Privacy Policy

This Privacy Policy describes how JOININYO LTD, a Delaware corporation operating as "inyo" ("inyo," "we," "us," or "our"), collects, uses, shares, and protects information about you when you join our waitlist, use Mavis (our AI coach), use our SMS-based matchmaking service, visit our website at joininyo.com, or otherwise interact with us (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

inyo runs over text message. We offer two integrated services: Mavis, our AI coach who talks with you about your relationships, dating life, and personal development; and Matchmaking, where we match you with other users in cities we serve. We collect your phone number, your conversations with Mavis, photos and voice notes you send us, your match feedback, and basic profile information. We use this to coach you, match you, and improve the Service. We don't sell your data. Mavis is an AI character. She is not a licensed therapist or mental health professional, and conversations with her are not therapy or medical care. If you ever express that you may be in crisis, Mavis will direct you to professional crisis resources (988, Crisis Text Line). You can delete your data anytime by emailing us, and you can opt out of SMS by texting STOP. If you choose to connect Onairos (an optional partner) on our landing page, your selected social or AI accounts will share personality signals with us through them — you control which platforms, if any.

1.1 Information You Provide Directly

When you sign up, use, or interact with the Service, you may provide us with the following types of information:

• Contact information: phone number, email address, first name (and last name if you choose to share it).
• Profile information: age, gender, photos, voice notes, location (neighborhood-level), occupation, and any details shared in onboarding.
• Onboarding answers: your responses to our onboarding questions about values, preferences, dating history, and what you're looking for.
• SMS conversation content: the text messages you exchange with the inyo number — including messages with Mavis, match-related messages, and any photos, voice notes, or media you send.
• Mavis conversation history: all text and voice content shared with Mavis (our AI coach), including reflections, questions, voice notes, and photos. This is treated as among the most sensitive information we hold (see Section 1.5).
• Match feedback: your YES/NO responses to match notifications, and any feedback you provide about dates or matches.
• Payment information: if you become a paying member, your payment is processed by Stripe; we do not store your full card details.
• Communications with us: support requests, feedback, survey responses, or any messages you send through email, SMS, or other channels.

1.2 Information Collected Automatically

When you use the Service, we may automatically collect:

• Device and usage information: your IP address, browser type, operating system, referring URL, pages viewed, and timestamps when you visit joininyo.com.
• SMS metadata: your phone number, message timestamps, delivery status, and carrier information (provided by our SMS provider, Twilio).
• Cookies and similar technologies: we use minimal cookies to remember your preferences and to measure landing-page conversions. We do not use behavioral advertising cookies.

1.3 Information from Third-Party Connectors (Optional — Onairos)

On our landing page, you may choose to connect your Onairos persona to enrich your matching profile. This is entirely optional. If you opt in:

• You will be redirected to Onairos's flow and asked to connect one or more of: Instagram, TikTok, or ChatGPT. You choose which (if any) of these to connect.
• Onairos will process data from the platforms you authorize and generate an anonymized personality profile (an "archetype," trait scores, and preference signals).
• Onairos shares only the resulting personality profile with inyo — not your raw posts, raw messages, raw conversations, or full account contents.
• We do not receive or store your Instagram posts, TikTok videos, or ChatGPT conversation contents.
• Onairos's collection, processing, and retention of your data is governed by Onairos's own Privacy Policy, available at onairos.uk/privacy. You should review it before connecting.
• You can disconnect Onairos at any time by emailing andy@joininyo.com or by managing your Onairos account directly. If you do not connect Onairos, no data is shared with Onairos and they receive nothing about you.

1.4 Information from Public or Referral Sources

If you sign up through a referral, partner venue, or creator code, we may receive limited information about how you were referred (such as the referral code or creator name). We do not purchase data about you from data brokers.

1.5 Mavis Conversation Data (AI Coach)

When you interact with Mavis, our AI coach, we collect and store the full conversation history, including:

• All SMS text content exchanged with Mavis;
• Voice notes you send to Mavis;
• Photos and other media you share with Mavis;
• Your responses to Mavis's prompts and questions;
• Mavis's responses generated for you;
• Metadata about the conversation (timestamps, message frequency, session length). How Mavis conversations are processed: Mavis's responses are generated using large language models, currently provided by Anthropic (Claude) and/or OpenAI (GPT). When you send a message to Mavis, the relevant portion of your conversation history is sent to these AI providers via their API to generate a response. We have data processing agreements with these providers that prohibit them from using your conversation data to train their models for any third party. We treat Mavis conversation data as among the most sensitive information we hold. Specifically:
• Mavis conversations are encrypted in transit and at rest.
• Access to Mavis conversation data within inyo is limited to authorized personnel only and is logged.
• We may anonymize and aggregate patterns from Mavis conversations to improve Mavis's quality (for example, to identify common scenarios where her responses can be improved). Anonymized aggregate analysis does not identify individuals.
• We do not share individual Mavis conversations with other users, with matches, with advertisers, with researchers, or with any third party — except (a) with our subprocessors as required to operate the Service, (b) where you give us explicit consent, or (c) where legally compelled.
• We may share anonymized Mavis conversations with our clinical advisors for safety review and methodology improvement. These advisors are bound by confidentiality agreements.

We use the information we collect for the following purposes:

• To provide the Service: to onboard you, deliver Mavis conversations, deliver match notifications by SMS, send and receive messages, and operate inyo's coaching and matchmaking processes.
• To operate Mavis: to enable conversations with our AI coach, generate responses tailored to you, remember context across conversations, and support your development over time.
• To match you with other users: we use your onboarding answers, profile information, photos, voice notes, Mavis conversation patterns (where you have engaged with Mavis prior to matching), and (if connected) Onairos personality signals to identify potentially compatible matches.
• To improve the Service: we analyze aggregate usage and matching outcomes to improve our matching, onboarding, Mavis's coaching quality, and product experience. We do not share individual conversations with anyone outside our internal team and our service providers.
• To communicate with you: to send transactional messages (Mavis messages, match notifications, account updates, billing), to respond to your support requests, and to send service announcements.
• To process payments: if you become a paying member, we use your payment information (via Stripe) to process subscription charges.
• To detect and respond to crisis situations: if Mavis detects language in your messages suggesting you may be in a mental health crisis, may harm yourself or others, or may be in immediate danger, we may pause the AI conversation and provide you with crisis resources. We may also flag the conversation for human review by authorized inyo personnel to ensure safe handling.
• To prevent fraud, abuse, and harm: we may use your information to detect, investigate, and prevent fraudulent, harmful, unauthorized, or illegal activity, and to protect the safety of our users.
• To comply with legal obligations: to comply with applicable laws, regulations, legal processes, or governmental requests.
• With your consent: for any other purpose disclosed to you at the time we collect your information, where we obtain your consent. We do not sell your personal information. We do not use your personal data to train generative AI models for any third party. We do not share your Mavis conversations, match conversations, or onboarding answers with advertisers.

inyo is an SMS-based service. By providing your phone number and joining the Service, you expressly consent to receive recurring text messages from inyo at the phone number you provide. This includes Mavis coach messages, match notifications, onboarding messages, service updates, and (if you opt in) periodic check-ins from our "loyalty engine." Consent is required to use the Service because the Service operates over SMS.

• Message frequency varies based on your activity, match availability, Mavis engagement, and overall engagement.
• Message and data rates may apply per your mobile carrier's plan. inyo does not charge for SMS messages, but your carrier may.
• For help, reply HELP to any message from inyo, or email andy@joininyo.com.
• Supported carriers include AT&T, T-Mobile, Verizon, Sprint, US Cellular, and most other major US carriers. Carriers are not liable for delayed or undelivered messages.

3.1 How to Opt Out (STOP)

You may opt out at any time, for any reason, with no penalty. To opt out, reply STOP to any message from inyo. You may also reply STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT — all of these will be honored as opt-out requests. What happens when you opt out:

• You will receive one final confirmation message acknowledging your opt-out. No further messages will be sent after that confirmation — not Mavis messages, not match notifications, not check-ins, not loyalty engine messages, not promotional content, not service updates, not anything.
• Your opt-out takes effect immediately upon our system processing your STOP request (typically within seconds, never longer than a few minutes).
• Opting out via SMS will end your active use of the Service, since the Service operates over SMS. We will pause Mavis, pause matching, suspend any active subscription billing, and treat your account as inactive.
• If you wish to also delete your data from inyo (in addition to stopping messages), email andy@joininyo.com with a deletion request. Opting out of SMS alone stops messages but does not automatically delete your stored data — we retain it in case you wish to return, until you ask us to delete it.
• If you change your mind and want to receive messages again, you must opt back in by texting START to our number or by signing up again at joininyo.com. We will not send you any messages until you affirmatively opt back in. We honor opt-outs absolutely. Once you opt out, we will not contact you by SMS for any reason — including marketing, surveys, win-back offers, or service notices — unless and until you opt back in. This is your right under federal law (the Telephone Consumer Protection Act) and we treat it as non-negotiable. We retain SMS consent and opt-out records for at least four (4) years as required under the Telephone Consumer Protection Act (TCPA) and FCC regulations.

We share your personal information only in the following limited circumstances:

4.1 With Other inyo Users (Match Recipients)

When we identify a potential match, we share a curated subset of your profile with the other person, including: your first name, age, neighborhood, photos you've approved for match-sharing, voice notes (where applicable), and selected highlights from your onboarding answers. We do not share your phone number, exact location, last name, full onboarding responses, or any Mavis conversation content with other users. Mavis conversations remain entirely between you and Mavis.

4.2 With Service Providers (Subprocessors)

We share information with trusted third-party service providers who help us operate the Service. Each is contractually bound to use your information only as instructed by inyo and to maintain reasonable security measures. Our current subprocessors include: Subprocessor — Purpose — Data Shared

• Twilio — SMS delivery — Phone number, message content
• Supabase — Database & auth — Profile data, onboarding answers, conversation history
• Anthropic — AI response generation for Mavis — Relevant Mavis conversation context
• OpenAI — AI response generation for Mavis (alternate model) — Relevant Mavis conversation context
• Stripe — Payment processing — Payment details (PCI-compliant)
• Vercel — Web hosting — IP, browser, basic logs
• Onairos (optional only) — Persona enrichment — Only if you opt in
• Email/CRM tools — Transactional email — Email, name We update this list as our service providers change. You can request the current list at any time by emailing andy@joininyo.com. Our agreements with Anthropic and OpenAI prohibit them from using your conversation data to train models for any third party. We may switch between AI providers or add new ones to improve Mavis's quality; if we add a new AI subprocessor, we will update this Privacy Policy.

4.3 With Onairos (Only If You Opt In)

If you choose to connect Onairos on our landing page, Onairos will receive the platform authorization tokens you grant (Instagram, TikTok, and/or ChatGPT) and use them to generate a personality profile. Onairos shares the resulting profile with inyo. If you do not opt in, no data flows to Onairos. Onairos's use of your data is governed by Onairos's privacy policy, which you should review before opting in.

4.4 With Clinical Advisors (Anonymized Only)

We engage licensed clinical psychologists and other qualified advisors to shape Mavis's design, methodology, and safety protocols. From time to time, anonymized Mavis conversations may be shared with these advisors for safety review, quality improvement, and methodology audits. Such conversations are stripped of identifying information before review. Our clinical advisors are bound by confidentiality agreements. They do not have access to your phone number, name, or any information that would identify you as the user.

4.5 For Legal Reasons

We may disclose your information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Service; (c) detect, prevent, or address fraud, security, or technical issues; (d) protect against harm to the rights, property, or safety of inyo, our users, or the public.

4.6 In Connection with a Business Transaction

If JOININYO LTD is involved in a merger, acquisition, financing, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you (by email or prominent notice on our website) of any such transfer and of any choices you may have regarding your information.

4.7 With Your Consent

We may share your information with third parties when you give us specific consent to do so.

We retain your information for as long as your account is active or as needed to provide the Service. Specific retention periods include:

• Active account data (profile, photos, onboarding answers, match history): retained while your account is active.
• Mavis conversation history: retained while your account is active to provide continuity. After account inactivity of 12 months, Mavis conversations are deleted unless legally required to retain longer.
• SMS conversation logs (non-Mavis): retained for up to 12 months after your last activity, then deleted unless legally required to retain longer.
• SMS consent and opt-out records (TCPA): retained for at least 4 years after consent withdrawal, as required by federal regulation.
• Payment records: retained for 7 years to comply with tax and accounting requirements.
• Account deletion requests: we delete your personal information, including Mavis conversation history, within 30 days of a verified deletion request, except for data we are legally required to retain.
• Anonymized aggregate data (e.g., overall match rates, aggregate Mavis usage patterns) may be retained indefinitely as it does not identify any individual.

Depending on where you live, you may have specific rights regarding your personal information. inyo honors the following rights for all users, regardless of location:

• Right to access: request a copy of the personal information we hold about you, including your Mavis conversation history.
• Right to correct: request that we correct inaccurate or incomplete information.
• Right to delete: request that we delete your personal information, including all Mavis conversation history.
• Right to data portability: request your information in a portable, machine-readable format.
• Right to withdraw consent: withdraw any consent you previously gave (e.g., disconnect Onairos, opt out of SMS, end your Mavis subscription).
• Right to opt out of certain processing: opt out of optional processing such as marketing emails or partner integrations.
• Right to non-discrimination: we will not discriminate against you for exercising any of these rights.

6.1 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what categories of personal information we collect, the right to limit use of sensitive personal information, and the right to opt out of "sharing" for cross-context behavioral advertising. inyo does not sell personal information and does not engage in cross-context behavioral advertising. For California residents using Mavis: we treat your Mavis conversation history as "sensitive personal information" under the CCPA/CPRA. You have the right to limit our use of this information to what is necessary to provide the Service.

6.2 EU/UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR, including the rights described above plus the right to lodge a complaint with your local data protection authority. The legal bases on which we process your data include: performance of a contract (to provide the Service); your consent (for SMS, Mavis, optional partners, and marketing); our legitimate interests (operating, securing, and improving the Service); and compliance with legal obligations.

6.3 How to Exercise Your Rights

To exercise any of these rights, email andy@joininyo.com with your request. We will verify your identity and respond within 30 days (or 45 days where permitted by law). You may also opt out of SMS at any time by replying STOP, after which no further messages of any kind will be sent.

The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not use the Service. If we become aware that we have collected information from a person under 18, we will delete it promptly. If you believe a minor has provided us with personal information, please contact andy@joininyo.com.

We use commercially reasonable technical and organizational measures to protect your personal information, including encryption in transit (TLS), encryption at rest for sensitive data (including all Mavis conversation history), access controls, audit logging, and routine security review. We operate to HIPAA-equivalent security standards even though inyo is not a HIPAA-covered entity, given the sensitive nature of Mavis conversations. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. You are responsible for keeping your phone number and any account credentials confidential. If we become aware of a security breach affecting your personal information, we will notify you in accordance with applicable law.

JOININYO LTD is incorporated in Delaware and operates in the United States. If you are accessing the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country. For users in the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

This section is important. Please read it carefully. Mavis is an artificial intelligence character designed for general wellness, coaching, and personal reflection on relationships and personal development. Mavis is not a licensed therapist, psychologist, counselor, psychotherapist, social worker, or any other licensed mental health professional. Mavis does not provide medical advice, psychological treatment, psychotherapy, diagnoses, prescriptions, or any other regulated clinical service. Information shared with Mavis is not protected by patient-clinician privilege. inyo is not a healthcare provider, a covered entity under HIPAA, or a clinical service. We are a consumer wellness product. If you are experiencing a mental health crisis, thoughts of self-harm, thoughts of harming others, or any emergency:

• Call or text 988 — the Suicide and Crisis Lifeline (United States)
• Text HOME to 741741 — Crisis Text Line
• Call 911 — for any emergency requiring immediate response Mavis is designed to recognize language that suggests you may be in crisis and to direct you to these resources. If Mavis detects such language, she will pause the conversation, provide you with crisis resources, and may flag the conversation for review by authorized inyo personnel. inyo does not provide emergency services and cannot be relied on for any safety-critical decision. Geographic availability: At launch, Mavis is not available to users with phone numbers registered in Illinois or Nevada due to state-specific AI mental health regulations. We are monitoring the regulatory landscape and may expand availability in the future. Users in these states may join a waitlist at joininyo.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by SMS (if you have not opted out), email, or by posting a prominent notice on joininyo.com at least 14 days before the changes take effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: JOININYO LTD (operating as "inyo") Delaware Corporation · EIN 42-2102851 Email (all inquiries — including privacy, support, safety, and Mavis-related): andy@joininyo.com Website: joininyo.com For crisis or safety concerns about yourself or others, please contact 988 (Suicide and Crisis Lifeline), Crisis Text Line (text HOME to 741741), or 911. inyo is not an emergency service.