01Who we are
Maya, this website (themaya.site), the Just Maya app and their servers are run by Xentoryx Labs, Bangladesh.
02Orders on this website
When you order, we collect your name, phone number, email address, delivery address and the edition you chose. We use them only to confirm your order, deliver it and contact you about it.
You pay on delivery or by bKash. This website never asks for your bKash PIN or card details.
03Your app account
When you register in the app we store your name, email address and a hashed version of your password. We never store your password in readable form. We use this to sign you in, to link robots to you and to let other people share a robot with you by email address.
04Data from your robot
While a robot is paired, it sends us technical and usage data: its device ID and firmware version, whether it is online, Wi-Fi signal strength, free memory and uptime, its current mood and screen, the city and coordinates you choose for the weather display, the focus (Pomodoro) sessions you complete and your game high scores. This powers the dashboard and statistics in the app.
The robot keeps your Wi-Fi name and password on the device itself to connect to your network. They are not sent to our servers.
05Notification forwarding
Only if you turn on notification forwarding and grant Android's notification access, the app reads notifications from the apps you pick and shows them on your robot. They go to your robot and are not stored on our servers. You can turn this off or change the apps at any time.
06Phone permissions
Bluetooth and nearby-device access are used to find and set up your robot. The camera is used only to scan the QR code on the robot's screen; the images stay on your phone. Location, if you allow it, is used to pick a city for the weather display.
07Services we use
Your account and robot data are stored on our own servers. Weather and city search come from the Open-Meteo public service, using the coordinates you choose. Push notifications to your phone are sent through Firebase Cloud Messaging (Google), which receives your phone's notification token. Orders from this website are stored in a hosted database.
We do not sell your information and we do not use it for advertising.
08Security
Passwords are hashed with a modern algorithm, app sessions use short-lived tokens, and the robot talks to our servers over encrypted connections that check the server's certificate. Every message to and from a robot is signed so tampering can be detected, and each robot can only see its own messages. No system is perfectly secure, but we work to protect your data and fix problems quickly.
09Keeping and deleting your data
We keep account data while your account exists. You can delete your account in the app under Settings → Manage Profile & Account → Delete Account. This removes your profile, signs you out everywhere and releases your robots so they can be set up again.
To have your order details removed, contact us at xentoryxlabs@gmail.com. We may keep what the law requires for sales records.
10Children
App accounts are for adults. Children can enjoy Maya with a parent or guardian's account.
11Changes and contact
If this policy changes, we update the date above and, for important changes, tell you in the app.
Questions: xentoryxlabs@gmail.com · WhatsApp +880 1892-126867