privacy policy

The House of Maria · last updated: august 4, 2026

this is the full version of how your information is handled at maria. it replaces the short transparency page we used during the prototype. we've written it in plain language on purpose, and kept it accurate to how the product actually works today rather than how we hope it will work later.

who we are

maria is built by The House of Maria, a company incorporating in delaware, united states. when this policy says "we" or "us," that is who we mean. maria is the ai companion you talk to. The House of Maria is the company behind her. if you have any question about your data, you can reach juanita at juanita@thehouseofmaria.com or daniela at daniela@thehouseofmaria.com.

what maria collects

• what you tell her: your messages, check-ins, voice notes, and anything you share about how you feel or what is happening in your body
• your cycle and any period dates you log
• the health profile you fill in when you set up maria, and can edit any time in settings: things like your date of birth, your cycle and birth control, sleep, movement, nutrition, alcohol, caffeine and nicotine, your work and living situation, and anything you add about your health history
• the more sensitive parts of that profile, if you choose to answer them: mental health conditions and history, eating disorder history, pregnancy status and pregnancy history, whether you have or want children, allergies, family medical history, your gender identity, sexual orientation, and race or ethnicity
• lab results and medical documents you choose to upload
• your phone number, so maria can reach you on whatsapp, and the email you use to sign in
• biometrics like sleep and readiness, only if you connect an oura ring
• calendar and email context, only if you connect a google account

every question in that profile is optional. you can skip any of it and maria still works — she will simply know less. the sensitive questions are there because they change what is actually true for your body: a woman in perimenopause, a woman recovering from an eating disorder, and a woman trying to conceive are not asking the same question even when they use the same words. we ask so maria does not give you generic answers, not so we can build a file on you.

we don't ask for more than maria needs to do her work with you.

how your information is used

we use what you share to let maria do the thing she is for: respond to you, hold your context over time so you are not starting over every conversation, transcribe your voice notes so she can read them, and surface things like upcoming appointments. a small authorized team also reviews some of what maria sends, for quality and safety, using an internal tool that keeps your information inside our own systems. we do not use your information to sell you anything, and we do not hand it to advertisers.

who processes your data

to make maria work, your information is handled by these services:

• amazon web services (aws) stores everything: your messages, your health information, and any documents you upload, all encrypted. aws also runs the ai model (claude) that writes maria's responses, inside our own protected infrastructure, so your words are not sent out to a separate ai company.
• twilio delivers maria's messages to you on whatsapp.
• deepgram turns your voice notes into text.
• google provides your calendar and email context, only if you choose to connect your account.
• oura provides your sleep and readiness data, only if you choose to connect your ring.
• langfuse measures how fast and how large our ai requests are. it never receives your messages or maria's replies.

each of these only receives what it needs for its piece of the job. we sign data-protection agreements with the processors that handle your health information.

google data, and how we use it

if you connect a google account, maria reads limited information from your google calendar and gmail to give you appointment and scheduling context, for example noticing an appointment confirmation so you do not have to enter it by hand. nothing flows from google unless you connect your account, and you can disconnect at any time.

our use of information received from google apis follows the google api services user data policy, including its limited use requirements. specifically:

• we do not sell your google data
• we do not use it for advertising
• we do not transfer it to others except as needed to provide or improve maria's features for you, for security, or to comply with the law
• we do not let humans read it, except with your consent, for security, to comply with the law, or in a form that no longer identifies you

who at maria can see your data

a small, authorized team at maria can view your account, including your health information, to provide support, review quality, and keep you safe. the team can never post or act as you. anything the team does do, like replying to your feedback, is always shown as coming from the maria team, never from you. every time a team member opens your account, it is recorded in an internal audit log.

what we never do

• we never sell or share your health data for advertising
• there are no ad trackers, no meta pixel, and no google ads anywhere in maria
• we don't use your data to train models for anyone else unless you explicitly opt in

how long we keep your data, and how to delete it

while your account is active, we keep your information so maria can stay continuous with you. you can delete everything at any time. when you ask us to delete your data, we remove it across every system we use to run maria.

we may keep anonymous, de-identified insights that can no longer be traced back to you, so we can understand how maria is working overall.

your choices

• you can connect or disconnect google and oura whenever you want. disconnecting stops any further data from flowing
• you can ask us for a copy of your information, or ask us to delete it, by writing to the contacts above
• maria is an ai companion, not a doctor or therapist. she won't diagnose or prescribe

how your data is protected

your information is stored encrypted, on a private network, with protections against accidental deletion. we limit who can reach it and we log internal access. no system is ever perfectly secure, but we treat your health information as some of the most sensitive data there is, and we build around that.

age

maria is for adults. you must be 18 or older to use her. we do not direct maria to children and we do not knowingly collect information from anyone under 18. if you believe someone under 18 has used maria, write to us and we will remove their information.

changes to this policy

as maria grows, this policy will change with her. when it does, we will update the date at the top, and for anything material we will tell you directly rather than quietly editing the page.

questions

write to juanita@thehouseofmaria.com or daniela@thehouseofmaria.com.

if you are ever in crisis, please contact a professional or call or text 988.