AYWA Draft

Privacy Policy

How the AYWA app handles your data: what we collect, why, who receives it, how long we keep it and how to delete it.

DraftVersion 0.2 · 9 November 2026

Who we are

AYWA is an app of MOLTRIC LTD, company no. 517359857, Israel (“we”). We are responsible for the personal data described here. Contact: support@aywa-ai.com.

AYWA reads your bills, then its AI agent calls the providers you choose (mobile, TV and internet, electricity, insurance and more) on your behalf to ask for a better offer. Only you approve an offer. We do not promise that a saving will be found, nor its size.

In short

  • Your mobile number is never stored in clear: we keep a keyed hash and its last four digits.
  • A statement photo or PDF is read in memory and never saved. Card numbers are hidden: only the last 4 digits are kept.
  • Your contacts stay on your phone. The app has no location permission.
  • Voice mode uses your phone’s own speech recognition. The app does not record, store or send sound.
  • Payments go through the App Store or Google Play. We never receive your card number.
  • We do not sell your data and do not use it to train AI models.
  • You can delete your account in the app at any time, or ask us by email.

What we collect and why

DataWhyWhere it comes from
Mobile number (stored as a keyed hash + last 4 digits)Sign-in with an SMS code; given to a provider, with your name, to identify your account when we call for youYou
Country, city, languageTo show the right providers, currency and languageYou (a form; no location permission)
Bills read from your statements: category, monthly amount, currency, card last 4 digits and the masked lines they came fromTo find your regular bills and show where you can saveYour statement photo or PDF
Full name and email addressTo sign the terms and power of attorney and email you your signed copyYou, when you sign
Signing evidence: time, device id and model, app version, IP address, consents, your drawn signature (or, for voice signing, the words recognised on your phone), and the PDFProof of what you signed and whenYour phone, when you sign
Membership: store, plan, status, end date, the store’s purchase referenceTo give you access you paid forApp Store / Google Play
Calls we make for you: recordings, transcripts and the result summaryTo document offers and what was saidThe call
Security log: IP address, time, the request and its resultTo block abuse and investigate incidentsYour phone’s connection

What we do not collect

  • Your location: the app has no location permission.
  • Your contacts: the app may read them on your phone to recognise companies you deal with; they are not sent to us.
  • Sound from your microphone: nothing is recorded, stored or sent by the app.
  • Statement files: the photo or PDF itself is never written to our disk.
  • Full card numbers, from statements or from purchases.
  • Advertising identifiers: the app contains no advertising or analytics tracking tools.

Phone permissions

PermissionUsed for
CameraTo photograph a card statement or a bill. Card numbers are hidden and the photo is deleted after reading.
Photos / filesTo choose a statement you already saved.
ContactsTo recognise the companies you already deal with. Contacts stay on your phone.
Microphone and speech recognitionOnly in voice mode, to hear your spoken answers. Your phone recognises the words; the app keeps only the words, never sound.

Every permission is optional. You can refuse or withdraw it in your phone’s settings; the app still works with typing and file upload.

Statements and card numbers

  • The file is read in our server’s memory and dropped. It is never saved to disk.
  • Location and camera data (EXIF/GPS) is removed from photos before they are read.
  • Text from a PDF is masked before it leaves our server: card numbers, IBANs, ID, account and phone numbers are hidden. Dates and amounts stay.
  • A photo is sent to the reading service as a picture, without its metadata; card numbers in what comes back are masked.
  • Before anything is stored, card numbers are masked again: only the last 4 digits survive.
  • The masked lines of a statement are kept 30 days. The bills found in them stay until you delete your account.

Voice mode and voice signature

In voice mode your phone’s own speech recognition turns your answer into words, on the device where the phone supports it. If your phone needs its maker’s online recogniser, the app asks you first; that is your phone maker’s service, not ours. The app never records or uploads audio, and our server refuses any request that carries audio.

The app speaks to you in its own voice. A spoken line that contains a personal detail (such as your name or city) is created on our server and deleted after 15 minutes.

If you sign by voice, we keep the words recognised on your phone and a fresh SMS code confirmation, never a recording.

Calls on your behalf

The agent calls only the providers you choose, under the power of attorney you sign. It introduces itself as an AI assistant acting for you and gives each provider only the details that call needs. Calls leave from AYWA’s own phone number, not from yours.

Calls are recorded and transcribed to document offers; the agent says so at the start of the call. Call audio and transcripts are kept 7 days, and during that time you can download them in the app. Then they are deleted and only a written summary of the agreed result is kept, unless a law requires longer or they are needed for an open complaint.

Payments

The membership is bought in the App Store or Google Play. The store handles payment; we receive only the purchase reference and the membership status, never your card number. The store’s own privacy policy applies to the payment.

Who receives your data

  • The provider we call for you: only what that call needs.
  • Service providers working for us under contract and confidentiality: hosting, a sign-in verification service that sends SMS codes, a speech-recognition service, a voice service, an AI service that reads statements, our telephony provider and an email service.
  • Authorities, only where the law requires.

Some service providers process data in other countries, including the United States. They do so under contract, only to provide their service to us, and with safeguards required by law.

We do not sell your data. We use it only to provide the service. Marketing messages only if you ticked the separate consent.

How long we keep data

DataKept
Profile, bills read, membershipUntil you delete your account
Masked statement lines30 days
Statement fileNot kept (read in memory only)
SMS sign-in code10 minutes
Spoken lines with a personal detail15 minutes
Call recordings and transcripts7 days, then only the result summary
Signed documents and signing evidenceWhile your account is open and 7 years after it closes
Security log (IP address)Up to 90 days
Encrypted backupsUp to 35 days

Security

Phone numbers, SMS codes and sign-in tokens are stored only as keyed hashes. Sign-in tokens are bound to your device and expire after one day. Data travels encrypted, our database files are readable only by the service, and backups are encrypted before they leave the server. Repeated wrong codes are blocked.

Your rights

You may ask to see the data we hold about you, to correct it or to delete it (under the data protection law that applies to you), and you may withdraw a consent. You also have the other rights your local law gives you, such as data portability or complaining to your data-protection authority.

To delete your account and data, see Delete your account. For any other request write to support@aywa-ai.com. We may ask you to confirm you control the account’s mobile number.

You may revoke the power of attorney at any time in the app: Settings → My signed documents → Revoke power of attorney.

Changes to this policy

If we change this policy we will update the version and date above and tell you in the app before a material change takes effect.

Law and courts

The law of the country where you live applies, and disputes are heard by the competent courts of that country. This does not take away any right you have under the mandatory consumer law of that country.

Contact

Questions, requests or complaints: support@aywa-ai.com.