Privacy Policy
Matters is a set of AI agents that remember for you. They sit at the places your life arrives: your messages, your mail, your calendar, your meetings, anything you say out loud. They read what comes in, work out which line is a promise you made, and write it down with the day and the person attached. This policy explains what they collect, why, how long it is kept, and how to remove it.
What Matters collects
Your account. An email address. There is no password: signing in uses a six-digit code that is stored hashed and expires after ten minutes.
Your tasks. The tasks you create or that the agents extract for you, with whatever they carry: a title, a date, a person, a note. These live on your device and are copied to our server so your other devices can see the same list.
What you capture. Text you paste, speak, share or copy is sent once to be read into a task, and is then discarded. Only the resulting task is kept. The raw text is not stored and is not used to train any model.
Google user data
If you choose to connect a Google account, Matters requests read-only access to Gmail (gmail.readonly) and Google Calendar (calendar.readonly).
It uses that access for one purpose: to find commitments you have made or been asked for, and turn them into tasks on your own list. Message bodies and event details are read at the moment of extraction and are not retained. Matters does not send email, does not modify or create calendar events, and does not read anything on your behalf outside that purpose.
Limited Use.Matters’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never sold, never used for advertising, and never used to train generalised artificial intelligence models. It is not transferred to anyone except as necessary to provide the feature you asked for, or where required by law.
You can disconnect a Google account at any time from Settings inside the app, or by revoking access at your Google account permissions. Disconnecting stops all further access immediately and deletes the stored tokens.
Who else sees it
Nobody buys it and nobody advertises against it. Four companies process data on our behalf, each for one job, and none of them may use it for anything else:
- Anthropic reads your captures into tasks, and answers the questions you ask of your own list. What you captured is sent for the seconds that takes. Under their API terms it is not used to train their models, and it is held only briefly, for abuse monitoring, before being deleted.
- OpenAI stands in when Anthropic cannot answer, and turns your voice notes into text. Audio and text are sent for the seconds that takes. Under their API terms neither is used to train their models, and both are held only briefly, for abuse monitoring, before being deleted.
- SendGrid delivers our email: sign-in codes and the occasional notice.
- Bachs handles payment for Pro. They see your card; we never do.
The database and the site itself are hosted on our behalf by our infrastructure providers. That is the whole list.
When you record a voice note or a meeting while signed in, the recording itself is sent to our transcription provider, turned into words, and discarded; only the words are kept, and only as the tasks they became. Signed out or offline, your device transcribes it instead and the recording never leaves the phone.
If you switch your calendar on, the titles and times of your events are shown beside your tasks. Two features also send those titles to the AI above: asking a question of your own list, and the daily brief, so an answer can account for a day that is already full. Events are only ever read, never changed, and switching the calendar off in Settings stops it being read at all.
How long it is kept
Tasks are kept until you delete them or delete your account. Access tokens for a connected service are kept, encrypted, until you disconnect it. Raw captured text is not kept at all.
Deleting it
You can delete any task from any device, and it goes from our servers and your other devices within moments. Signing out clears the list from the device in your hand.
To delete the whole account, write to us through the contact page, giving the address you sign in with; it is done within 72 hours. Delete your account sets out exactly what that erases and the little that is kept. See Your data for a plainer account of what is stored where.
Children
Matters is not directed at children under 13 and does not knowingly collect their data.
Changes
If this policy changes in a way that affects what is collected or why, the date at the top changes and anyone with a connected account is told by email.
Contact
Questions about privacy, or a request to delete something: contact us.