Privacy Policy

Last updated: May 23, 2026

This Privacy Policy describes how Maati ("we", "us", or "our") collects, uses, and protects information when you use the Maati mobile application ("App"). Maati is a point-of-sale and business management tool designed for small and home-based businesses.


1. Information We Collect

Account Information

When you create an account we collect your email address, password (stored as a secure hash by Firebase Authentication), and display name.

Business Data You Enter

All data you enter into the App is stored on your behalf and scoped to your account. This includes:

We do not read or use this business data for any purpose other than providing the App's features to you.

Photos and Files

With your permission, the App accesses your device camera and photo library to capture product photos and receipt images. Photos are uploaded to secure cloud storage solely to support the App's AI auto-fill and receipt-storage features. You can delete a receipt photo at any time from within the App.

Location

The App requests foreground location access in one circumstance: Tap to Pay (Stripe Terminal) — Stripe Terminal requires location access to comply with card-network rules for in-person payments. Location data is not stored on our servers.

AI Feature Usage

When you use an AI feature (product photo classification or receipt auto-fill), the relevant photo or document is sent to the AI provider you have configured (Anthropic or Google). We record a count of AI feature calls per account for internal billing purposes only — no photo content is retained by us.

No Advertising or Tracking

We do not collect advertising identifiers, use third-party advertising SDKs, or track you across other apps or websites.


2. How We Use Your Information

PurposeData used
Authenticate your accountEmail, password hash
Provide and sync app featuresAll business data you enter
AI auto-fill (product descriptions, receipt parsing)Photos/documents you submit to the feature
In-person card paymentsStripe Terminal (location, payment amount)
Internal usage monitoringAggregated AI call counts

3. Data Sharing and Third Parties

We share data only with the service providers necessary to operate the App:

ProviderPurposePrivacy Policy
Google Firebase (Auth, Firestore, Cloud Storage, Cloud Functions) Authentication, data storage, backend logic firebase.google.com/support/privacy
Anthropic AI photo and receipt analysis (if Anthropic is selected as your AI provider) anthropic.com/privacy
Google Gemini AI photo and receipt analysis (if Gemini is selected as your AI provider) ai.google.dev/gemini-api/terms
Stripe In-person payment processing stripe.com/privacy

We do not sell, rent, or trade your personal information to any third party.


4. Data Retention and Deletion

Your data is retained for as long as your account is active. You may request deletion of your account and all associated data by clicking "Delete my account" in the settings section of the App. You can also contact us at the address below. Note, however, that out-of-app requests will involve more steps to validate the request. We will strive to process deletion requests within 30 days. Stripe may retain payment records as required by financial regulations. After we delete the data, we will lose all access and visibility, however, the underlying storage services and devices may retain data for longer duration.


5. Security

All data is transmitted over HTTPS/TLS. Firestore security rules enforce strict per-account isolation — no account can access another account's data. Firebase Authentication manages credential security. Receipt photos and product images are stored in Firebase Cloud Storage with access restricted to the account that uploaded them.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.


6. Children's Privacy

The App is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.


7. Your Rights

Depending on your jurisdiction, you may have the right to:

To exercise any of these rights, contact us at the address below.


8. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes acceptance of the updated policy.


9. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact:
Maati Ceramics, Inc. — [email protected]