Privacy Policy

Effective Date: May 2026

This Privacy Policy elucidates the practices regarding the collection, processing, storage, and transfer of personal data as mandated by the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Definitions

  • "Data Principal" refers to You, the User interacting with the Platform.
  • "Data Fiduciary" refers to Project Maa, the entity determining the purpose and means of processing personal data.
  • "Data Processor" refers to third-party entities (e.g., ElevenLabs) processing data on behalf of the Data Fiduciary.

2. Consent and Lawful Basis for Processing

By initiating a voice interaction with the Platform, the Data Principal provides explicit, affirmative consent for the collection and processing of their voice data and associated health-related information for the purposes specified herein.

3. Data Collection and Purpose Limitation

The Data Fiduciary collects the following categories of data:

  • Audio Data & Transcripts: Real-time voice inputs and subsequent text conversions.
  • Volunteered Health Data: Information voluntarily disclosed by the User regarding pregnancy or pediatric health.
  • Technical Metadata: IP addresses, timestamps, and browser configurations.

The data is processed strictly for the following purposes:

  • Service Fulfillment: Facilitating real-time, low-latency conversational responses utilizing third-party Data Processors.
  • Algorithmic Training (Machine Learning): Transcripts derived from user calls are explicitly utilized to train, fine-tune, and improve the AI model's accuracy, empathy, and contextual understanding.
  • Quality Assurance: Internal auditing to ensure compliance with medical safety standards.

4. Data Anonymization and Protection

Prior to the utilization of any conversational data for AI model training, the Data Fiduciary undertakes rigorous anonymization protocols to permanently strip Personally Identifiable Information (PII) from the transcripts, ensuring the Data Principal cannot be reasonably identified from the training dataset.

5. Third-Party Data Processors

The Platform utilizes specialized Data Processors (including, but not limited to, ElevenLabs) for Speech-to-Text (STT) and Text-to-Speech (TTS) functionalities. These Data Processors are contractually bound to process the audio data solely for the provision of the requested service and are prohibited from retaining the audio data for independent commercial exploitation or training of their proprietary models outside the scope of the agreement with Project Maa.

6. Rights of the Data Principal

Subject to the provisions of the DPDP Act, 2023, the Data Principal possesses the following rights:

  • Right to Access: To obtain confirmation regarding the processing of personal data and a summary thereof.
  • Right to Correction and Erasure: To request the rectification of inaccurate data or the deletion of conversational history.
  • Right to Withdraw Consent: To withdraw consent at any time, acknowledging that such withdrawal may result in the termination of the User's ability to utilize the voice-first service.

7. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed strictly in accordance with the laws of the Republic of India. Any legal suit, action, or proceeding arising out of or relating to this policy shall be instituted exclusively in the competent courts located in New Delhi, Delhi, India.

8. Grievance Redressal

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, if You have any grievances regarding the processing of Your personal data, You may contact the designated Grievance Officer at the official contact email provided on the Project Maa website.