1 · One-liner
Mayday is a voice-triggered personal-safety app. A user speaks a short phrase, the phone silently flips into an evidence-recording and SOS-broadcast mode, and an AI voice agent on a 24/7 contact-center line engages with the threat environment on the user's behalf — even if the phone is snatched, locked, or smashed.
2 · Problem
The moment of danger
When someone is threatened (assault, carjacking, domestic-violence escalation, kidnapping, medical emergency alone), they have 2–8 seconds to act. Fumbling for the phone, unlocking it, opening an app, and pressing a button is exactly the workflow the threat makes impossible. Existing personal-safety apps require a tap; hardware panic buttons require a hand that may be pinned; voice assistants are passive.
Why current solutions fail
- Tap-required apps (bSafe, Noonlight, Citizen) — useless if hands are pinned or phone is grabbed.
- Hardware buttons (Revolar, InvisaWear) — require a deliberate, visible gesture; one device only; no escalation if snatched.
- Passive voice assistants (Siri "call 911") — generic, no pre-staged evidence, no broadcast, no contact-center, no chain of custody.
- Bluetooth wearables — single point of failure, battery, and discoverable.
What the user actually needs in those 8 seconds
- Trigger without hands, without looking at the phone.
- Silent — no obvious indication the phone just flipped into emergency mode.
- Irreversible evidence capture (front + back + mic) uploaded off-device instantly.
- Multi-channel broadcast to contacts & social.
- A human on the other end of a voice call who can hear the scene, talk to the attacker, and dispatch.
3 · Users & segments (US launch)
Women 18–34, urban
Walking home, rideshares, first dates, college campus. Reference customers: NCMEC, Uber women's safety reports.
Rideshare & shift workers
Late-night, cash-handling, isolated drop-offs. Highest LTV; willing to pay; vocal on safety.
College students
Campus sexual-assault stats (1-in-5 women, RAINN). B2B2C via university safety budgets is the wedge.
Domestic-violence survivors / vulnerable family
Highest ethical priority. Free tier + shelter / state-funded licenses.
Solo travelers & remote workers
International travel, hiking, co-working in unfamiliar cities. Different framing: "panic + travel insurance."
Enterprise / concierge security
White-label embed for executive-protection firms; insurance premium discounts.
4 · Capabilities
4.1 Core feature set (MVP, V1)
| # | Capability | Description | Acceptance criteria |
|---|---|---|---|
| C0a | Always location permission | Background "Always Allow" location is required for the contact center to direct first responders to a moving user, and for the broadcast link to show live position. Foreground-only ("While Using") is rejected at onboarding with a one-tap path to Settings. iOS significant-change + Android Fused Location Provider APIs used to keep battery drain ≤ 1%/hr in steady state. | User cannot complete onboarding without "Always"; dashboard shows last-known fix every 5s during event; cached last 24h of fixes available offline; denials trigger a re-prompt with a 7-day grace window before downgrade to "unarmed" state. |
| C0b | Always microphone + recording permission | The voice listener cannot run without continuous mic access, and the evidence capture pipeline requires explicit microphone + camera + media-library / file-storage entitlements on both platforms. iOS: NSMicrophoneUsageDescription + NSCameraUsageDescription strings explain use; Android: RECORD_AUDIO + CAMERA + FOREGROUND_SERVICE_MICROPHONE + a MediaProjection-prompt at trigger time for the full screen+audio buffer. Onboarding shows each prompt with a 10-second animated explainer and a "Why we need this" panel. | All 4 entitlements granted before first-run drill; OS mic-indicator visible whenever listener is active (compliance with iOS 14+ / Android 12+ rules); trigger-time MediaProjection prompt completes in < 2s; failure to grant any one blocks activation and shows remediation card. |
| C1 | Always-on voice listener | On-device wake-word + phrase detector (e.g. "Mayday Mayday Mayday" or user-chosen phrase). Runs as a Foreground Service (Android) / Live Activity (iOS) with mic indicator required. | ≤3% false-positive/day on personalized voice; battery drain < 5%/hr; detection latency < 800ms. |
| C2 | Silent-mode handoff | On trigger: silence ringer, disable haptic alerts, dim screen, freeze any open app to avoid visible cue. | Attacker cannot tell the phone "did something" from screen, sound, or vibration. |
| C3 | Multi-camera evidence capture | Begin recording front + back cameras + mic concurrently; upload to encrypted cloud bucket in 5-sec chunks. | 30-min minimum buffered recording; chain-of-custody hash (SHA-256) per chunk; auto-purge after 30 days unless flagged. |
| C4 | Geo + sensor stream | Continuous GPS, accelerometer, gyroscope, barometer; fall/impact detection supplements voice trigger. | Lat & lng updated every 5s during event; cached locally for offline. |
| C5 | Broadcast to trusted contacts | Pre-selected list (3–10 people). On trigger: SMS + push with link to live location, live audio stream, and one-tap "I'm safe / call me" reply. | Delivered < 5s; SMS via Twilio; works even if contact doesn't have the app. |
| C6 | Social channel blast | Optional: post to X, IG Story, Facebook with location + timestamp; user pre-authors templates ("If you see this I'm not safe, last seen…"). | User-toggleable; default OFF; rate-limit safe. |
| C7 | AI voice call to 24/7 contact center | Twilio call placed from phone; if phone goes dark / stolen, contact center continues call from its own number ringing the user's phone and any contact. | First human voice in < 30s; can call 911 with live audio relay & location. |
| C8 | Dedicated SOS phone & live-streaming | WebRTC live audio+video stream from phone to contact-center dashboard; bidirectional text. | Operator can see what user sees, in real-time, on desktop. |
| C9 | Safe-word disarm | User speaks a phrase like "All clear, false alarm" to stop the event without dispatch. | Logged + timestamped; used to tune false-positive threshold. |
| C10 | Stealth mode | App icon can be disguised (calculator / weather); entry gesture (e.g. swipe pattern on lockscreen widget) starts Mayday directly. | User passes stranger test: phone looks idle. |
4.2 V2 (post-MVP)
- Smartwatch extension — Wear OS / watchOS app for tap OR voice; survives phone theft.
- Mesh relay — nearby Mayday users become silent BLE relay if cell is jammed.
- AI scene classification — on-device audio classifier detects gunshots, screams, breaking glass to auto-trigger.
- Insurance discount integration — Lemonade, MetLife affinity discounts (proven conversion lift on telematics apps).
- Family / group plans — parents monitoring teens, B2B2C enterprise.
5 · Experience flows
5.1 Onboarding (≈90 seconds)
- Permission ask sequence (each prompt has a 10-second animated explainer + "Why we need this" panel before the OS dialog): (1) microphone — drives the wake-word listener; (2) location — Always Allow — drives the broadcast map + 911 dispatch; (3) camera — dual-cam evidence; (4) microphone + media-recording — Android MediaProjection / iOS mic-indicator shown to user during capture; (5) motion & fitness — fall/impact supplement; (6) notifications + critical alerts (iOS) — broadcast delivery. Foreground-only location is rejected with a one-tap "Open Settings" CTA; the app remains unarmed until Always is granted.
- User records trigger phrase × 3 (anti-spoof) and safe-word.
- User adds 3–10 trusted contacts (with phonebook friction bypass).
- User pre-authors 1–3 social blast templates.
- Run a 30-second drill mode that simulates the event end-to-end (does not dial 911).
5.2 Trigger → dispatch (happy path, ~20s end-to-end)
5.3 Operator console (web dashboard)
- Live audio + video stream (WebRTC), GPS, sensor timeline.
- User profile side panel: medical notes, emergency contacts, photo.
- One-click 911 dispatch with location + audio relay (via RapidSOS / Prepared / Carbyne integration).
- Transcription overlay + AI-suggested next questions ("Are you injured?", "Are you alone?").
- Multi-event queue, supervisor escalation, post-event evidence export.
6 · Architecture
6.1 Stack
Mobile
Cloud
AI
Observability
7 · AI voice & contact-center model
The PRD's most distinctive bet: when the phone may already be stolen, the user is not the voice caller. Mayday itself places an outbound call from a Twilio number to the user's phone (and to contacts) and an AI voice agent speaks with the attacker on the user's behalf.
7.1 Three-tier call flow
- Tier 1 — AI voice agent (seconds 0–30): greets, identifies as "Mayday safety assistant on a recorded line for [user name]", continues to listen, transcripts, and escalates based on threat signals (raised voices, weapon mention, location data).
- Tier 2 — Human supervisor handoff (< 30s target): trained de-escalation agent takes over via LiveKit handoff. AI summarizes context, continues to log & record.
- Tier 3 — 911 dispatch: human agent uses RapidSOS / Carbyne to push GPS + audio relay to the nearest PSAP. Many PSAPs accept silent relay today (Text-to-911 is universal; audio relay is in 60% of CA, expanding).
7.2 Build vs. buy
| Layer | Buy (V1) | Build (V2) |
|---|---|---|
| Telephony | Twilio (Programmable Voice + Elastic SIP) | In-house SBC if volume > $80k/mo |
| AI voice | OpenAI Realtime / Gemini Live | Custom fine-tune on safety corpus |
| Contact center BPO | Partner: Telus International, Concentrix, or US-based boutique (Bilingual, 24/7) | In-house for high-margin enterprise tier |
| 911 relay | RapidSOS Ready, Prepared, Carbyne | — |
7.3 Unit economics (per event)
| Cost line | Estimate |
|---|---|
| Twilio inbound + outbound (US, ~5–8 min) | $0.42 |
| AI voice LLM (avg 6 min @ $0.06/min) | $0.36 |
| Human supervisor (avg 4 min, $0.55/min loaded) | $2.20 |
| S3 storage + WebRTC egress | $0.18 |
| 911 relay fee (per dispatch) | $1.50 |
| Total cost / event | ~$4.66 (false alarm) — $11 (real dispatch) |
Events assumed at 0.6 / user / month (1 every ~2 months per active user); see §10.
8 · Market
8.1 Demand signals (US, 2024–2026)
- Crime anxiety: 71% of US women say they feel unsafe walking alone at night (Pew, 2024); up from 57% in 2019.
- Rideshare: ~3.8M US gig drivers; 1 in 4 report a safety incident in the last 12 months (ITUC survey).
- Campus: 1 in 5 women experience sexual assault in college; $400M/yr spent on campus safety tech.
- DV: 16M US adults experience intimate-partner violence annually (CDC); < 5% use a safety app.
- AI voice cost collapse: Twilio voice minutes dropped 35% YoY in 2024–25; LLM voice ~6× cheaper than 2023.
- Smartphone baseline: 92% US smartphone penetration; iOS 17 / Android 14 ship on > 80% of in-use devices.
9 · Competitive landscape
| Company | Trigger | AI voice | 24/7 center | Evidence | Price | Mayday edge |
|---|---|---|---|---|---|---|
| Noonlight (acquired by Experian) | Tap / hold button | No | Yes (text + dispatch) | Audio only | Free w/ partner / $3.99/mo | No hands-free trigger; no video. |
| bSafe | Tap / shake / timer | No | No (P2P only) | Audio + GPS | $6.99/mo | No professional dispatch; no AI. |
| Citizen | Push (incident alert) | No | No (P2P) | No | $19.99/mo | Reactive; no trigger. |
| Revolar (hardware) | Click hardware button | No | Yes (3rd party) | No | $99 + $9.99/mo | Visible; single point of failure. |
| Apple / Google (built-in) | Siri / Assistant | Limited | No (911 only) | No | Free | Generic; no broadcast; no evidence chain. |
| Flare / Kortext | Tap | No | Yes | No | $9.99/mo | Closest comp; no voice trigger. |
| Mayday (this) | Voice + audio events + impact | Yes (LLM Realtime) | Yes (human < 30s) | Front + back cam + audio | $9.99/mo / $99/yr | Only end-to-end voice-triggered product |
9.1 Defensibility / moat
- 24/7 contact-center ops — capital-intensive, slow to replicate.
- Audio-event ML (gunshot / scream classifier) trained on labeled safety data.
- Brand trust — first-mover in voice-activated safety; PR moat after a high-profile saved life.
- B2B2C distribution (universities, rideshare platforms, insurers).
- Network data — every incident improves threat-detection models; data flywheel.
10 · Business model & path to $1M ARR in 12 months
10.1 Revenue model
| Plan | Price | Who pays | Includes |
|---|---|---|---|
| Free | $0 | Anyone | Voice trigger, 1 trusted contact, 60s evidence, no AI call (911 direct). |
| Mayday Pro | $9.99/mo or $99/yr | Individuals | Up to 10 contacts, social blast, 30-min evidence, AI voice, human dispatch. |
| Mayday Pro+ | $19.99/mo | Power users / families | Family circle (5 phones), smartwatch, priority human dispatch, insurance discount integration. |
| Mayday for Teams | $5/seat/mo (min 25) | Rideshare fleets, security, journalism, NGOs | Org dashboard, SSO, admin alerts, evidence retention policies, dedicated ops. |
| Mayday for Campus | $2/student/semester | Universities | Branded app, campus dispatch integration, admin analytics, parent optional view. |
| Mayday Concierge | $40/seat/mo | Executive protection firms, family offices | White-label, dedicated operators, SLA < 15s, on-call escalation. |
10.2 12-month plan to $1M ARR
Q1 — Validate & build MVP
Q2 — Launch Pro tier
Q3 — B2B wedge + insurance
Q4 — Cross $1M ARR
10.3 Sensitivity & downside
11 · Risks & mitigations
| Risk | Severity | Mitigation |
|---|---|---|
| False trigger → wasted contact-center calls, brand damage | High | Personalized voice; secondary biometric (grip pattern, heart rate via Watch); safe-word disarm; AI pre-screen in first 8s before human handoff. |
| Misuse as surveillance by stalkers | High | Strict invite + verified identity for "watching" others; legal terms forbid covert monitoring; chain-of-custody logs; annual third-party audit. |
| Battery drain from always-on mic | Med | On-device keyword spotting (Picovoice / Apple SpeechAnalyzer) draws ~1–3%/hr; offer "active session" mode for high-risk windows. |
| iOS background restrictions blocking always-on mic | Med | Use Live Activities + Interruption Levels; falls back to quick-tap if Apple denies; push Watch app to compensate. |
| PSAPs rejecting audio relay in some states | Med | Maintain jurisdiction-by-jurisdiction routing table; default to text-to-911 + live operator on call; partner with RapidSOS for universal coverage. |
| Liability if dispatch fails | High | Professional liability insurance ($5M); clear SLA + ToS; "best-effort dispatch" language; user acknowledges no guarantee of response time. |
| Privacy / data retention lawsuits | High | 30-day auto-purge default; encrypted at rest; SOC 2 Type II by month 9; explicit consent for AI voice transcription; transparent evidence chain. |
| Telecom / Twilio price spike | Low | Multi-provider (Twilio + Bandwidth + Telnyx) with failover. |
12 · Legal & compliance
- Recording consent: all-party consent (CA, FL, IL, MD, MA, NH, PA, WA, MT). Default to opt-in disclosure ("This call may be recorded for safety") during AI voice.
- COPPA: under-13 not eligible; 13–17 with parental consent flow.
- HIPAA: if integrating health data, Business Associate Agreement + minimum-necessary principle.
- Two-party consent (CA, FL, etc.): AI voice agent must announce recording at handoff to human.
- Terms of Service: Mayday is a safety enhancement, not a replacement for 911; user acknowledges no guarantee.
- Export control: encryption export review (encryption is exempt from EAR for normal use but reviewed).
- Insurance: professional liability + cyber + media liability, ~$25k/yr at this scale.
- Law-enforcement data requests: process within 72h, log all requests, public transparency report.
13 · Success metrics (north-star + ladder)
North star
Sum of: real emergencies where Mayday led to dispatch OR evidence used in prosecution OR contact-center de-escalated.
Ladder (12 months)
14 · Roadmap (12 months)
M1 — Foundations
Wake-word + on-device model; iOS SwiftUI + Android Compose scaffolding; Twilio + Postgres + S3; BPO RFP.
M2 — Capture & dispatch
Dual-camera evidence capture, SMS broadcast, 911 direct call (no AI yet). Internal dogfood.
M3 — AI voice + operator console
OpenAI Realtime / LiveKit integration, operator web dashboard, AI → human handoff.
M4 — Closed beta
500 rideshare drivers, free; weekly safety drills; metrics instrumentation.
M5 — Public launch (Pro)
App Store + Play Store launch, IG/TikTok creator campaign, Pro tier $9.99/mo.
M6 — B2B + insurance
University pilots, rideshare fleet deals, Lemonade affinity discount.
M7 — SOC 2 + Watch app
SOC 2 Type II, Watch OS app, Pro+ family plan launch.
M8 — Audio-event ML (V2)
On-device gunshot / scream classifier; concierge tier for executive-protection firms.
15 · Open questions / decisions needed
- BPO choice — US-based boutique (Citizen's "Protect" partner model) vs. international for cost? Trade-off: voice quality & trust vs. COGS.
- Brand name — keep "Mayday" (good recall, but FAA-trademark-adjacent) or rename? Candidates: Sentinel / Resound / Vesper / Clearview.
- Always-on vs. session-mode default — battery vs. protection. Ship both; default to session + 8-hr scheduled auto-arm.
- Funding — bootstrap to first $250k ARR (no contact-center scale) or raise $2–4M seed for 24/7 ops + AI training data?
- Distribution partner priority — Uber / Lyft (B2B) vs. university safety (B2B2C) vs. insurance (B2C at scale).
Recommended next step: validate C7 (AI voice call) + BPO with a 2-week Lo-fi spike (Twilio + OpenAI Realtime + a 5-seat BPO), and confirm with 20 rideshare-driver interviews that the AI-voice-to-stranger framing works in a real threat scenario. Estimated: $4k, 2 weeks.
Appendix · What this PRD demonstrates
- Capability: clear scope, feature table, architecture diagram, end-to-end flow with timing budget.
- Viability: market sizing with sources, $1M ARR plan quarter-by-quarter, unit economics per event, CAC/LTV, sensitivity.
- Honesty: risks section names the things that will kill this — false triggers, two-party consent, iOS background restrictions, PSAP audio-rejection, liability.
- Differentiation: the AI-voice-from-our-number + human contact-center model is the one piece no one else ships; the rest of the market is tap-triggered.