Privacy Notice

1. Controller and contacts

Draimo is the platform and Maria is its AI Assistant. Safariblocks Ltd, registration number PVT-5JUEG6GY, is the controller for Draimo’s own purposes. Registered office, postal address and formal legal notices address: Madonna Hse, Mpaka Road, Westlands, Kenya. Public privacy contact: team@draimo.com.

2. Data we process

• Account and authentication data, including Firebase identity, email, display name, user ID and session/security data.
• Prompts, responses, conversation metadata, citations, uploaded files, extracted text, images, generated outputs, embeddings and execution events.
• Library, Co-Writer, ExamPredictor, Timetabler, organization, app-consent and agent activity data.
• Google Gmail/Calendar integration data, WhatsApp identifiers/messages, payment and credit records, email/push data and support/security logs.
• Device, browser, IP and analytics data where actually collected; browser localStorage and cookies described in the Cookie Policy.

3. Purposes and legal bases

Draimo processes data to provide requested services, authenticate and secure accounts, process payments, run research and AI features, store files and outputs, operate integrations, provide support, prevent fraud, comply with legal obligations, and improve reliability and service quality. For users connecting from Kenya, privacy-minimised PostHog product analytics may be enabled by default on a regional basis to measure service use and improve the platform. This mode does not identify users, create person profiles, capture IP addresses, persist browser identifiers, record sessions or capture typed content. Users can turn this analytics activity off through Privacy settings. Users elsewhere receive the applicable consent or opt-out choice for the relevant technology and jurisdiction. Processing is not based on blanket consent to this notice. The lawful basis depends on the purpose and the user's relationship with Draimo.

4. Providers and transfers

We identify service providers by company rather than publishing the names of the AI models they operate. Depending on the feature and your choices, Draimo may use Google (Firebase and Google APIs, including Gmail, Calendar and Drive connections), Supabase (database, storage and realtime infrastructure), Paystack (payments), DeepSeek (selected AI and research processing), Alibaba Cloud (selected file and document processing), Cloudflare (browser and web-research infrastructure), Tavily (web search and extraction), Resend (transactional email) and OneSignal (push notifications). A provider is involved only when the relevant feature is used or enabled; this list is not a claim that every provider receives data on every request. When a request is sent to an external AI service, the information needed for that request is processed by that company's service to return the result. That is a service-provider disclosure, not a claim that Draimo sells your data or that the provider receives data for unrelated purposes. We do not claim that data never reaches an AI provider. Processing locations, retention, training-use terms, DPAs and transfer safeguards are maintained in our provider register and updated as they are verified.

5. Rights and requests

Depending on the applicable law, users may request access, correction, deletion, restriction, objection, portability, withdrawal of consent and information about automated decision-making. Requests may be submitted through the Privacy Centre when available or to team@draimo.com. Identity verification may be required. The target response process is within one month for GDPR requests, subject to lawful extensions and local rules.

6. Retention and deletion

Draimo retains information only for as long as needed for the purpose collected, account operation, security, fraud prevention, legal obligations or dispute handling. Retention varies by data type and provider. Account deletion requests are handled through a controlled workflow, with legally required exceptions documented where applicable.

7. Children and sensitive data

Draimo's age requirements are stated during registration. Free-form prompts and uploads may contain special-category, education, employment or children’s data. Users should not submit such data unless the processing is lawful and necessary. Contact team@draimo.com if you believe a child’s data has been submitted improperly.

8. AI and automated decisions

Draimo uses AI to generate responses, research, classifications and workflow assistance. It does not claim that outputs are decisions made by a human or that they are always accurate. High-impact decisions about people require human review and appropriate safeguards. Users may contact the privacy team about a decision or profile involving them.

9. Complaints and changes

Users in Kenya may contact the Office of the Data Protection Commissioner. EU/EEA users may complain to a competent supervisory authority. Contact Draimo at team@draimo.com. This notice is versioned and changes will identify the affected processing.