Privacy Policy

About This Policy

This Privacy Policy explains how Zaptos Ltd ("ANToinette", "we", "us") collects, uses, and shares personal data when you use the ANToinette mobile app and related services (the "Service").

We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

What ANToinette Does

ANToinette is an AI-powered personal coordination companion, available as a mobile app for iOS and Android. You share daily voice notes and messages about your plans and friends; the service organises this into a personalised social digest, helps you stay in touch with your social circle, and surfaces shared plans and check-ins. To do this it processes content you share using third-party AI services for transcription and language understanding.

Data We Collect

Account and identity data — depending on how you sign in:

• Sign in with Apple — an Apple user identifier, and the name and email you choose to share (Apple may relay a private email)
• Google Sign-In — your email address and display name
• Email sign-in — your email address and a one-time verification code
• A device identifier — a per-install ID used to manage your sessions and devices

Content you provide

• Voice recordings you make in the chat composer, during onboarding, and in feedback; audio is uploaded to our storage and sent to our transcription provider, and the resulting transcript is stored
• Text messages, daily updates, and onboarding answers you write
• Photos you attach to messages
• Feedback you submit
• Profile data — display name, username, bio, and profile picture

Friends and contacts

• Friend connections you create and the access categories and permissions you set for them
• Contact matching (optional): if you use friend discovery, the app reads phone numbers and email addresses from your device's address book and sends a truncated, normalised set to our server only to find friends already using ANToinette. We do not store your contact list; matching is transient

Calendar and scheduling

• If you use scheduling features, event and free/busy information is processed to detect conflicts and propose plans, and stored when you save an event. ANToinette reads from a shared service calendar; it does not read your device's personal calendar

Technical data

• Basic metadata: platform (iOS/Android) and app version
• Push notification tokens, so we can send you notifications
• Crash and error diagnostics — when the app crashes or hits an error we receive a report containing device and app metadata (device model, OS version, app version), a per-install identifier, and technical breadcrumbs such as which screens you visited. We have disabled the collection of personally identifying details in these reports

Permissions The App Requests

• Microphone — to record voice messages. Recording only happens when you start it
• Notifications — to send daily briefs, friend updates, and plan reminders
• Contacts (optional) — only when you use friend discovery, as described above
• Photos (optional) — only when you attach a photo or set a profile picture

You can change or revoke these in your device settings at any time.

How We Use Your Data

• To provide and operate the Service — store your messages, generate your daily brief, coordinate plans, connect you with friends
• To transcribe voice recordings and understand your messages using AI services
• To send notifications and digests you have enabled
• To respond to feedback and support requests
• To secure the Service and prevent abuse
• To comply with legal obligations

Legal bases (GDPR)

• Performance of a contract — to provide the features you request
• Consent — for microphone access, contact matching, and notifications; you can withdraw consent at any time
• Legitimate interests — to secure and improve the Service

AI Processing

Your text, voice recordings, onboarding answers, and feedback are processed by Google Cloud Vertex AI (Gemini models) for transcription and language understanding. This processing runs in Google Cloud's EU regions. Content sent for AI processing is used only to produce your results; it is not used to train Google's models or our own.

How We Share Data

We do not sell your personal data. We share it only with service providers ("processors") that operate the Service on our behalf:

Each of these providers is bound by a data processing agreement requiring them to protect your data to a standard equivalent to this policy, and to use it only to provide their service to us — never for their own purposes, such as training their own models.

We may also disclose data if required by law or to protect our rights and users.

International Transfers

We keep processing inside the EU/EEA where we can. AI transcription and language understanding run in Google Cloud's EU regions, and crash diagnostics are processed in the EU.

Some providers do process data outside the EU/EEA, including in the United States — in particular Expo for push notification delivery, and Apple and Google in connection with sign-in and notifications. Where we transfer personal data internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Data Retention

We keep your data for as long as your account is active. Voice recordings and their transcripts, messages, and photos are retained until you delete them or delete your account. When you request account deletion we delete or anonymise your personal data, except where we must retain it to meet legal obligations.

Your Rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to processing of your personal data, and the right to data portability and to withdraw consent. To exercise any of these rights, contact us at the addresses below. You also have the right to lodge a complaint with your local data protection authority.

Deleting Your Account

You can delete your account directly in the app under Settings → Account → Delete account. Your account is deactivated immediately and permanently deleted after 30 days — sign in again within that window to reactivate it. You can also export your data from the app.

If you no longer have the app, see our account deletion page for full instructions, or email us directly. Your personal data will be deleted within 30 days of a confirmed request unless retention is required by law.

Children

ANToinette is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. We will post the new version here and update the "Last updated" date. Significant changes will be communicated in the app or by email.

Contact

If you have questions about this policy or wish to exercise your rights, please contact us: