YOUR STORY IS NOT OUR PRODUCT.

Your privacy lock and community activity

Matey’s PIN and supported device passkeys protect private access separately from account sign-in. You can optionally use the same lock for this app. We store protected PIN verifiers and passkey public credentials, never your fingerprint or face scan. Guest mode cannot retrieve owner memory. Sharing requires fresh verification and a separate approval of exact words, released once to that guest session.

Public reply text may be sent to the existing AI provider for moderation triage. Photos, uncertain results and unavailable checks go to human review. This is not continuous emergency monitoring and a review priority is not a diagnosis. Community inbox events store identifiers, activity types and read state; device previews use generic text. Inbox events older than 90 days are removed when the cleanup sweep runs. Device notifications follow your opt-in and quiet hours.

Your 2.0 wellbeing tools

Optional timed check-ins store the time the experience happened, your chosen timezone, scores, notes and activities. Your toolkit feedback and early warning plan stay in your private account. If you record whether an approach helped, we save your answer, the recording time, your chosen timezone and any optional context. You can review or remove individual feedback entries, remove an entire toolkit item, and include this information in your private tracking export. Each item supports up to 50 feedback entries; older entries are not automatically deleted to make room. Suggestions use only your own feedback and leave out items most recently marked unhelpful or uncertain. They are not shared with Matey or Community. Patterns describe incomplete observations and are not diagnoses or crisis predictions. Private exports contain sensitive data; you choose where to save them. Community ideas and project updates are reviewed before becoming public; expressing interest is not a booking. Saved travel, transport and access preferences remain private. Your display name and interests appear in the Community people list only if you switch that on. Sharing your general area is a separate choice; you can turn either off.

Founder-approved scheduled posts are labelled. Campaign prompts are sent to the existing AI provider for draft generation; private member records are not used. Original posts require individual founder approval. Automated replies and cross-user learning remain disabled.

What we keep

Your account email and name, a securely derived password record, profile choices, daily and impact check-ins, optional neurodivergence, recovery or disability information, walk bookings, Community topics, replies and published Community photos, communication choices and—only if you connect it—Strava connection details. The previous in-app chat is retired. Existing remembered messages are preserved as private records until you ask for them to be deleted; Matey does not use them.

Neurodivergence and burnout tracker

If you choose a neurodivergence in your private profile, you can use an optional private neurodivergence and burnout check-in. It is visible in your own dashboard only and is not shown in Community, moderation tools, ordinary staff areas or Matey Shared Memory. It helps you notice your own patterns alongside emotional wellbeing; it is not a diagnosis and it cannot prove that one experience causes another.

If you switch on de-identified impact evidence in Profile, the Founder can see combined figures from this tracker only after at least three consenting people have contributed. The view contains no names, account identifiers or individual entries. The Founder can keep a separate service-improvement findings log, but it contains no member names or individual records.

Matey private conversations and photos

Hands-free voice starts only when you choose Start conversation and allow microphone access. While the session is active, the microphone remains available during Matey’s speech so you can interrupt. Short audio turns go to OpenAI for transcription, and the resulting text follows the same conversation and optional Shared Memory rules as typed messages. This app does not save raw voice recordings; the provider processes the audio under its own data handling terms. Mute disables microphone input. End conversation, leaving the app, the privacy lock, or five minutes without detected speech stops the microphone. Talk once remains an alternative.

Matey sends the conversation text and any photo you choose to the connected AI service to generate that reply. You can use Matey without saving owner conversations to Shared Memory. Signed-in guest conversations use temporary server storage for up to one hour; expired content is inaccessible and removed by the cleanup sweep when it runs. If you choose Shared Memory, Matey stores your text chats in your private Chaos to Control account so the Matey web app and installed app can continue the same conversation. This is off by default, needs a clear confirmation and can be permanently forgotten from Matey at any time. A private Matey photo is not placed in Community moderation, ordinary Founder analytics or a photo archive. Photos, photo captions and replies about a photo are never put into Shared Memory. Analytics record only action counts, never private message or image contents. Saved chats can be reviewed, corrected or removed. Clearing or changing saved memory prevents older in-flight replies from restoring it. Switching saving off retains older messages until you choose to remove them.

A Founder-controlled custom Matey voice can be created only from an adult voice owner’s recorded consent and short sample. The recordings are sent to the connected AI voice provider to create the voice and are not retained in this app; the app stores only the resulting provider voice ID and delivery profile. A custom voice may still resemble its authorised source speaker.

Community photos and moderation retention

Community photos are published content and can be reported. Only staff given the separate Community-photo moderation permission can review a reported image or its restricted original. If a Community photo enters a formal report or removal process, a restricted original may be kept for up to 180 days for safeguarding, abuse investigation, serious threats, harassment or legitimate legal and regulatory needs. The active display copy is removed when moderators remove the photo. The retained record includes the related topic or reply, submitting account identifier, dates, status, report reason and moderation action. It is not a permanent archive and it is not described as a formal evidential chain of custody.

Why we use it

To give you a private account, show your progress, tailor suggestions, manage walks and keep the Community safe. We ask for your explicit agreement before storing health and recovery information, including separate agreement before Shared Memory is used. Previous remembered chats are retained only for access or deletion rights and are not added to admin analytics or used to train a Chaos to Control model.

What staff can see

Moderators see only the Community areas covered by their individual permissions. Community-photo originals require a separate permission. Moderator access does not include private check-ins, sobriety entries, profile health details, Matey conversations, Matey photos or previous in-app chat conversations. The protected Founder dashboard uses aggregate Matey counts and grouped wellbeing trends from people who separately opt into impact evidence; it never shows private Matey contents.

Your choices

Shared Memory is optional. You can switch it off, or use Forget Matey Memory to permanently delete saved Matey text chats across the web app and installed app. Wellbeing reminders are off until you choose them. If enabled, the app stores a device push subscription, reminder choices, coarse activity timestamps and delivery/open records so it can send gentle check-in, Community and return prompts. Check-in scores, notes, Community names and post text are never included in a notification, and notifications are not used for emergencies. You can switch them off in Profile or in your phone settings at any time. Founder-approved testers can voluntarily submit product feedback about It’s Okay Not To Be Okay or Matey; it is stored separately from wellbeing information. A tester with push notifications enabled may receive one generic Sunday feedback invitation, without personal wellbeing information. Matey notifications are also off until you choose them. If enabled, the app stores a device push subscription and your choices so it can send selected Group Walk, app-update or approved Community-topic alerts. Private Matey chats and Community names or post text are never included. You can switch them off in Matey or in your phone settings at any time. Optional profile information can be left blank or changed. Newsletter and de-identified impact evidence are separate choices. To access, correct or delete your account and records, email info@chaostocontrolcic.org.uk.

Keeping it safe

Chaos to Control accounts use salted, slow password hashing, short-lived one-time password reset links and secure session cookies. Permissions are checked by the server. Matey uses the connected AI service without storing a provider-side response record. Strava tokens are encrypted when that integration is enabled. No system is risk-free, so do not enter information you do not want handled by the relevant service.