1. Introduction
Welcome to MATA ("we," "our," or "us"). We are committed to protecting your privacy and keeping your habit data, social activity, and account information handled responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our mobile application, website, and related services.
2. Information We Collect
2.1 Information You Provide
- Account information: email address, username, password credentials handled by our authentication provider, and birthdate for the under-13 age gate
- Profile information: display name, profile photo, bio, friends, blocked users, and basic public profile details
- Habit data: habits you create, schedules, reminders, completion records, streaks, checklist/counter/score values, notes, and template usage. This may include fitness, exercise, or wellness activity you choose to track.
- User content: stories, photos, videos, messages, group names/descriptions, reports, and other text or media you choose to submit
- Social and safety information: friend requests, friendships, group memberships, direct and group messages, reports, blocks, and moderation snapshots
- Referral information: your personal referral code, a code you use at signup, the referring and referred account identifiers, referral status, qualification and event timestamps, and campaign or team assignment when applicable
- Device and notification information: push notification tokens and notification preferences if you enable notifications
2.2 Automatically Collected Information
- Device information: device type, operating system, app version, push notification tokens, app-installation identifiers used for crash diagnostics, crash data, and related technical information
- Usage data: app interactions and feature activity such as story views, tag use, referral qualification, performance, and security-related events needed to operate, personalize, and improve the service
- Approximate time context: your device timezone or date/time context for habit scheduling and reminders. We do not request precise location permission for this purpose.
2.3 Optional Contact Discovery
If you choose Find Friends from Contacts and grant permission, MATA reads contact names and email addresses on your device. Raw contact names and email addresses are not uploaded. Email addresses are normalized and converted on your device into SHA-256 fingerprints; only those fingerprints are sent to MATA's Supabase backend for a real-time account match. The fingerprints are not stored after the request. Matching accounts are returned so you can decide whether to send a friend request. Inviting a contact who is not on MATA uses your device's native share sheet.
2.4 Referrals and Campaign Standings
MATA assigns a personal referral code to each account. If a new user enters or opens a referral code, we record the referring and referred account identifiers, the code used, whether the referral is pending or qualified, and related timestamps. A referral qualifies when the referred user adds their first habit. Referral landing pages do not display the referrer's or referred user's private profile information.
If we operate a referral campaign, we may associate participating accounts with a campaign and team and calculate referral standings. Campaigns are private by default. If an individual leaderboard is made public, it may display a participant's username, display name, team label, and referral score. A team-only public leaderboard displays aggregate team results without member identifiers. Any campaign rules will explain what information is public before participation.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process your account registration and authenticate your identity
- Enable social features like friend connections and messaging
- Send you notifications about your habits, reminders, and friend activities
- Deliver safety features, including profanity filtering, reporting, blocking, and moderation review
- Operate referrals, templates, creator/coach role-gated features, and account provisioning when applicable
- Respond to your inquiries and provide customer support
- Detect and prevent fraud, abuse, and security issues
- Comply with legal obligations
4. Information Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- With your consent: When you choose to share content or connect with friends
- Public referral standings: If you participate in a campaign configured with a public individual leaderboard, the participant information and score described above may be publicly visible. Team-only public standings contain aggregate team results.
- Service providers: With trusted third-party services that help us operate our platform, such as Supabase for authentication, database, storage, and server functions; Firebase Crashlytics for crash diagnostics; Cloudflare for hosting, DNS, and bot protection; Resend for email; Mux for video processing and streaming when video features are used; and Apple services for iOS distribution, push notifications, and app review operations
- Legal requirements: When required by law or to protect our rights and safety
- Business transfers: In connection with a merger, acquisition, or sale of assets
MATA does not sell your personal information and does not use your data to track you across other companies' apps or websites for advertising.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Your Rights and Choices
You have the right to:
- Access and update your personal information through the app settings
- Delete your account and associated data from within the app
- Opt out of non-essential notifications
- Request a copy of your data
- Request deletion of your personal information
- Block other users and report content or behavior that violates our rules
Some records may be retained when needed for safety, security, legal compliance, abuse prevention, or moderation integrity. For example, a report snapshot may be retained after account deletion so we can investigate abuse and protect other users.
7. Children's Privacy
Our services are not intended for children under 13 years of age. Signup requires a birthdate, and users under 13 are not permitted to create an account. If you become aware that a child under 13 has provided us with personal information, please contact us, and we will take appropriate steps to delete such information.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.