Privacy policy

mtrz is a private group chat app. This policy explains what we collect, why, who we share it with, and how you can delete it. We do not sell your data. Where Google’s tools are involved, we name the Google setting that is on and what that setting does.

If you have questions, write to us on Support.

Who we are

mtrz is operated by mtrz llc in the United States. When this policy says “we” or “us,” it means us. When it says “you,” it means you as a user of the app or a visitor to mtrz.io.

What we collect

Your account. When you sign up, we create an account using your email address and password, Sign in with Apple, or Sign in with Google. Your email address is held by Google Firebase Authentication, which handles sign-in for us. If you use Sign in with Apple and choose to hide your email, Apple provides a private relay address instead. We do not store your email address alongside your public profile, and other users cannot see it. Sign in with Google is described under Google Account and Calendar.

Your profile. Your display name, username, status text, and profile picture. Other members of your groups can see these.

What you send. Messages, photos, videos, GIFs, emoji reactions, and replies. This includes the message text, who sent it, when it was sent, and which messages have been delivered or read. Chat photos and videos are chosen from your device camera or gallery and stored so your group can view them. They are not read from Google Photos.

Your groups. Group names, descriptions, group pictures, group type (Family or Friends), who the members and admins are, and invite codes. A short preview of the most recent message is stored with the group so it can appear in your chat list. For Family groups, we also store the time the creator accepted the Family responsibility acknowledgment described under Children below.

Calendars you add. Events you create, and their titles, descriptions, dates, locations, and who they are assigned to. If you add a calendar by web address (an “ICS” link), we store that address and our server fetches the calendar from it on your behalf. The service hosting that calendar will see a request from our server. Do not add private calendar links you are not comfortable storing. If a group admin connects Google Calendar, we also store the data described under Google Account and Calendar.

Notification settings. If you turn on notifications, we store a notification token for your device, an app installation ID we generate, your platform (iOS or Android), and your app version. This is what lets us send you alerts.

Technical information. Like any internet service, our providers automatically record technical details such as your IP address and the time of your requests in order to run and secure the service.

The app does not collect GPS location, contacts, health data, or advertising identifiers. We do not run our own tracker across other companies’ apps or websites. Approximate city and device details for people who visit mtrz.io come from Google Analytics settings named under Website analytics.

Website analytics

If you visit mtrz.io, we have enabled Google Analytics, Google’s standard measurement product. It records which pages are viewed, how someone arrived, and whether they tap Get the app. Google sets a cookie with a random identifier so it can count returning visits. We do not send your name or email from the website.

These Google Analytics settings are on:

• Google signals data collection. This is Google’s setting of that name. It lets Google Analytics use data Google already has for people who are signed into a Google account and who have ads personalization enabled in their Google settings, so reports can include cross-device activity and demographic information. That association is done by Google, not by mtrz looking you up. We have not linked a Google Ads account, and we are not running remarketing.
• Granular location and device data collection. This is Google’s setting of that name. It lets Google Analytics derive an approximate city from IP address and record device and browser details (for example model, operating system, browser version, and screen size) so location and device reports work. It is not GPS. The mtrz app does not ask for your location.

Google processes that information. Google’s overview of how Analytics uses data is at policies.google.com/technologies/partner-sites. You can block it with a browser add-on such as Google’s Analytics opt-out.

Google Account and Calendar

Sign in with Apple is optional on iPhone and iPad. If you choose it, Apple sends us an identity token so we can create your mtrz account. You can hide your email; Apple then gives us a private relay address. We do not receive your Apple ID password.

Sign in with Google is optional. If you choose it instead of email and password, Google sends us your email address, name, and profile picture so we can create your mtrz account. We do not receive your Google password.

Connect Google Calendar is a separate, optional step. It is not part of sign-in. A group admin has to tap it. When they do, we ask Google for permission to:

• See the list of calendars in that Google Account, so the admin can pick which one to link
• View and add events on those calendars, so the household calendar in mtrz can stay in sync

We do not request Gmail, Drive, Contacts, Google Photos, or any other Google service. We do not use the Google Photos Library API.

If a calendar is linked, we store an encrypted token from Google so we can keep reading and writing events without asking the admin to log in every time. We copy event titles, descriptions, times, and locations from the chosen calendar into the group. When someone in the group creates an event on that linked calendar in mtrz, we create the same event in Google Calendar.

Group members can see those events in mtrz. We use Google Calendar data only to provide that household calendar. We do not use it for advertising, and we do not sell it.

We do not use Google user data—including Google Calendar data, whether raw, aggregated, or derived—to create, train, or improve machine learning or artificial intelligence models. We do not transfer that data to third-party AI or ML services. mtrz does not integrate with third-party AI providers for Google Workspace or Photos user data.

mtrz’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To disconnect a linked calendar, a group admin can remove it in the app. You can also revoke mtrz in your Google Account under Third-party apps & services. Events already copied into the group stay with the group unless you delete them there.

Purchases

If someone buys a Premium plan, a Storage add-on, or a Quality add-on for a group, Apple or Google processes the payment. RevenueCat processes the mobile purchase receipt and subscription status so we can attach the selected entitlement to the selected group. We receive the product, entitlement, group-association, and transaction details needed to provide and support the purchase. We do not receive your card number. Current plan details are on the FAQ.

Why we use it

• To create and secure your account and let you sign in
• To deliver your messages, media, and calendars to the people you send them to
• To list, read, and update Google calendars a group admin chooses to link
• To send notifications you have asked for
• To keep the service working, fix problems, and prevent abuse
• To respond to you when you contact support
• To understand how people use the mtrz.io website
• To unlock and manage group entitlements after Apple or Google confirms a purchase

We use your information only for these purposes. We do not sell or rent your data to anyone, and we do not build our own advertising profiles. Google Analytics’ Google signals data collection setting is Google’s signed-in-account association, described under Website analytics.

Notifications

If you turn on notifications, we send alerts to your device through Apple’s Push Notification service (on iPhone and iPad) or Google’s Firebase Cloud Messaging (on Android). An alert can include the sender’s name and a short preview of the message.

To deliver those alerts, we pass that information to Apple or Google.

Who else is involved

We use these companies to run mtrz. They process your data on our behalf, and only for the purposes described above.

• Google (Firebase) — sign-in, database, and server functions. Stores your account, profile, messages, and calendars.
• Google Analytics — Google’s measurement product on mtrz.io, with Google signals data collection and Granular location and device data collection turned on, as described under Website analytics.
• Google Calendar API — only if a group admin connects Google Calendar. We read the calendar list and events they authorize, and we create events when someone adds them in mtrz.
• Cloudflare — stores your photos and videos, runs parts of our service, and hosts our website.
• RevenueCat — processes mobile purchase receipts and subscription status for Premium plans, Storage add-ons, and Quality add-ons. It receives your Firebase account identifier and the group association needed to manage those entitlements.
• Apple — Sign in with Apple (if you choose it), push notifications on iPhone and iPad, and in-app purchases if you buy a paid plan.
• Google — push notifications on Android, and in-app purchases if you buy a paid plan on Google Play.
• Expo — delivers app updates.

We also share information if we are legally required to, or if it is necessary to protect someone’s safety or investigate abuse.

Who can see your content

Your messages and media are visible to the people in the group or direct conversation you sent them to. Photos and videos are not publicly available on the internet: viewing them requires being signed in to mtrz and being a member of that group.

Please remember that anyone who can see your message can save or screenshot it. Only share what you are comfortable sharing with those people.

What is stored on your device

To make the app fast and work offline, mtrz stores some data on your phone: messages waiting to be sent, cached copies of images you have viewed, and your settings such as your chosen group and theme. This stays on your device and is removed when you sign out or delete your account. Deleting the app also removes it.

Permissions we ask for

• Camera — only when you choose to take a photo to send.
• Photos — the camera roll on this device (iOS Photos / Android gallery), so you can pick photos and videos to send and save media when you ask. This is not Google Photos and does not use the Google Photos Library API.
• Notifications — to alert you about new messages.
• Apple ID — only if you choose Sign in with Apple.
• Google Account — only if you choose Sign in with Google.
• Google Calendar — only if a group admin taps Connect Google Calendar.

You can change or withdraw camera, photos, and notifications in your device settings. For Apple ID, revoke mtrz in your Apple ID settings. For Google Account and Google Calendar, revoke mtrz in your Google Account. The app keeps working without them; you just lose the related feature.

How long we keep things

Your account is separate from any group. We keep your account and profile for as long as your account exists. Messages, media, and calendars belong to the group once they are sent, subject to the retention rules below. They remain with that group after you leave or delete your account unless the group or its retention policy removes them.

In the app, you can delete individual messages or media you sent, one item at a time. There is no control that deletes all of your posted content at once.

Free groups keep album-saved messages and media, plus the newest 30 non-album group messages. Premium groups keep their full group history. If a Free group is inactive for 30 days, we may delete that group and everything in it, including members, messages, media, and calendars, as described in the Terms of service. When a group is deleted, everything in it goes with it.

When you delete your account, we remove your personal account data as described below. Posted group content stays with the group.

Deleting your account

You can delete your account from inside the app: open the account tab and tap Delete Account. You will be asked to confirm. This cannot be undone. Web instructions are also at Delete Account.

When you delete your account, we permanently remove:

• Your sign-in credentials and account with our authentication provider
• Your profile, including your display name, username, status, and picture
• The messages you sent in direct conversations
• Your notification tokens and device records
• Your membership in every group and conversation
• Any pending Google Calendar connect session stored on your account

Some things necessarily remain:

• Messages and media you posted, unless you already deleted that item one at a time in the app or the group retention policy removes it. Once sent, they belong to the group. Deleting your account does not remove them. There is no way to delete all of your posted content at once.
• Messages other people sent, including replies that quote something you wrote
• Group calendars and events, including a Google Calendar a group admin already linked. That link belongs to the group. An admin can remove it in the app. You can also revoke mtrz in your Google Account.
• The group itself. Only a group admin can ask us to delete a group. Deleting your account, even if you are the last member, does not delete it. A Free group that is inactive for 30 days may be deleted, as described in the Terms of service.

If you pay for one or more Premium, Storage, or Quality subscriptions for groups through Apple or Google Play, deleting your account removes those paid features from the groups. Cancel each subscription separately in your Apple ID or Google Play subscription settings. Deleting your account does not stop billing.

If you cannot access the app to delete your account, write to us on Support and we will do it for you.

Your rights

You can ask us to show you the data we hold about you, correct it, or delete it. Most of this you can do yourself in the app: edit your profile, delete individual messages or media you sent one item at a time, or delete your account. There is no way to delete all of your posted group content at once. Deleting your account removes your personal account data; it does not remove content that already belongs to a group, and it does not delete the group. For anything else, write to us on Support and we will respond within 30 days.

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to how we use your data and the right to complain to your local data protection authority. We do not sell personal information, so there is nothing to opt out of in that respect.

Security

Data is encrypted while travelling between your device and our servers. Access to your messages and media is checked on our servers every time, based on which groups you belong to. Your password is handled and stored by our authentication provider and is never visible to us.

No system is perfectly secure. Please use a strong, unique password and keep your device locked.

Children

mtrz is a general-audience app. It is not directed at children under 13, and we do not ask for anyone’s age or create separate child accounts.

Groups can be created as Family or Friends:

• Family. When you create a Family group, you must confirm that you understand the following: Family groups are for families; only a parent or legal guardian should invite someone under 13; and by creating the group you agree to our Terms and Privacy Policy for anyone you invite and remain responsible for members you add. We store the time you accepted that acknowledgment with the group. We do not ask whether any particular member is under 13.
• Friends. Friends groups are not set up for inviting children under 13. If we learn that someone under 13 is using a Friends group without appropriate parental authorization, we may delete that account.

If you believe a child under 13 is using mtrz without a parent or legal guardian’s authorization, write to us on Support and we will delete the account.

Where your data is held

Your data is stored and processed on servers operated by Google and Cloudflare, including in the United States. If you use mtrz from another country, your information will be transferred there.

Changes to this policy

If we change this policy, we will update the date at the top and, for significant changes, let you know in the app. Continuing to use mtrz after a change means you accept the updated policy.

Contact

mtrz llc. Write to us on Support.