Privacy Policy — DUOL by Map Maven

This Privacy Policy governs how Map Maven ("we," "us," or "our") collects, processes, stores, and protects personal data and voice audio telemetry when you access the DUOL platform, sign up for our waitlist, or interact with our native African voice AI models.

Map Maven operates as a Data Controller and Data Processor in accordance with the Kenyan Data Protection Act, 2019 (DPA) and international data protection standards.

1. Information We Collect

We collect information directly from you when you sign up for waitlist access, interact via voice stream, or browse our web portal:

Identity & Contact Data: Name, email address, waitlist queue position, referral activity, and VIP invite tokens.
Voice & Audio Telemetry: Real-time audio streams captured via your device microphone during live sessions with DUOL, including audio frames cached during low-latency WebRTC streams.
Conversation Transcripts & AI Inputs: Speech-to-text transcriptions of what you speak to DUOL, text prompts provided, and AI-generated response logs.
Technical & Usage Data: IP address, device type, browser information, latency metrics, and web interaction events.

2. Third-Party Infrastructure & Sub-Processors

To deliver ultra-low latency native voice AI across East Africa, Map Maven utilizes specialized third-party cloud infrastructure:

Supabase

Primary waitlist and user identity database (Name, email address, referral links).

Cloudflare (R2 Storage)

Secure cloud bucket storage (duol-audio) for encrypted audio session logs & frames.

LiveKit

Real-time WebRTC infrastructure for low-latency audio transport streams.

Hugging Face

Dedicated compute infrastructure & custom voice models for audio processing & native voice inference.

Groq & OpenAI

High-speed LLM processing & transcription engines for anonymized text prompts & speech transcripts.

Vercel

Frontend application hosting & edge delivery for network connection logs & IP addresses.

Resend

Transactional & waitlist update email service for recipient email address & email engagement.

Google Analytics / GTM

Platform performance and conversion tracking for anonymized user interaction metrics.

3. How We Use Your Data & AI Model Improvement

We process your data exclusively for the following purposes:

Platform Operation: Delivering real-time, low-latency Kiswahili and vernacular voice interactions (Fiti, Daudi, Rafiki, Rehema, and expanded regional language engines).
Communication: Sending waitlist updates, VIP access keys, and system announcements via Resend.
Model Quality & Fine-Tuning: Anonymized audio clips and transcriptions stored in Cloudflare R2 may be reviewed to improve model accuracy, dialect recognition (e.g., Gikuyu, Luo, Samburu, Somali, Oromo, Kinyarwanda, Luganda, Amharic, Tigrinya, Malagasy), and response latency.

Opt-Out of Voice Training: You may opt out of having your anonymized voice samples used for AI model fine-tuning at any time by emailing privacy@mapmavengmbexperts.com with the subject line "Voice Opt-Out".

4. Cross-Border Data Transfers (Section 48 DPA 2019)

DUOL's technical pipeline uses dedicated cloud compute nodes located globally (including Hugging Face, LiveKit, and Cloudflare R2 infrastructure). Pursuant to Section 48 of the Kenyan Data Protection Act, 2019:

All cross-border transfers of voice telemetry and user data are encrypted in transit using TLS 1.3 / HTTPS and encrypted at rest using AES-256.
By using DUOL or registering on our waitlist, you provide explicit consent for the transfer and processing of encrypted session data across our distributed cloud pipeline to maintain low-latency performance.

5. Your Legal Rights as a Data Subject

Under Section 26 of the Kenya Data Protection Act, 2019, you hold statutory rights including Right to Access, Right to Erasure (Deletion), Right to Rectification, and Right to Object.

To exercise any of these rights, submit a written request to abraham@mapmavengmbexperts.com. We will process and confirm your request within 30 days.

6. Regulatory Oversight & Complaints

If you believe your rights have been infringed, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya (https://www.odpc.go.ke).