Last updated: 28 September 2026
1. Who we are
This policy covers the Maika mobile app for iOS and Android (the “App”) and the maika-ai.com website (the “Website”), including its newsletter signup and contact form. The App and Website are provided by Maika GmbH, c/o Anna Karcher, Am Furtbach 4, 8106 Adlikon b. Regensdorf, Switzerland (UID CHE-313.173.143) (“Maika”, “we”, “us”). We are the controller responsible for your personal data.
Questions or requests about your data: info@maika-ai.com. Your use of the App is also governed by our Terms of Service.
In short: face and voice recordings are used only to calculate your results and are discarded right after processing. We never sell your data or use it for advertising. Usage statistics and crash reports are only collected if you allow them. You can delete your account and its data from inside the App at any time.
2. Maika is a wellness app, not a medical device
Maika estimates how relaxed or activated you are to personalise music. Its readings (such as arousal, mood, heart rate and heart rate variability estimates) are for general wellbeing only. They are not a diagnosis and must not be used to make medical decisions.
3. What we collect and why
| Data | What it includes | Why we use it |
|---|---|---|
| Account | Email address and password (email sign-up), or the name, email and profile picture shared by Google, Apple or Facebook when you sign in with them; a user ID. | To create and secure your account and sign you in. |
| Profile | Year of birth / age, sex, activity level and music preferences you enter during onboarding. | To calibrate your readings and recommend music. |
| Face scans | Short front-camera video clips recorded during a session. | Analysed on our servers to estimate your pulse, heart rate variability and arousal before and after music. See section 4. |
| Voice check-ins (optional) | Short microphone recordings. | Analysed on our servers to estimate your mood (valence). See section 4. |
| Session results | The resulting scores and labels, tracks played, listening time, the tags you chose and your ratings. | To show your results and history and improve music recommendations. |
| Approximate location (optional) | A single location reading at session start, only if you grant location permission. | To understand the context sessions happen in (for example indoors or while travelling). The App works fully without it. |
| Usage statistics & crash reports (optional) | Which screens and features are used, app performance, crash details, device model, operating system and app version, and approximate country or region derived from your IP address. | To find bugs and improve the App. Only collected after you tap Allow. See section 6. |
| Newsletter (optional) | Your email address, the time you signed up, whether you confirmed and whether you have unsubscribed. | To send you Maika updates by email after you confirm your subscription. See section 6a. |
| Contact form (optional) | The name, email address and message you enter. | To read and reply to your enquiry. |
| Website security | A bot check (Cloudflare Turnstile) when you submit a form, and a hashed form of your IP address, not the address itself, used to limit repeated submissions. | To keep our forms secure and prevent spam and misuse. |
4. Face and voice recordings
Your face and voice recordings are especially sensitive, so we handle them strictly:
- They are recorded only when you start a scan or voice check-in, and only after you have granted camera or microphone permission.
- They are sent over an encrypted connection to our analysis service, used only to calculate your results, and discarded right after processing. We keep the resulting scores, not the recordings.
- Voice recordings are also deleted from your device once they have been uploaded.
- We do not use your face or voice to identify or recognise you, and we do not build facial or voice profiles.
- Health-related estimates (such as heart rate, heart rate variability and mood) are sensitive data. We process them only with your explicit consent, which the App asks for on a separate screen before your first scan. We record the date and the version you agreed to. You can withdraw at any time by not scanning or by deleting your account.
5. Legal bases (EEA, UK and Switzerland)
- Contract: providing your account and the App’s features.
- Consent: the newsletter. You give it by subscribing and confirming, and can withdraw it at any time through the unsubscribe link.
- Explicit consent: face scans, voice check-ins and the health-related estimates derived from them; approximate location; usage statistics and crash reports. You can withdraw consent at any time without affecting processing that happened before.
- Legitimate interests: keeping the App, the Website and our systems secure and preventing misuse; replying to messages sent through the contact form.
- Legal obligation: where we must keep or disclose data by law.
6. Usage statistics and crash reports
The first time you open the App, we ask whether you want to share usage statistics and crash reports. Nothing is collected unless you tap Allow, and you can change your choice any time in Profile → Data & privacy → Share usage data.
If you allow it, we use Google Firebase Analytics, Crashlytics and Performance Monitoring. These are linked to your pseudonymous user ID (not your name or email) so we can match a crash to an account. They never include your recordings, scan results, health estimates, profile details or precise location. We do not use the advertising ID and do not track you across other companies’ apps or websites.
6a. Newsletter and contact form (Website)
If you subscribe to our newsletter, we first email you a confirmation link and only add you to the list once you click it. Each email includes an unsubscribe link, and you can also unsubscribe at any time by emailing info@maika-ai.com. We use your address only to send Maika updates and the related confirmation email; we do not sell it or share it for advertising. After you unsubscribe we keep your address on a do-not-email record so that we do not contact you again, unless you ask us to delete it.
If you use the contact form, your name, email address and message are sent to our inbox so we can reply. Please do not include sensitive information in your message. Newsletter subscriber details are stored in our backend database, alongside the data described above, and both forms are processed by our backend and delivered through Resend.
Both forms are protected by Cloudflare Turnstile, which checks that you are not a bot and may process technical signals from your browser. To limit abuse, we store a hashed form of your IP address for up to 24 hours.
7. Who we share data with
We do not sell your personal data or share it for advertising. We share it only with service providers who process it on our behalf and under contract:
- Supabase: account sign-in and database.
- Google Cloud: hosting of our app backend and our face and voice analysis.
- Google Firebase: usage statistics, crash reports and performance data (only if you allow it).
- Cloudflare: hosting of this Website, Turnstile bot protection and abuse rate limiting.
- Resend: delivery of our transactional emails, including newsletter confirmations and replies to your messages.
- Google, Apple or Facebook: only if you choose to sign in with them. Their own privacy policies apply to their services.
We may also disclose data if required by law or to protect the rights and safety of our users.
8. Where your data is processed
We store and process your data in Switzerland and the European Union. Some providers (such as Google, Cloudflare and Resend) may process data outside your country, including in the United States. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
9. How long we keep data
- Face and voice recordings: discarded right after processing.
- Account, profile and session results: until you delete your account.
- Newsletter: until you unsubscribe, after which we keep only your address on a do-not-email record (or delete it if you ask).
- Contact messages: as long as needed to handle your enquiry.
- Usage statistics: up to 2 months. Crash reports: up to 90 days.
10. Your choices and rights
- Permissions: camera, microphone and location can be turned off at any time in your device settings. Voice check-ins and location are optional.
- Usage data: turn Share usage data on or off in the App.
- Newsletter: unsubscribe using the link in any of our emails, or email info@maika-ai.com.
- Delete your account: Profile → Delete Account permanently deletes your account and your sessions, results and health profile, and clears usage data stored on your device. Usage data already shared can no longer be linked to you.
- Your rights: depending on where you live, you can ask to access, correct, delete, restrict or export your data, or object to its processing. Email info@maika-ai.com; we will reply within 2 working days.
- Complaints: you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or to the data protection authority in the country where you live or work.
11. Children
The App is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
12. Security
Data is encrypted in transit, access to our systems is restricted, and each account can only access its own data. No system is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.
13. Changes to this policy
We may update this policy as the App changes. We will change the date at the top and, for significant changes, let you know in the App before they take effect.
14. Contact
Maika GmbH
c/o Anna Karcher
Am Furtbach 4
8106 Adlikon b. Regensdorf, Switzerland
UID CHE-313.173.143
info@maika-ai.com