Maap privacy policy
Last updated
Maap is made by Ashish Jain. You can draw a whole plan without giving us anything: no account, nothing uploaded. Data leaves your browser only when you share a plan, sign in, send feedback, or leave usage counts on, and this page says exactly what goes where in each case.
Without an account
Your plans are stored in your browser, on your device. We can't see them. They stay there until you delete them or clear your browser's site data. Export makes a file you can keep anywhere.
The browser also keeps a few small settings: which release notes you've already seen, the random id used for usage counts, and, if the link that brought you here said so, which kind of site sent you. None of it identifies you.
When you share a plan
Turning on a share link uploads that plan so other people can open it: its contents, a thumbnail, and any builder's plan image you traced over. Anyone who has the link can see the plan, without signing in, so treat the link the way you'd treat the plan itself.
Turning a link off deletes the shared copy, including its images, from our servers straight away. A copy cached by a network or a browser may still show for a short time, usually under a minute. Links don't expire on their own. Deleting a plan in Maap turns its link off first.
A link on a plan in your account can be turned off from any browser signed in to that account. A link on a plan that's only in your browser can only be turned off from that browser. If you can no longer do that, for example because you cleared your browser, email hello@maap.space and we'll delete it.
When you sign in
Signing in is optional. You only need it to keep plans in an account, so you can open them on another device.
We use Google sign-in. Google gives us your email address, your name, the address of your profile picture, and an id for your Google account. We never receive your Google password, and we ask for nothing else from your Google account. Your browser keeps a session token so you stay signed in.
An account stores the plans you choose to put in it: their contents, thumbnails and builder's plan images. When you first sign in, we list the plans in your browser and you choose which to copy in. Plans you leave out stay in your browser only.
Feedback and usage counts
Feedback. When you send feedback, we receive your message, your email address if you type one, and the details the form shows you before you send: app version, the view you were in, zoom, units, the plan's id and room count, whether it's shared, your browser and your window size. A screenshot of the plan goes with it unless you remove it. Feedback sent while viewing someone else's shared plan carries no plan details and no screenshot.
Usage counts. Maap counts which tools and views get used, whether checks are read, and whether shared links are opened. It also counts when a plan first reaches five rooms and, when the link you followed says where it came from, which kind of site sent you: LinkedIn, WhatsApp, Reddit, Pinterest, Instagram or other. It never records the link itself. Each browser gets a random id that isn't linked to your name, email or account. Counts never include plan contents, plan names, sizes, or anything you type.
Turn usage counts off at the foot of the plan list. Turning them off also forgets this browser's random id.
The website and app also count page views with Vercel Web Analytics. It uses no cookies and doesn't identify you.
Where it's stored, and who handles it
Accounts, account plans, share links, feedback and usage counts are stored with Supabase in Mumbai, India. Four services handle data for us:
| Service | What it does for Maap | Where |
|---|---|---|
| Supabase | Database, file storage and sign-in | Mumbai, India |
| Vercel | Serves the website and app; its server logs record IP addresses | Global network |
| Sign-in, and the inbox that receives mail to hello@maap.space | Global | |
| Namecheap | Forwards mail sent to hello@maap.space | United States |
Your plans don't leave India. The only data that does is what passes through Vercel, Google and Namecheap as described above.
Vercel and Supabase keep short request logs: the address requested, and the visitor's IP address and browser type. A share link's address contains its key, so the logs record that too. Only those services and we can read these logs, and they are deleted within 7 days.
What we never do
- Sell your data, or share it with anyone for advertising
- Show ads
- Look at the plans in your account, unless you ask us to while getting help
- Use your plans to train AI models
How long we keep things
| What | Kept for |
|---|---|
| Plans in your browser | Until you delete them or clear site data |
| Plans in your account | Until you delete them, or delete your account |
| Account details from Google | Until you delete your account |
| Shared plans and their images | Until you turn the link off or delete the plan, then deleted straight away |
| Feedback, with any screenshot | 90 days |
| Usage counts | 13 months |
| Request logs (Vercel and Supabase) | Up to 7 days |
| Database backups | Up to 7 days |
Something deleted from Maap can remain in a database backup until that backup expires.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can:
- Ask what personal data we hold about you and how it is used
- Ask us to correct or complete it
- Ask us to erase it, including deleting your account and everything in it
- Withdraw your consent: turn usage counts off, or sign out and ask us to delete your account
- Name someone to exercise these rights for you if you can't
- Complain to us, and if we don't resolve it, to the Data Protection Board of India
Email hello@maap.space from the address on your account, and we reply within 30 days. There's no delete button in the app yet; until there is, deletion is by email and is done within 30 days.
Deleting your account deletes the plans it owns. Share links to those plans stop working, and anyone you shared them with loses access.
Security
Data travels encrypted. Each account can read only its own plans; the database enforces this, and we check it from outside, the way a stranger would try. Only we can read feedback and usage counts.
Children
Maap is for adults planning a home. Please don't sign in if you are under 18.
Changes to this policy
When this policy changes, the date at the top changes too, and What's new in the app says so.
Contact
Ashish Jain, hello@maap.space