Local-first by design. Your phone is the source of truth for everything uMate captures. The server is a transient processor that deletes data immediately after your device acknowledges receipt. We do not sell data, run third-party advertising, or use your content to train external models.
1. What we collect
- Audio recordings captured while the app is actively recording. An orange “Recording” badge stays visible at the top of the screen during capture. On-device voice activity detection (VAD) filters silence; only spoken segments are uploaded.
- Photos that you explicitly select from your library or capture using the in-app camera.
- Text input you type in the search or chat bar.
- Voiceprint sample (~15 seconds, optional). Used only to identify your voice in multi-speaker recordings. You can skip enrollment or re-record at any time.
- Anonymous device identifier (Apple’s
identifierForVendor) to scope your data to this device.
- Apple ID identifier and email only if you choose to Sign in with Apple. Used to associate your data with a stable account so it survives reinstall and is reachable from your other devices.
2. What we do not collect
- Background audio when the recording indicator is off.
- Photos you have not explicitly selected.
- Contacts, location, browsing or search history, health or fitness data, financial data, advertising identifiers.
3. How we use what we collect
- Process your audio, photos, and text into searchable event cards, daily summaries, and action items (calendar events, reminders).
- Build your voiceprint so the AI can attribute speech in multi-person recordings.
- Sync your data across your devices, only if you have signed in with Apple.
4. Where your data lives
- A local copy lives in your app sandbox on this device (SQLite database and image cache). This is the long-term store.
- A server-side copy exists only briefly during processing. Once your device acknowledges receipt of the processed result, server-side personal data is deleted immediately.
- If you have explicitly opted in to cross-device sync, the server retains a copy until you delete your account or disable sync.
- Your voiceprint sample is kept on the server while voice attribution is enabled, so it can be matched against new recordings. Deleting your account removes it.
5. Who we share with
- We do not sell your data, share it with advertisers, or use it for behavioral profiling.
- AI processing uses third-party large-language-model providers (OpenAI, Anthropic, Google, ByteDance VolcEngine). Transcripts and event text are sent to these providers solely to compute the response. Under our enterprise contracts with each provider, your content is not used to train their public models.
- If you grant access via Model Context Protocol (MCP), the data exposed is limited to the scope you authorize. You can revoke MCP access at any time from Settings.
6. Your rights
- View, export, or delete all your data from Settings inside the app.
- Disable recording at any time by tapping the Recording indicator on the main screen.
- Sign out and request full account deletion by emailing privacy@umate.ai.
- If you reside in the EU (GDPR), California (CCPA / CPRA), or China (PIPL) we honor the rights granted by those laws, including access, correction, portability, and deletion. We respond within 30 days.
7. Security
- HTTPS / TLS for all network traffic.
- Data at rest is encrypted using the cloud provider’s standard at-rest encryption.
- Recordings and personal data are scoped per user account; no cross-user access from any client.
8. Children
uMate is not directed at children under 13. If you are under 13, please do not use the app or submit any personal information.
9. Changes to this policy
If we make material changes to this policy we will notify you via an in-app banner before the changes take effect, and update the “Last updated” date above.
10. Contact
Questions, requests, or reports: privacy@umate.ai