Privacy Policy

Information we collect

Account information. When you sign in with Google, we receive your name, email address, profile picture, and Google account identifier. On iPhone, you can also use Apple sign-in. Apple sends us an identity token and authorization code for sign-in. The token contains your Apple account identifier, and Apple may also send your name and email address. If you hide your email, we receive the private relay address Apple gives us instead of your personal email address. We do not merge accounts by email address. You can write a request before signing in, but sending it requires you to sign in.

Content you give us. We keep the messages you send, the files you share, Mateo’s replies, and a record of the tasks and actions Mateo carries out for you.

Connected apps. When you connect an app such as Gmail, Google Calendar, Google Drive, Outlook, Microsoft Teams, Slack, Notion, Todoist, or Asana, we access the data that the permissions you grant allow, and only to do what you ask and to find things you may want help with.

Your Android phone (Google Play edition). You choose which phone capabilities to enable. Notification access lets Mateo read notification titles, content, and source apps to find or summarize information you request. Contacts and calendar access let it find saved contact details and read or change events for your tasks. Location access lets it use your approximate or precise position for a requested task while the app is open. Usage access lets it read app names, storage sizes, and last-used times to explain storage use and identify unused apps; it does not grant access to files inside those apps. Mateo sends the data needed for these tasks to its servers and the AI providers named below. Authorized notification, contact, calendar, and usage tasks can run while Mateo is in the background. You can turn Phone access or individual capabilities off in Mateo, or revoke access in Android Settings.

SMS in the Google Play edition. Mateo can prepare a text message and open the system SMS app for you to review, edit, send, or cancel. Mateo does not request SMS or Call Log permissions, read the SMS database, or send SMS directly. Text and recipient details you provide for a draft are processed by Mateo and its AI providers. Notification access can also expose message text contained in notifications from messaging apps. Carrier charges may apply to messages you send in the system SMS app.

Photos, videos, and files in the Google Play edition. You select individual attachments through Android system pickers. Selected images and files are uploaded when you add them to a message or feedback; content needed for your request is processed by Mateo and its AI providers. The app does not request broad photo-library access or ongoing access to folders. You can manually save a result to a location you choose through the system save dialog. Voice input uploads audio for transcription. These actions do not authorize scanning your photo library or folders.

Android versions downloaded from our website or APKPure may offer additional optional access to messages, media libraries, selected folders, background location, or app screens and controls. Availability depends on the version; the app explains and requests the relevant access, and you can turn it off.

Android push notifications use JPush and its Firebase Cloud Messaging delivery integration. They process a registration identifier and notification delivery data to reach your device. Push registration starts after sign-in. Signing out stops message delivery for that login.

On iPhone, we use the camera only when you choose to take a photo. We use the system photo picker only when you choose an image. Photos and files start uploading to Mateo when you add them to the message composer, before you tap Send. Removing an attachment from the composer prevents it from being included in that message.

If you ask Mateo to use your iPhone, the Mateo app accesses data only while it is open and unlocked, within the actions and resource scopes you enable in Permissions. Requests can use contacts, calendar events, reminders, photos you allow, files in folders you choose, your precise location, music library metadata, or details of alarms created by Mateo. Data needed for the request is sent to Mateo and to the AI providers named in this policy. The app explains this sharing when you enable an action. You can turn actions off in Mateo or revoke system permissions in iOS Settings. The photo and file upload switch controls photo and file contents; it does not stop other enabled actions from sharing their results.

Reading clipboard text requires you to tap Paste for each request. The pasted text is then shared with Mateo and its AI providers to complete the request. Deleting an iPhone calendar event requires a separate confirmation that shows the event and whether the deletion includes future occurrences. Cancelling these prompts does not authorize the action.

If you enable iPhone notifications, we store your device token and send notifications through the Apple Push Notification service. Each notification includes the first 180 characters of a new Mateo message, a chat identifier, and a message event identifier. The message preview can appear on your lock screen according to your phone settings.

Usage information. We collect technical and usage data, such as pages visited, device and browser type, language, approximate location from your IP address, errors, and where you came from. We record how you use the website and web app, including recordings of your sessions, to understand problems and improve Mateo. The Android app uses PostHog for product analytics, including app interactions and technical context, but does not record sessions. The iPhone app uses PostHog for product analytics, including app interactions and technical context, and sends crash reports without your account identity. It does not record sessions or track you across other companies' apps.

Android installation source. The first time you open the Android app, it sends us a random installation identifier and how the app was installed, such as the app store that installed it and the campaign information that Google Play provides. If you used a download link on our website, or if you sign in with an account that visited our website, we connect your installation to that visit. If your website visit and your installation come from the same network within 72 hours, we can also connect them. For this, we keep only a keyed hash of the network address, not the address itself, and we delete it after 7 days. People who share a network, such as a home or mobile network, can be connected by mistake, so we use these connections only to count which pages and links lead people to Mateo. We do not use them to make decisions about you or for advertising. We delete installation and download records 24 months after we receive them; if you close your account sooner, we keep them only without the link to your account. We do this based on our legitimate interest in measuring how people find Mateo. You can object by emailing [email protected].

Other people. If you ask Mateo to contact someone, we process that person’s email address, the message, and their reply. If you join through an invite link, we record who invited you.

How we use information

We use information to run Mateo: to sign you in, answer your requests, find things that need your attention, carry out tasks in the apps you connect, send you notifications, keep your history, and protect the service against abuse.

We also use it to measure and improve Mateo, to fix errors, and to enforce usage limits and our Terms of Use.

We do not sell your personal information, and we do not use it for advertising.

We do not use your information to train AI models.

Google user data

Mateo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Gmail, Google Calendar, and Google Drive data only to provide and improve the features you use in Mateo. We do not use this data to develop or train general AI models, and people do not read it unless you ask us to, it is needed for security, or the law requires it.

AI model processing

To answer a request, Mateo sends the information needed for that request to AI model providers, including OpenRouter, OpenAI, and Google Gemini, depending on the task and configured provider. They process it to produce a response for you under their agreements with us. These services can receive your messages, attached images or files, or audio when needed to answer, create images, or transcribe speech.

On iPhone, you see an AI data notice before you first open the conversation. You must agree before you can continue to the conversation. If you dictate a message, the app records audio only after you tap the microphone and grant access. It uploads the audio to Mateo for transcription. You can edit the resulting text before you send it.

Service providers

We use third-party services to host Mateo, run AI models, send notifications, measure usage, and connect some of your apps. They process information on our behalf only to provide their service to us.

We may disclose information when the law requires it, or when it is needed to protect users, the public, or Mateo.

Retention and deletion

We keep your information while your account is active and as long as needed to provide Mateo.

Successful or cancelled dictation removes its audio from the server. A failed transcription can keep audio for retry for up to 24 hours. The server removes expired dictation resources while it runs, and the app removes local recordings after success, cancellation, or leaving the page.

You can disconnect an app at any time; this stops future access through that connection. Closing your account takes effect immediately and cannot be undone. It revokes access on all devices and schedules stored conversations, memories, files, browser profiles, and imported data for automatic deletion after 30 days. Signing in again creates a new account without the old data. Closing an account with an Apple identity also asks Apple to revoke your Apple authorization. Some records may need to be retained to meet legal obligations or resolve disputes.

Request account closure and data deletion

In the Android app, open Settings, then Profile, then Close account. You can also close your account from account settings in the web app or iPhone app. The closure applies to the shared Mateo account across these apps.

If you cannot use the app, email [email protected] to request closure of your Mateo account and deletion of its data. Include the sign-in email address so we can identify the account. Do not send passwords or sign-in tokens. We may ask you to verify that you own the account before acting on your request.

Security and international transfers

We use access controls, encryption in transit, and other safeguards to protect your information. No service can guarantee complete security.

Mateo and its providers may process information in countries other than the one where you live.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict how we use it. To make a request, email us. We may need to confirm your identity first.

Children

Mateo is not for anyone under 16. We do not knowingly collect information from children.

Changes and contact

We may update this policy as Mateo changes. We will change the date above, and tell you in the product when a change is significant.

For privacy questions or requests, email [email protected].