Privacy Policy

YoMatrix is an end-to-end encrypted messenger with voice and video calls. It also comes built into the Matrix Vault app, without calls. This page explains what stays on your device, what travels over the network and why, who handles it, and your rights.

Who is responsible

The controller of your personal data is Stingray International FZ-LLC, a Free Zone limited liability company in the United Arab Emirates. Contact us about privacy at privacy@yomatrix.app. We will name our representatives in the EU and the UK here once they are appointed.

What we can never read

• Your one-to-one and group messages, photos, files and voice notes — end-to-end encrypted.
• The audio and video of your calls.
• Disappearing messages, once they expire.

Messages are encrypted with Curve25519, HKDF and AES-256-GCM, and you can verify a contact with a 25-digit safety number. YoMatrix shows no advertising, builds no advertising profile and never sells your data.

No phone number needed

Your identity is an @username. You need no phone number or email address to sign up, and you add contacts by QR code or username.

What leaves your device, and why

• Message and call delivery. Our relay servers in the EU (Finland) pass encrypted messages between devices. To do that they keep your account identifiers (username, display name, device ID and public keys), your groups and blocked contacts, when you were last online, your push-notification token, encrypted messages waiting for an offline device (up to 7 days), and a record of calls (who called whom, and when, kept 7 days) — never their content. Calls connect directly when possible, with an encrypted relay otherwise. Media you send is stored encrypted on our servers and deleted after 7 days. Stories are stored encrypted too, and deleted when they expire (at most 7 days).
• Push notifications go through Apple's Push Notification service and carry your message only in encrypted form, which Apple cannot read; the banner shows who wrote, not what they wrote. On Android, notifications are delivered through Google Firebase Cloud Messaging. Google receives a device token and basic technical details (an installation ID, the app version, the device model and when the app was last used), but never the content of your messages.
• Email. Every account gets email addresses, switched on by default (you can switch them off). Email is never end-to-end encrypted: incoming mail is received by our mail server and passed into the app, marked not end-to-end encrypted. Mail you send goes out through our mail server; we keep delivery records (sender domain, time, size) for up to 90 days, never the content. If you turn on email copies, we also send each incoming email to an address you choose and verify.
• YoMatrix AI. YoMatrix AI is an assistant built into the app; it is off until you use it. What you ask it, and anything you let it read to answer (AI Privacy lets you choose your chats, your email, your contacts, and keep any chat away from it), goes to our own AI servers and is not kept. If you connect your own AI account instead (Claude, ChatGPT, Kimi or Qwen), your questions go to that company under its terms.
• When our AI servers are busy. YoMatrix AI normally answers on our own servers, including machines we rent and run ourselves. If they are all busy or unavailable, the app may ask whether you want to send that question, with what the assistant reads for it, to our backup AI service. Nothing is sent unless you say yes — either each time, or by turning on “Use the backup service when busy” in Settings ▸ AI Privacy, which is off by default. Before anything is sent we remove email addresses, phone numbers written with a country code, keys and tokens, and passwords inside web links; words you type yourself (for example a person's name) are sent as you wrote them. Pictures, voice calls, translation and the helper bots never use the backup service. The backup service is provided by Nebius (Nebius Group N.V. and its affiliates), acting as our data processor under its data processing terms. It is set not to store your questions or answers and not to use them to train or improve any model. Its servers may be outside the UK and the EU.
• Translation and voice notes. Translation and transcription happen on your device by default (translation on your device needs iOS 18 or later). If you switch on server translation or transcription, the app asks first; the text or audio is then sent to our own servers, processed, and not kept.
• Helper bots. Chats with helper bots are end-to-end encrypted like any chat, but the bot itself runs on our servers and reads what you send it. To answer, some bots pass your request to outside services: LanguageTool (spell-check), Wikipedia, dictionaryapi.dev, Datamuse and CoinGecko; Convert and News read public feeds (exchange rates, news RSS). Reminders and to-dos you give a bot are kept on our servers until they are done.
• Other services the app contacts. None for your messages: GIF search is switched off, and the app does not fetch link previews, so links you share are not opened on your behalf.
• Connected apps. Apps and webhooks you connect send their messages through our servers; these are marked not end-to-end encrypted.
• Diagnostics. The App Store version uploads no crash or usage reports. You can choose to email us a diagnostics report, and you see its full text first. Some beta (TestFlight) builds also let you send reports straight to our support team; these contain no message content and are deleted after 7 days.
• Reporting a contact. If you report someone in the app, we receive your @handle and theirs, the app each of you uses, and the reason you picked, and it goes to our support team by email — never your messages, which we cannot read. The contact is also blocked for you.
• Support and launch sign-ups. If you contact us, we keep your message and email address to answer you. If you sign up on this website for product news, we use your email address only to send the news you picked, and keep it until you unsubscribe or ask us to remove it.

Email on the free trial

To stop people making many free email addresses, we ask you to confirm an email address you already have at a well-known provider. We send a 6-digit code to it. We do not keep that address: we keep only a keyed fingerprint of it, which cannot be turned back into the address, for 24 months after your trial, so the same address cannot start a second free trial. While the code is waiting (up to 10 minutes) the address is stored encrypted so that, if you ask, copies of your email can go there without a second code. The confirmation email is sent through a mail server whose log never records the address.

People who email you. During the free trial you can reply only to people who have emailed you first. To know who that is, we keep a keyed fingerprint of each sender's address, made separately for your account so it cannot be matched across accounts, for 90 days after their last email. We do not keep their address, and we do not use this list for anything else. It is deleted with your account, and it is not kept once you subscribe.

Delivery problems. We record whether a reply you sent bounced (the error code and the time, never the recipient's address) for 30 days, to pause sending from accounts whose email is not getting through.

Your device (iPhone and iPad). To stop one device from taking many free trials, we ask Apple's DeviceCheck service to remember, for 24 months, that this device had a free email trial. Apple stores two bits for our developer account; no personal data is sent to Apple with them. We may also ask Apple to confirm that the app on your device is genuine (App Attest); we keep the device's public key for up to 12 months after it was last used.

Email copies. If you ask for copies of your email to go to another address, that address is stored encrypted with your account, and our mail server's delivery log records it for up to 14 days each time a copy is sent.

Legal basis. Fraud and abuse prevention is our legitimate interest. You can delete your account at any time; the fingerprint of the confirmed address is kept for the stated period so the trial cannot be repeated.

Why we may use your data (legal bases)

• To provide the app and the features you use — performing our contract with you.
• Optional features (server translation or transcription, beta diagnostics, launch emails) — your consent, which you can withdraw at any time.
• Security, abuse prevention and keeping the service running — our legitimate interests.

How long we keep it

Account data is kept while you have an account and erased when you delete it. Media is deleted after 7 days, beta diagnostic reports after 7 days, and translation or transcription text is not kept. Messages from apps you connect are deleted 7 days after delivery. Our servers keep security logs, including IP addresses, for up to 30 days, and never log what your messages say. Support email is kept only as long as needed to help you.

Where it is processed

Our main servers are in Finland (EU), with a standby in Germany, both hosted by Hetzner; some processing happens in the United Kingdom, including, during busy periods, on a machine we rent and run ourselves at Nebius (UK). The backup AI service is described above. Our support inbox is handled by Google. Apple may process data outside the EU under its own terms; our company is in the United Arab Emirates. Where the law requires it, we use appropriate safeguards for these transfers.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, and to receive it in a portable form. Email privacy@yomatrix.app. You can also delete your account in the app. If you are in the EU or the UK, you may complain to your data protection authority.

This website

This website sets no cookies and loads nothing from other companies. Your browser stores only your language and display choices.

Automated decisions

We make no automated decisions about you that have legal or similar effects.

Payments

Pricing for YoMatrix has not been set yet. Any payment will go through Apple's App Store; we never see your card details.

Children

YoMatrix is not directed to children under the age required to consent to digital services in your country, and we do not knowingly collect their data.

Changes

We will update this page when the app changes how it handles data, and change the date at the top.