PRD · v0.9 · Confidential

Mayday — A voice-activated lifeline when seconds matter.

A personal-safety mobile app that listens (on-device) for a spoken trigger phrase such as “Mayday, Mayday, Mayday.” When detected, it automatically records from all cameras, broadcasts SOS messages to pre-selected contacts and social channels, and places an AI-voice emergency call to a 24/7 human-on-call contact center that can dispatch help on the user's behalf.

Status Pre-build / Concept validation Geography United States (launch) Author Stewart · Morsy's workspace Last update 2026-06-26
1 · One-liner 2 · Problem 3 · Users & segments 4 · Capabilities 5 · Experience flows 6 · Architecture 7 · AI voice & contact center 8 · Market 9 · Competitive landscape 10 · Business model & $1M plan 11 · Risks & mitigations 12 · Legal & compliance 13 · Success metrics 14 · Roadmap 15 · Open questions / ask

1 · One-liner

Mayday is a voice-triggered personal-safety app. A user speaks a short phrase, the phone silently flips into an evidence-recording and SOS-broadcast mode, and an AI voice agent on a 24/7 contact-center line engages with the threat environment on the user's behalf — even if the phone is snatched, locked, or smashed.

Why now. Smartphone mic + on-device speech recognition is mature (iOS 17 / Android 14 wake-word APIs, ~3% false-trigger per day is solvable with personalization), Twilio/AI voice costs dropped >70% in 18 months, and 71% of US women report feeling unsafe walking alone at night (Pew 2024) — a demand signal no incumbent serves well end-to-end.

2 · Problem

The moment of danger

When someone is threatened (assault, carjacking, domestic-violence escalation, kidnapping, medical emergency alone), they have 2–8 seconds to act. Fumbling for the phone, unlocking it, opening an app, and pressing a button is exactly the workflow the threat makes impossible. Existing personal-safety apps require a tap; hardware panic buttons require a hand that may be pinned; voice assistants are passive.

Why current solutions fail

What the user actually needs in those 8 seconds

3 · Users & segments (US launch)

Primary

Women 18–34, urban

Population~24M US
WTP$7–12/mo
ChannelIG, TikTok

Walking home, rideshares, first dates, college campus. Reference customers: NCMEC, Uber women's safety reports.

Primary

Rideshare & shift workers

Population~3.8M US drivers
WTP$14–29/mo B2C, $5/seat B2B
ChannelUber/Lyft unions

Late-night, cash-handling, isolated drop-offs. Highest LTV; willing to pay; vocal on safety.

Secondary

College students

Population~19M enrolled
WTP$3.99/mo or bundled via school
ChannelCampus safety offices

Campus sexual-assault stats (1-in-5 women, RAINN). B2B2C via university safety budgets is the wedge.

Secondary

Domestic-violence survivors / vulnerable family

Population~16M US/year experience IPV
WTP$0 (grant-funded) / sponsor pays
ChannelDV shelters, NNEDV

Highest ethical priority. Free tier + shelter / state-funded licenses.

Tertiary

Solo travelers & remote workers

Population~40M US
WTP$9/mo
ChannelTravel creators

International travel, hiking, co-working in unfamiliar cities. Different framing: "panic + travel insurance."

Tertiary

Enterprise / concierge security

PopulationSMEs + family offices
WTP$40/seat/mo
ChannelDirect + insurance bundling

White-label embed for executive-protection firms; insurance premium discounts.

Beachhead. The segment that buys fastest and talks loudest: female rideshare drivers. Solvable pain (daily, high-stakes), willing to pay (proven for dashcams at $15–25/mo), strong referral loops (driver Slack groups, FB communities), low CAC.

4 · Capabilities

4.1 Core feature set (MVP, V1)

#CapabilityDescriptionAcceptance criteria
C0aAlways location permission Background "Always Allow" location is required for the contact center to direct first responders to a moving user, and for the broadcast link to show live position. Foreground-only ("While Using") is rejected at onboarding with a one-tap path to Settings. iOS significant-change + Android Fused Location Provider APIs used to keep battery drain ≤ 1%/hr in steady state. User cannot complete onboarding without "Always"; dashboard shows last-known fix every 5s during event; cached last 24h of fixes available offline; denials trigger a re-prompt with a 7-day grace window before downgrade to "unarmed" state.
C0bAlways microphone + recording permission The voice listener cannot run without continuous mic access, and the evidence capture pipeline requires explicit microphone + camera + media-library / file-storage entitlements on both platforms. iOS: NSMicrophoneUsageDescription + NSCameraUsageDescription strings explain use; Android: RECORD_AUDIO + CAMERA + FOREGROUND_SERVICE_MICROPHONE + a MediaProjection-prompt at trigger time for the full screen+audio buffer. Onboarding shows each prompt with a 10-second animated explainer and a "Why we need this" panel. All 4 entitlements granted before first-run drill; OS mic-indicator visible whenever listener is active (compliance with iOS 14+ / Android 12+ rules); trigger-time MediaProjection prompt completes in < 2s; failure to grant any one blocks activation and shows remediation card.
C1Always-on voice listener On-device wake-word + phrase detector (e.g. "Mayday Mayday Mayday" or user-chosen phrase). Runs as a Foreground Service (Android) / Live Activity (iOS) with mic indicator required. ≤3% false-positive/day on personalized voice; battery drain < 5%/hr; detection latency < 800ms.
C2Silent-mode handoff On trigger: silence ringer, disable haptic alerts, dim screen, freeze any open app to avoid visible cue. Attacker cannot tell the phone "did something" from screen, sound, or vibration.
C3Multi-camera evidence capture Begin recording front + back cameras + mic concurrently; upload to encrypted cloud bucket in 5-sec chunks. 30-min minimum buffered recording; chain-of-custody hash (SHA-256) per chunk; auto-purge after 30 days unless flagged.
C4Geo + sensor stream Continuous GPS, accelerometer, gyroscope, barometer; fall/impact detection supplements voice trigger. Lat & lng updated every 5s during event; cached locally for offline.
C5Broadcast to trusted contacts Pre-selected list (3–10 people). On trigger: SMS + push with link to live location, live audio stream, and one-tap "I'm safe / call me" reply. Delivered < 5s; SMS via Twilio; works even if contact doesn't have the app.
C6Social channel blast Optional: post to X, IG Story, Facebook with location + timestamp; user pre-authors templates ("If you see this I'm not safe, last seen…"). User-toggleable; default OFF; rate-limit safe.
C7AI voice call to 24/7 contact center Twilio call placed from phone; if phone goes dark / stolen, contact center continues call from its own number ringing the user's phone and any contact. First human voice in < 30s; can call 911 with live audio relay & location.
C8Dedicated SOS phone & live-streaming WebRTC live audio+video stream from phone to contact-center dashboard; bidirectional text. Operator can see what user sees, in real-time, on desktop.
C9Safe-word disarm User speaks a phrase like "All clear, false alarm" to stop the event without dispatch. Logged + timestamped; used to tune false-positive threshold.
C10Stealth mode App icon can be disguised (calculator / weather); entry gesture (e.g. swipe pattern on lockscreen widget) starts Mayday directly. User passes stranger test: phone looks idle.

4.2 V2 (post-MVP)

5 · Experience flows

5.1 Onboarding (≈90 seconds)

  1. Permission ask sequence (each prompt has a 10-second animated explainer + "Why we need this" panel before the OS dialog): (1) microphone — drives the wake-word listener; (2) location — Always Allow — drives the broadcast map + 911 dispatch; (3) camera — dual-cam evidence; (4) microphone + media-recording — Android MediaProjection / iOS mic-indicator shown to user during capture; (5) motion & fitness — fall/impact supplement; (6) notifications + critical alerts (iOS) — broadcast delivery. Foreground-only location is rejected with a one-tap "Open Settings" CTA; the app remains unarmed until Always is granted.
  2. User records trigger phrase × 3 (anti-spoof) and safe-word.
  3. User adds 3–10 trusted contacts (with phonebook friction bypass).
  4. User pre-authors 1–3 social blast templates.
  5. Run a 30-second drill mode that simulates the event end-to-end (does not dial 911).

5.2 Trigger → dispatch (happy path, ~20s end-to-end)

User says "Mayday ×3" On-device detector fires < 800ms Silent capture front+back+mic cloud upload starts Broadcast SMS+push to N=3..10 + social blast if enabled AI voice call 24/7 contact center human in < 30s t = 0s t ≈ 1s t ≈ 3s t ≈ 6s t ≈ 15–25s — voice answers

5.3 Operator console (web dashboard)

6 · Architecture

PHONE (iOS / Android) Wake-word + phrase detector Audio classifier (gunshot/scream) Camera capture (front+back) GPS + IMU + barometer WebRTC uploader (5s chunks) Encrypted local vault (30d) MAYD CLOUD (AWS us-east-1) Ingest API (REST + WebSocket) S3 evidence vault (KMS, Object Lock) Twilio Programmable Voice + SMS Postgres (events, contacts, audit) Redis Streams + BullMQ workers Auth (Cognito) + audit log (immutable) 24/7 CONTACT CENTER (BPO + AI) AI voice agent (LLM + TTS, latency < 600ms) WebRTC operator console (web) Human supervisors (US-based, 24/7) PSAP dispatch (RapidSOS / 911 relay) Translation (100+ languages, real-time) SLA: human voice < 30s, false-rate < 2%

6.1 Stack

Mobile

Swift / SwiftUI (iOS) Kotlin / Jetpack Compose (Android) Apple SpeechAnalyzer (iOS 17+) Android SpeechRecognizer + on-device VAD AVFoundation / Camera2 dual-cam Live Activities / Foreground Services

Cloud

FastAPI (Python) PostgreSQL + pgvector Redis + BullMQ S3 + KMS + Object Lock CloudFront CDN Twilio Voice + Messaging WebRTC (LiveKit)

AI

OpenAI Realtime / Gemini Live (voice) Whisper (transcription) Custom wake-word (Picovoice / on-device) YAMNet (audio events on-device) Tooling: Python + LangGraph

Observability

Datadog / Grafana Sentry Audit log to immutable store Pen-test annually (Trail of Bits)

7 · AI voice & contact-center model

The PRD's most distinctive bet: when the phone may already be stolen, the user is not the voice caller. Mayday itself places an outbound call from a Twilio number to the user's phone (and to contacts) and an AI voice agent speaks with the attacker on the user's behalf.

7.1 Three-tier call flow

  1. Tier 1 — AI voice agent (seconds 0–30): greets, identifies as "Mayday safety assistant on a recorded line for [user name]", continues to listen, transcripts, and escalates based on threat signals (raised voices, weapon mention, location data).
  2. Tier 2 — Human supervisor handoff (< 30s target): trained de-escalation agent takes over via LiveKit handoff. AI summarizes context, continues to log & record.
  3. Tier 3 — 911 dispatch: human agent uses RapidSOS / Carbyne to push GPS + audio relay to the nearest PSAP. Many PSAPs accept silent relay today (Text-to-911 is universal; audio relay is in 60% of CA, expanding).

7.2 Build vs. buy

LayerBuy (V1)Build (V2)
TelephonyTwilio (Programmable Voice + Elastic SIP)In-house SBC if volume > $80k/mo
AI voiceOpenAI Realtime / Gemini LiveCustom fine-tune on safety corpus
Contact center BPOPartner: Telus International, Concentrix, or US-based boutique (Bilingual, 24/7)In-house for high-margin enterprise tier
911 relayRapidSOS Ready, Prepared, Carbyne

7.3 Unit economics (per event)

Cost lineEstimate
Twilio inbound + outbound (US, ~5–8 min)$0.42
AI voice LLM (avg 6 min @ $0.06/min)$0.36
Human supervisor (avg 4 min, $0.55/min loaded)$2.20
S3 storage + WebRTC egress$0.18
911 relay fee (per dispatch)$1.50
Total cost / event~$4.66 (false alarm) — $11 (real dispatch)

Events assumed at 0.6 / user / month (1 every ~2 months per active user); see §10.

8 · Market

TAM · Global personal-safety tech
$14.2B
2026 estimate (Frost, Statista, Allied)
SAM · US women 18–44 + rideshare + college + DV
$3.1B
63M addressable users × $49 ARPU blended
SOM · year-3 realistic capture
$24M
~0.8% SAM share, ~500k paying users

8.1 Demand signals (US, 2024–2026)

9 · Competitive landscape

CompanyTriggerAI voice24/7 centerEvidencePriceMayday edge
Noonlight (acquired by Experian) Tap / hold buttonNoYes (text + dispatch)Audio onlyFree w/ partner / $3.99/mo No hands-free trigger; no video.
bSafe Tap / shake / timerNoNo (P2P only)Audio + GPS$6.99/mo No professional dispatch; no AI.
Citizen Push (incident alert)NoNo (P2P)No$19.99/mo Reactive; no trigger.
Revolar (hardware) Click hardware buttonNoYes (3rd party)No$99 + $9.99/mo Visible; single point of failure.
Apple / Google (built-in) Siri / AssistantLimitedNo (911 only)NoFree Generic; no broadcast; no evidence chain.
Flare / Kortext TapNoYesNo$9.99/mo Closest comp; no voice trigger.
Mayday (this) Voice + audio events + impact Yes (LLM Realtime) Yes (human < 30s) Front + back cam + audio $9.99/mo / $99/yr Only end-to-end voice-triggered product

9.1 Defensibility / moat

10 · Business model & path to $1M ARR in 12 months

10.1 Revenue model

PlanPriceWho paysIncludes
Free$0AnyoneVoice trigger, 1 trusted contact, 60s evidence, no AI call (911 direct).
Mayday Pro$9.99/mo or $99/yrIndividualsUp to 10 contacts, social blast, 30-min evidence, AI voice, human dispatch.
Mayday Pro+$19.99/moPower users / familiesFamily circle (5 phones), smartwatch, priority human dispatch, insurance discount integration.
Mayday for Teams$5/seat/mo (min 25)Rideshare fleets, security, journalism, NGOsOrg dashboard, SSO, admin alerts, evidence retention policies, dedicated ops.
Mayday for Campus$2/student/semesterUniversitiesBranded app, campus dispatch integration, admin analytics, parent optional view.
Mayday Concierge$40/seat/moExecutive protection firms, family officesWhite-label, dedicated operators, SLA < 15s, on-call escalation.

10.2 12-month plan to $1M ARR

Q1 — Validate & build MVP

BuildiOS + Android MVP, on-device wake-word, Twilio voice
BPO partner1 signed (US, 24/7, $0.55/min loaded)
Beta users500 rideshare drivers (free)
CAC$0 (driver communities)
Target revenue$0

Q2 — Launch Pro tier

GTMIG/TikTok creators, women's safety community
Paid users3,000 Pro × $10 × 3 mo
CAC$28 blended
Events / user / mo0.6 (false alarms included)
Run-rate~$360k ARR

Q3 — B2B wedge + insurance

B2B3 university pilots + 1 rideshare fleet
InsuranceLemonade affinity discount live
Paid users8,000 Pro + 1,500 Pro+ + 2,500 B2B seats
CAC$22 blended (B2B < $12)
Run-rate~$820k ARR

Q4 — Cross $1M ARR

Paid users12,000 Pro + 3,000 Pro+ + 6,000 B2B seats
ARPU blended$11.40/mo
CAC / LTV$22 / $132 (12-mo gross LTV)
Gross margin68% (variable = events)
ARR$1.05M

10.3 Sensitivity & downside

Risk to plan. If voice false-trigger exceeds 1.5/user/mo (currently modeled 0.6), COGS jumps from 32% to 51%, gross margin drops to 49%. Mitigation: aggressive personalization, in-app drill mode, "real-events only" event tagging in BPO queue (AI handles ~70% of false alarms autonomously).
Upside. Single viral saved-life moment (TikTok, 5M+ views) historically drives 8–14× monthly installs for safety apps (e.g., Citizen, Flare). Free-tier install → Pro conversion target 6%.

11 · Risks & mitigations

RiskSeverityMitigation
False trigger → wasted contact-center calls, brand damage High Personalized voice; secondary biometric (grip pattern, heart rate via Watch); safe-word disarm; AI pre-screen in first 8s before human handoff.
Misuse as surveillance by stalkers High Strict invite + verified identity for "watching" others; legal terms forbid covert monitoring; chain-of-custody logs; annual third-party audit.
Battery drain from always-on mic Med On-device keyword spotting (Picovoice / Apple SpeechAnalyzer) draws ~1–3%/hr; offer "active session" mode for high-risk windows.
iOS background restrictions blocking always-on mic Med Use Live Activities + Interruption Levels; falls back to quick-tap if Apple denies; push Watch app to compensate.
PSAPs rejecting audio relay in some states Med Maintain jurisdiction-by-jurisdiction routing table; default to text-to-911 + live operator on call; partner with RapidSOS for universal coverage.
Liability if dispatch fails High Professional liability insurance ($5M); clear SLA + ToS; "best-effort dispatch" language; user acknowledges no guarantee of response time.
Privacy / data retention lawsuits High 30-day auto-purge default; encrypted at rest; SOC 2 Type II by month 9; explicit consent for AI voice transcription; transparent evidence chain.
Telecom / Twilio price spike Low Multi-provider (Twilio + Bandwidth + Telnyx) with failover.

13 · Success metrics (north-star + ladder)

North star

Lives protected / month

Sum of: real emergencies where Mayday led to dispatch OR evidence used in prosecution OR contact-center de-escalated.

Ladder (12 months)

WAU / MAU≥ 55%
Free → Pro conversion≥ 6%
False-positive rate< 1.5 events / user / mo
Detection latencyP95 < 1.0s
Human-handoff timeP95 < 30s
NPS≥ 65
Refund / chargeback< 1.2%
LTV / CAC≥ 3.5×

14 · Roadmap (12 months)

M1 — Foundations

Month 1–2

Wake-word + on-device model; iOS SwiftUI + Android Compose scaffolding; Twilio + Postgres + S3; BPO RFP.

M2 — Capture & dispatch

Month 3

Dual-camera evidence capture, SMS broadcast, 911 direct call (no AI yet). Internal dogfood.

M3 — AI voice + operator console

Month 4

OpenAI Realtime / LiveKit integration, operator web dashboard, AI → human handoff.

M4 — Closed beta

Month 5

500 rideshare drivers, free; weekly safety drills; metrics instrumentation.

M5 — Public launch (Pro)

Month 6

App Store + Play Store launch, IG/TikTok creator campaign, Pro tier $9.99/mo.

M6 — B2B + insurance

Month 7–9

University pilots, rideshare fleet deals, Lemonade affinity discount.

M7 — SOC 2 + Watch app

Month 10

SOC 2 Type II, Watch OS app, Pro+ family plan launch.

M8 — Audio-event ML (V2)

Month 11–12

On-device gunshot / scream classifier; concierge tier for executive-protection firms.

15 · Open questions / decisions needed

  1. BPO choice — US-based boutique (Citizen's "Protect" partner model) vs. international for cost? Trade-off: voice quality & trust vs. COGS.
  2. Brand name — keep "Mayday" (good recall, but FAA-trademark-adjacent) or rename? Candidates: Sentinel / Resound / Vesper / Clearview.
  3. Always-on vs. session-mode default — battery vs. protection. Ship both; default to session + 8-hr scheduled auto-arm.
  4. Funding — bootstrap to first $250k ARR (no contact-center scale) or raise $2–4M seed for 24/7 ops + AI training data?
  5. Distribution partner priority — Uber / Lyft (B2B) vs. university safety (B2B2C) vs. insurance (B2C at scale).

Recommended next step: validate C7 (AI voice call) + BPO with a 2-week Lo-fi spike (Twilio + OpenAI Realtime + a 5-seat BPO), and confirm with 20 rideshare-driver interviews that the AI-voice-to-stranger framing works in a real threat scenario. Estimated: $4k, 2 weeks.

Appendix · What this PRD demonstrates