deletion

  • Voice: We do not keep recordings of your child's voice.
  • Conversation transcripts: Saved to your family account so parents can review them and Mai can build on past learning. We keep them while your account is active, until you ask us to delete them.
  • Profiles and learning history: Kept while your account is active.
  • Our providers: OpenAI, Google, and our other providers may keep limited logs for the periods described above, under their own terms.

Deleting your information: You can delete your parent account from the app's settings. To delete all of your family's information at once, including your children's profiles, conversations, and learning history, email us at support@mai.school from your account email. We will delete your personal information within 30 days of your request, except where we are required to retain it for legal or regulatory purposes (such as purchase records). Deleted information may remain in our encrypted backups for a short time before it is overwritten.

Deleting information from Mai School does not instantly delete short-term logs our providers keep under their own terms, but those logs expire on the schedules described above.


Your Rights

You have the right to:

  • Access: Request a copy of the information we hold about you and your child
  • Correction: Request that we correct any inaccurate information
  • Deletion: Request that we delete your or your child's personal information
  • Withdraw permission: Turn off AI sharing in Settings › Privacy & Terms at any time
  • Opt-Out: Unsubscribe from marketing communications at any time

To exercise any of these rights, please contact us at support@mai.school. You may have additional rights under the laws where you live, and we will honor them as required.


International Data Transfers

Mai School is based in the United States, and we and our providers process information in the United States and other countries where they operate. If you use Mai from outside the United States, your information will be transferred to and processed in those countries, with the protections described in this policy.


Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. If a change affects what we share with AI providers, we will also ask for your permission again in the app. We encourage you to review this Privacy Policy periodically.


Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Mai School Inc.

Email: support@mai.school