Privacy Policy

This Privacy Policy explains how Maze Tech, Inc. ("Maze", "we", "us", or "our"), the operator of Maze, collects, uses, stores, protects, and shares information when you use our website, app experiences, account features, account sign-in, optional Gmail connection, item extraction tools, public profiles, item pages, story sharing tools, and related services.

Maze is designed to help you build a visual collection of things you own. Because Maze can connect to Gmail, we treat email data with extra care. We request read-only access and use Gmail data only to provide and improve user-facing Maze features that you choose to use.

By using Maze, you agree to this Privacy Policy and our Terms of Service. You can read our Terms at /terms.

Maze's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Signing in with Google and connecting Gmail are two separate things in Maze, and one does not turn on the other. Signing in with Google uses the basic sign-in scopes openid, email, and profile: it tells Maze your email address and your name, and it gives Maze no access to your mail at all. Connecting Gmail is a second, optional step with its own consent screen, and it is the only step that requests the gmail.readonly scope. You can use Maze signed in with Google and never connect Gmail. You can disconnect Gmail on its own at any time and stay signed in.

Maze uses Gmail API access only to scan for purchase confirmations, shipping receipts, order receipts, and related commercial emails, so we can extract product details and build your Maze collection. When you open your For You feed or the feed of people you follow, Maze looks at the brands in your own collection, including items it found in your receipt emails, your recent saves and likes, and the other people's items you recently opened, zoomed into, shared or tapped Buy on (recorded as described in section 4), on its servers, only to order those feeds for you. It is not kept as a stored profile of you. The same kind of comparison picks the items suggested to you under an item, as "what you might like". It decides what you are shown and in what order, and nothing else. It is never used to order what anyone else is shown, and it does not change who can see your collection or where your own items appear on Maze. What other people can see of your collection is set by the visibility rules described in section 6, not by this ordering. Maze does not use Gmail data to serve advertisements. Maze does not sell Gmail data. Maze does not use Gmail data for third-party advertising, creditworthiness, insurance, lending, employment, or unrelated profiling.

Maze will not transfer Gmail data to others except as necessary to provide or improve Maze's user-facing features, comply with applicable law, address security or abuse, or as part of a merger, acquisition, or sale of assets, subject to appropriate privacy protections. One such transfer is abuse screening: to keep objectionable content off Maze, item text is sent to an automated moderation service, as described in section 5. Another is affiliate attribution, which happens only when a person taps Buy. If the item's retailer is one Maze has an affiliate arrangement with through Awin, the affiliate network, Maze sends that person to the store through Awin's tracking link, and the item's product link and a Maze item reference number pass to Awin so the retailer can credit the sale, as described in section 7. This applies only to items anyone can already see on Maze: an item in a private collection never goes through Awin. The product link is the same store link shown on the item's public page on Maze. Nothing else Maze read in your email is sent, such as an order number, a price, or the email itself, and the item reference number points to the item on Maze, not to the person who tapped. Push notifications are not such a transfer. Maze delivers notifications through Apple's Push Notification service, and the message Maze hands Apple contains only the @handle of the Maze user who acted, when there is one, and a fixed phrase. Nothing Maze read in your email is put in it.

Maze will not allow humans to read your Gmail data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, doing so is necessary to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

Watching for new receipts is optional and off until you turn it on. Maze asks once, and you can change your answer at any time in Settings. If you say yes, Maze checks your inbox for new purchase emails about once a week. This runs on Maze's servers and does not require you to open the app. It only runs for people who said yes, uses the same read-only access and the same purchase-confirmation filters as a scan you start yourself, and only looks at mail that arrived after you said yes. Background reading uses fixed rules to read a receipt; it does not send your email text to an AI service. A receipt those rules cannot read is set aside, by its message ID only, and is read the next time you start a scan yourself, which is processed as described in section 5. Nothing found this way is added to your collection until you confirm it: Maze shows it to you as a suggestion, and you can add it or dismiss it. Maze remembers a dismissal so it does not suggest the same purchase again. Background reading stops as soon as you turn it off, disconnect Gmail in Maze, revoke Maze's access in your Google account permissions, or delete your Maze account.

• Two separate consents: signing in with Google grants Maze no access to your mail. Only the optional Gmail connection requests gmail.readonly, and it can be revoked on its own.
• Read-only access: Maze cannot send emails, delete emails, edit drafts, or manage contacts.
• Purpose limitation: Gmail data is used to identify purchased items, build your Maze collection, and order the feeds Maze shows you. It is not used for any purpose outside the Maze features described in this policy.
• Ordering, not visibility: what Maze found in your inbox is used to order what you see, and is never used to order what anyone else sees. It does not make your collection, or any item in it, more or less visible to other people. What other people can see is set by the visibility rules in section 6.
• Advertising limitation: Gmail data is never used for ads or sold to advertisers.
• Notification limitation: a notification Maze sends to your phone never contains anything from your email. It carries the name of the Maze user who liked your item or look, or followed you, and a fixed phrase, and the item or look itself is visible only after you open Maze.
• Human access limitation: human review is limited to the narrow cases described above.
• Background reading (optional): only if you turn it on, Maze checks for new purchase emails about once a week, reads them with fixed rules and no AI service, and adds nothing until you confirm it. You can turn it off at any time.
• Revocation: you can disconnect Gmail from Maze in the product or revoke Maze's access from your Google account permissions at any time.

We collect information you provide directly, information generated through your use of Maze, the identity information your sign-in method hands us, information from your Google account if you separately authorize Gmail access, and technical information collected automatically when you visit or use Maze. Maze supports three ways to sign in: Google, Sign in with Apple, and an email address and password. Each one hands Maze a different amount of information, and none of them gives Maze access to your email.

• Account information, such as your email address, user ID, session information, name, username, profile image, location, and onboarding status.
• If you use Sign in with Apple, Apple sends Maze a stable ID for your account and, if you allow it, your name and your email address. Apple sends the name only on your first sign-in and never again. If you choose Hide My Email, the only address Maze ever holds for you is the private relay address Apple generates, ending in privaterelay.appleid.com. Maze cannot see your real address behind it and does not try to. If Apple sends no address at all, Maze has no email address for you until you add one.
• If you connect Gmail, Maze temporarily processes receipt content and metadata needed to identify purchased products. Maze stores the item information you keep, such as product names, brand names, item variants, colors, sizes, quantities, categories, product links, and product images when available. Maze does not store product prices, Gmail message IDs, email subject lines, email dates, or order dates on purchased item records.
• Collection information, such as items you keep, edit, delete, reorder, save, like, share, or manually add.
• If you turn on notifications, Maze stores the notification token your device gives it, whether that token is for Apple's test or live notification environment, and when it was registered. The token identifies an installation of the app, not you personally, and all of it is deleted when you delete your Maze account.
• Uploaded content, such as profile images and outfit or product photos you upload for item detection or visual generation.
• Usage and log information, such as browser type, device type, operating system, IP address, referring pages, pages viewed, timestamps, feature interactions, and diagnostic logs.
• Communications with us, such as emails or support requests you send to Maze.

We use information to operate Maze, authenticate users, scan Gmail for purchase-related emails, extract product details, enrich item pages with images and links, order the feeds Maze shows you using the items already in your collection, let you edit and share collections, provide public profile pages, support saved items, generate story images, respond to support requests, maintain security, debug issues, and improve the Service.

We may use usage information and aggregated or de-identified information to understand product performance, improve user experience, detect abuse, and develop new features. Some of that usage information reflects Gmail data indirectly. When Maze records that a card was shown to you in a feed, the position it appeared at depends on the ordering described in section 2. Those records carry a reference to the item shown and its position, and they do not carry email content, senders, subjects, prices, or a list of what you bought. Maze uses them to work out how far people scroll, and for nothing else. When you are signed in, Maze also records when you open, zoom into, share, or tap Buy on someone else's item: a reference to the item, which of those it was, web or iOS, and the time. These records belong to your account. They hold no email content, senders, subjects, prices, or anything Maze read from your email. Maze uses them only to order your own feeds, never anyone else's and never for advertising, and deletes them when you delete your account. Separately, how many people saved or liked an item in the past week moves that item up everyone's For You feed. That count names no one, and the people who saved or liked it are not shown. We do not use Gmail data for advertising.

Maze keeps a Recently viewed list of items you open, tied to your account and shown only to you. You can clear it from Explore, and deleting your account removes it.

Maze uses AI and automated services to extract products from email receipts, detect items in uploaded photos, search for product images and links, and generate or improve product visuals. These systems may process relevant item text, email receipt snippets, image URLs, uploaded photos, and item metadata.

AI and enrichment results can be incomplete or inaccurate. You can review, edit, remove, and reorder items in your collection. Maze does not use Gmail data, or any Google user data obtained through Google APIs, to develop, improve, or train generalized or non-personalized AI and/or ML models. Maze's AI processing runs on fal.ai, which hosts the models Maze uses and receives the receipt text needed to identify a purchase. Maze does not permit that data to be used to train generalized models. Maze's use of Gmail data is limited to providing and improving Maze's user-facing features.

When you add a look, Maze first sends the whole photo, its background included, to fal.ai so a model can cut you out of it. Its photo metadata, such as location and device details, is removed first, the photo is sent with the request and never stored, Maze asks fal.ai not to store the request, and Maze keeps only the cut-out picture of you.

Maze then sends a copy of that cut-out look photo to fal.ai so a model can list the pieces you are wearing: a name, a category, a color, and where each piece sits in the photo. The copy has its photo metadata, such as location and device details, removed first, and Maze deletes it as soon as the answer comes back. Maze asks fal.ai not to store the request, and fal.ai processes the photo only on Maze's instructions. Only your own looks are sent, and only when you add one.

When you add an item from a photo in version 1.1 of the Maze app or later, the app reads the photo on your phone: the words in it, such as a product name, a color, or a link, and a cut-out of the item to pick as its picture. The photo and the cut-out stay on your phone. Only the words leave it: they fill in the item's details, which are saved like any item you add, and Maze uses them to search for pictures of the item. They are the same words you could type yourself. On the Maze website, and in app versions before 1.1, adding an item from a photo sends a temporary copy of that photo to fal.ai, the AI service Maze uses for looks, so a model can suggest its name, category, and color. Maze deletes its copy as soon as the answer comes back.

For each new piece of your look (one that is not already on your Maze), Maze crops the area around that piece out of the photo, removes its metadata, and sends only that crop to fal.ai so a model can redraw the piece as a product photo. Maze deletes the crop as soon as the picture comes back and asks fal.ai not to store the request. My crop sends nothing out.

Maze also screens what people put on Maze, so objectionable content stays off it. When you add an item, or save your username, display name, location, or profile photo, that text and that photo go to OpenAI's moderation endpoint, which returns category scores and no content of its own. Maze uses those scores to hold an item or take down a profile photo until someone reviews it. Item text can include details Maze pulled out of a receipt email. OpenAI processes this on Maze's behalf under its API terms, which do not permit that data to be retained for abuse monitoring or used to train models.

Before anyone else can see a look you add, Maze sends a smaller copy of that look photo, with its metadata removed, to Google Cloud Vision's SafeSearch, which returns how likely the photo is to be adult, violent, or racy and nothing else. The check takes a few seconds, and until it passes the look is visible only to you. A look that scores as likely nudity or violence stays hidden from everyone but you: Maze tells you why on the look, and you can ask for a review. If you shared that look, or you ask for a review, someone at Maze looks at it to decide. A look that is only revealing, such as gym wear or swimwear, is not held back and appears wherever your looks appear. When a look is held, or when someone reports something or asks for a review, Maze emails its own moderation inbox a notice that carries only internal ids, never your photo, caption, name, or username. Google processes the photo in memory without storing it and does not use it to train its models.

Maze is built around shareable collections. If you create a username, complete onboarding, keep items, or share item/profile links, parts of your profile and item collection may be publicly visible. Public information can include your display name, username, location if you provide it, profile image, item images, brands, product names, categories, product links, and generated share images. Public items are also shown to other people inside Maze: items from a public collection, including items Maze built from your receipts, can appear in other people's feeds. You can make your account private, which limits your collection to the Mazers you accept. Liking and following are not private. When you like someone's item or look, or follow them, Maze tells that person you did it, and shows them your name, username, and profile image. In the Maze app, an item's like count and save count appear from the first like or save, on every collection, private ones included, to anyone who can see the item, and so do a look's, to anyone signed in who can see the look. Each count is the same number for everyone who sees it. Any signed-in Mazer who can see an item or a look can also see who liked it: each person's name, username, and profile image. That list leaves out people you have blocked or who have blocked you, people with a private account, deleted accounts, and anyone who can no longer see the owner, so it can be shorter than the like count. It includes likes made before Maze showed this list. If you do not want to appear in it, unlike the item or look, or make your account private. Saving is different. Maze never tells the owner of an item or a look who saved it, and never shows anyone, the owner included, a list of who saved something. The list of what you have saved is yours: only you can see it in Maze.

Maze can also send those notifications to your phone, if you turn notifications on. A notification from Maze carries the @handle of the person who liked your item or look or followed you, or who commented on or replied to something of yours or liked your comment, the words liked an item of yours, liked your look, followed you, commented on your item, commented on your look, replied to your comment, or liked your comment, and, to the one person named top mazer for the week, you're this week's top mazer., and an internal reference Maze uses to open the right screen. If you turned on watching for new receipts, Maze may also send, at most once a day, the fixed phrase Your latest purchases deserve an audience. We can add them for you✨, which has no @handle and does not name the item, the store, or anything else from the email. It carries nothing else. It never carries anything Maze read in your email, beyond that fixed phrase: no brand, product name, category, retailer, price, image, or link, and never your look's photo or caption, and never the words of a comment. Which item or look was liked or commented on, and what a comment says, is visible only after you open Maze. Saving an item or a look never sends a notification.

A look is a photo of you, so it can show your face and body. Once you share a look, any signed-in Mazer who can see your profile can see it, until you delete it.

You control which extracted items you keep during setup and can edit or delete items later. Please do not add or share anything you do not want others to see.

We do not sell your personal information or Gmail data. We share information only as needed to provide Maze, comply with law, protect rights and safety, or operate our business.

• Service providers: we use vendors for hosting, database and storage, deployment, authentication support, AI processing, content moderation, image generation, image resizing and delivery, image hosting, product and image search, push notification delivery, analytics, monitoring, support, and affiliate attribution. Apple delivers Maze's notifications to your device through the Apple Push Notification service. Maze sends Apple your device's notification token, the @handle of the Maze user who liked your item or look, followed you, commented on or replied to something of yours, or liked your comment, and a fixed phrase, and never anything Maze extracted from your email. A notification about new receipts has no @handle: it is the fixed phrase alone. Current vendors include Convex, Vercel, Google, Apple, fal.ai, OpenAI, Oxylabs, wsrv.nl, Resend, PostHog, Awin, and Cloudinary.
• Maze keeps its own copy of each item's product photo, including items Maze found in your receipt emails, so the picture still shows if the store removes it. These copies are stored with Cloudinary, which hosts them on Maze's behalf. Maze sends Cloudinary only the picture: never your name, email address, the email itself, the store link, or which account or item it belongs to. Like other item photos, a copy can be opened by anyone who has its link. When you delete an item, remove its photo, or delete your account, Maze deletes its copy.
• Affiliate links: Maze works with affiliate networks, including Awin. When you buy something through a link on Maze, Maze may earn a commission from the retailer, at no extra cost to you. Tapping Buy sends you to a redirect on trymaze.app, which forwards you to the retailer. Maze records that the tap happened: the item, the brand, the retailer's hostname, whether you were on web, iOS, or the browser extension, and, when the tap went through an affiliate network, which one. That record does not say who tapped, and it holds no IP address, full destination link, or anything Maze extracted from your email. If you are signed in, the app separately records that your account tapped Buy on that item, as section 4 describes. For a retailer Maze has an affiliate arrangement with through Awin, the redirect sends you through Awin's tracking link on the way to the retailer. Awin receives the product link you are going to and a Maze item reference number, which points to the item on Maze. Maze sends Awin nothing about who you are: no name, email address, @handle, or account, and the redirect tells your browser not to pass along the Maze page you came from. Your browser opens Awin's link itself, so Awin sees what any website you visit sees, such as your IP address and browser type. Awin and the retailer may set their own cookies to credit the sale, and what they do with that information is governed by their own privacy policies. Items in a private collection, and every retailer without an Awin arrangement, go straight to the retailer with no third party in between.
• Public sharing: information you publish or share through Maze, such as public profiles and item pages, may be viewed by others.
• Connected apps: you can connect an outside app or assistant, such as Meta's Muse, to your Maze account. Nothing is shared with one until you connect it: either you allow the exact permissions it asks for on a Maze consent page, or you generate a connector token in Settings and give that token to the app. After that, each request the app makes on your behalf is answered with only what that request asks for: the brand, name, category, color, photo and link of the items you saved or bought, the item it just saved for you, or, when you ask it to help you find something to buy, those same six fields for items other people on Maze have chosen to make public. When you ask what you bought recently, the reply also says whether you have connected an inbox and when Maze last read it, so the assistant can offer to help you connect one instead of telling you that you have bought nothing. When it saves a link for you, the reply also says whether that item was already in your collection and whether Maze is holding it for review. A connected app never receives your email address, the emails Maze read, or anything from them beyond those item fields, and every item it is sent is one you can already see inside Maze yourself: your own items, another person's item you saved into your own collection, or an item Maze offers when you ask where to buy something. When it answers from other people's public items it receives the items only: never a username, a display name, a profile photo, or a count of who saved what, and the only link is the product link that item's owner recorded. Purchases Maze found in your Gmail reach a connected app one request at a time, to a service you chose, in answer to a question you asked, and only ever as those item fields: your own because they are yours, and another person's only where you can already see that item inside Maze yourself. There is no bulk export and no background sync. Maze never sells inbox data and never transfers it to advertising platforms, data brokers or resellers, and connecting an app does not change that. Once you share an item with a connected app, that app's own privacy policy governs what it does with it. You can disconnect an app or revoke a token at any time in Settings, and every credential it holds stops working at once. Deleting your Maze account does the same.
• Legal and safety: we may disclose information if required by law, legal process, or to protect Maze, users, or others from fraud, abuse, security threats, or harm.
• Business transfers: if Maze is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction subject to appropriate protections.

We retain account information and item data for as long as your account is active or as needed to provide Maze. Gmail-derived item data that you choose to keep may remain in your Maze collection until you remove the items or request deletion. Google sign-in does not require Maze to store Gmail OAuth tokens. Gmail OAuth tokens are retained only if you choose to connect Gmail, and can be deleted by disconnecting Gmail or invalidated if you revoke access.

If you sign in with an email address and password, Maze stores your password only as a one-way hash, never the password itself. The 6-digit codes Maze emails you to verify a new account or reset a password are also stored only as a one-way hash. A verification code expires after 15 minutes, a reset code after 30 minutes, each works once, and each stops working after five wrong entries.

We may retain limited logs, backups, security records, and legal records for a reasonable period after deletion where necessary for security, fraud prevention, legal compliance, dispute resolution, or business continuity. When we no longer need identifiable information, we delete it or de-identify it.

You can manage your Maze information in several ways. Some controls are available in the product, and you can also contact us at michaela@trymaze.app.

From version 1.1 of the Maze app, before the app sends any of your photos to fal.ai, it asks you once. It says that an AI service reads the photo and why, links to this policy, which names that service as fal.ai, and offers Allow and Not now. The Maze website does not ask. Not now sends nothing to fal.ai: you pick the pieces of a look from your Maze or crop them yourself. In the app, adding an item from a photo does not ask, because the app reads that photo on your phone and does not send it to fal.ai. On the Maze website, and in app versions before 1.1, adding an item from a photo sends a temporary copy of that photo to fal.ai without asking, as described above. Maze keeps your answer with your account, so Not now holds on the web too, and you can change it in the app's Settings at any time. For every photo Maze sends to fal.ai, it removes the photo's metadata, such as location and device details, first, deletes its own copy as soon as the answer comes back, and asks fal.ai not to store the request.

• Disconnect Gmail from Maze in profile edit mode, or revoke Maze's access in your Google account permissions.
• Revoke a connector token in Settings under Connect to Muse, or disconnect an app under Connected apps.
• Edit, remove, or reorder items in your Maze collection.
• Delete or change profile information such as name, username, location, and profile image where supported.
• Delete your account from profile edit mode, or request access to, correction of, export of, or deletion of your personal information by contacting michaela@trymaze.app.
• Clear your local browser session by signing out.

Maze may use cookies, local storage, and similar technologies to keep you signed in, remember session state, operate the Service, understand usage, diagnose issues, and improve performance. You can configure your browser to block or delete cookies, but some Maze features may not work correctly.

Maze does not use Gmail data for advertising. Our analytics tools are used to understand product usage and performance, not to sell Gmail data or serve ads based on Gmail content. Maze's product analytics run on PostHog, which processes them on Maze's behalf and is not an advertising network or a data broker. Section 4 describes what Maze sends there. Maze runs no advertising, affiliate, or ad-network scripts on any page, signed in or signed out. Affiliate attribution happens on Maze's server, not in your browser through a script. When you tap Buy, you pass through a redirect on our own domain, and Maze sets no cookie along the way. For most retailers the redirect goes straight to the retailer. For a retailer Maze has an affiliate arrangement with through Awin, it passes through Awin's tracking link first, as section 7 describes, and Awin may set its own cookie. The retailer's own site will set its own cookies, as any site does.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, hashing of session tokens, passwords, and one-time codes, and restricted access to production systems. No service can guarantee perfect security, and you are responsible for keeping your account and devices secure.

Maze keeps a copy of your own collection on your device so the app opens faster; it is deleted when you sign out or delete your account.

Maze is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Some countries set a higher minimum age for using a service like Maze without a parent or guardian's permission. If you are under that age where you live, please do not use Maze without it. If we learn that we hold personal information from someone below the applicable age, we will take reasonable steps to delete it.

Maze may process and store information in the United States or other countries where our service providers operate. By using Maze, you understand that your information may be processed outside your country of residence.

Depending on where you live, you may have rights to know, access, correct, delete, export, or restrict certain uses of your personal information. Maze does not sell personal information as the term is commonly understood under privacy laws, and we do not sell Gmail data.

To exercise privacy rights, contact michaela@trymaze.app. We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising privacy rights.

Maze may link to retailers, marketplaces, product pages, social platforms, and other websites we do not control. Those websites have their own privacy practices. We are not responsible for their content, security, or privacy policies.

Links out of Maze may be affiliate links. If you buy something after clicking one, Maze may earn a commission at no extra cost to you. This will never change which items appear in your collection or how they are ordered.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as posting the updated policy on this page or providing notice through the Service. Changes are effective when posted unless otherwise stated.

If you have questions, requests, or concerns about this Privacy Policy or Maze's handling of personal information, contact us at michaela@trymaze.app.