Privacy Policy

Antonio is built for hands-free driving. We collect only what we need to run the app: account details when you sign in, precise location when you use location-based features, the content you create or speak to the assistant, a user identifier to tie your account together, and basic product interaction data so the app can work and improve. On CarPlay, we may also log how you use the in-car interface (voice turns, buttons, and session metadata) under the same sign-in analytics consent. If you use friends or map features, we may also store friendship connections, optional location sharing with friends, and short-lived photos you choose to share on the map. If you opt in to Discover, we may also store and show a public profile you choose to publish, your likes and passes, and match connections. We do not sell your personal information.

Depending on how you use Antonio, we may collect the following categories of data linked to you:

• Contact information — Your name and email address when you sign in with Apple or Google (via our authentication provider), sign in with email (one-time code), or when you add a display name in your profile.
• Identifiers — A user ID assigned when you create an account, used to associate your profile and connected services with you, and a device identifier on iOS used to match analytics to your signed-in session across app launches.
• Precise location — GPS coordinates when you allow location access, for example to save parking, show your position on the map, get local weather, or support driving-related features.
• User content — Voice commands and text you send to Antonio; notes, lists, trip journal entries, parking details and photos (when you add them), profile text (“about me”), your chosen car from the catalog and optional real vehicle make, model, and year (for visuals and more specific assistant replies), conversation history stored for your sessions, and optional map photo drops you share with friends (see below).
• Social and friends — If you use Friends, we store your friendship connections (pending or accepted), a friend invite code linked to your profile, and display names you and your friends choose to show on the map.
• Discover — If you opt in, we store your public profile fields (social name, approved photos, bio, age, city, car, favorite song, and zodiac sign), profile visibility choice, explicit consent timestamp, one-sided likes and passes, and match connections when you and another user both like each other's profiles. See Discover below.
• Product interaction — How you use app features (for example which screens you open, settings you change, and assistant requests), including data needed to process your commands and keep the app working across sessions.

Usage analytics — When you sign in, you agree to usage logging to improve Antonio. This includes session data, UI interactions, categorized feature events, and the voice commands and text you send to Antonio along with Antonio's replies (linked to your account, not anonymous). We use this to understand how the assistant is used, debug issues, and improve quality.

CarPlay interaction logs. When you use CarPlay while signed in (with usage analytics consent), we log how you interact with the CarPlay interface: voice commands and Antonio's replies, button and menu actions (for example parking, hands-free toggle, modes, personality, or language), connection and foreground session identifiers, optional GPS snapshots attached to an event (coordinates, accuracy, and approximate place when available), your profile car selection, app and iOS version, and settings such as personality, language, and hands-free state. CarPlay voice is logged in this dedicated stream; phone and web assistant input is logged separately. If you have not given analytics consent, CarPlay interaction logs are not stored.

Much of your content is stored locally on your device (for example in your browser or app storage). When you are signed in, some profile and integration data is stored in our cloud database. Voice and text you send to the assistant are processed on our servers to generate responses.

When you use the voice or text assistant, Antonio generates replies using artificial intelligence. Those replies may be inaccurate or incomplete. They are not professional advice (legal, medical, financial, or otherwise). Do not use AI output to mislead others about who wrote a message. Voice and text you send are processed by service providers described under Third-party services below.

We use collected information only for app functionality, including to:

• Authenticate you and maintain your account and profile.
• Understand and respond to your voice and text requests.
• Store and sync notes, lists, trips, parking, and preferences.
• Show maps, weather, and location-based features you request.
• Connect you with friends you invite or accept, show friend locations on the map when sharing is enabled, and display map photo drops you or your friends post.
• Operate Discover: show you other users' public profiles, record your likes and passes, create matches when interest is mutual, enable chat with matches, and moderate reported content.
• Connect optional third-party services you choose (such as Apple Music on iOS or Spotify on the web), and on iOS read or update your Apple Calendar when you ask about or change your schedule, and contacts when you ask to call someone by name.
• Operate, secure, and troubleshoot the service.
• Analyze assistant usage (including stored commands and replies) to improve accuracy, reliability, and product quality.
• Record CarPlay interaction logs (described above) to understand and improve the in-car experience.

We do not use your data for third-party advertising or sell it to data brokers.

Antonio uses your device microphone for voice commands and speech recognition. Audio may be processed on your device and/or sent to our servers and to service providers that power speech and AI features. We do not continuously record you in the background except when you activate the microphone or an optional hands-free / wake-word feature you enable (including “Hands-free in the car” on iOS or CarPlay).

On iOS and CarPlay, optional wake-word listening uses Apple's on-device Speech framework to detect when you say the assistant's name; on the website, it uses your browser's Web Speech API when supported. While hands-free is on, the microphone stays active so the app can hear the wake word, but Antonio does not send that idle audio or unrelated speech to our servers. Speech before the wake word is processed on your device only to listen for the wake name; we collect and process your voice as a command only after the wake word (when you use the CarPlay parking shortcut, or otherwise start a request, including tap-to-talk on iPhone).

On CarPlay, the same voice and data practices apply; commands run natively on your iPhone while connected to your car display.

On iOS, Antonio may use the camera or photo library when you attach a parking photo or drop a photo on the map for friends. Camera access is optional and only used when you choose those features.

Location is collected only with your permission through iOS or browser location settings. You can disable location access in your device settings; location-dependent features (parking, map, local weather) will not work fully without it.

Sharing with friends. If you are signed in (not a guest) and use Friends, your latest location may be synced to our database so accepted friends can see you on the map. Location sharing is on by default for signed-in users; you can turn it off anytime on the Friends page (Share location with friends). When sharing is off, we stop updating your shared location. Friends see your display name and approximate city when available, not your email address.

Background location during CarPlay. On iOS, when CarPlay is connected and friend location sharing is on, Antonio may continue updating your shared location in the background while you drive, including when the phone app is not on screen. This uses the same friend-sharing setting on the Friends page and may require “Always” location permission on iPhone. When sharing is off or CarPlay disconnects, background updates for this purpose stop.

Friends. You can invite others or accept invites via a friend link or code. We store friendship status (pending, accepted, or blocked) and use it to control who can see your shared location and map photo drops. You can remove a friendship in the app. When you block someone, they cannot interact with you through friend features.

Public profiles. If another user's profile is visible to you (public or friends-only), you can open the menu on their profile to report it or block the user. Reports include a reason (for example nudity, violence, child safety, harassment, spam, hate speech, or other). We store the report, hide that profile for you, and review reports promptly — typically within 24 hours — removing content that violates our policies. Blocking stops further interaction; it does not automatically remove their content for other users until we complete a review. For Discover profiles, you can also report from the Discover card when available. See Discover.

Map photo drops. You may post a photo at a map location visible only to accepted friends. Drops expire automatically after 24 hours and are deleted from our servers. You can delete your own drops sooner. We limit drops to 10 per user per rolling 24-hour period. Photos are stored in private cloud storage; only you and accepted friends can access them while active. You can report a friend's drop in the app; we store the report and hide that photo for you while we review.

Optional matching feature (iPhone and web app only). Discover is a matching and discovery feature for meeting other Antonio users who drive. It does not appear in CarPlay — the in-car experience remains voice-assistant only. You are never required to use Discover to use Antonio.

How it works. If you set your profile to Public and give explicit consent, you can browse other users' public profiles and appear in their browse pool (reciprocal visibility). When you like someone's profile and they like yours, you match and can chat in the app. Matches do not share your live GPS location with each other until you become accepted friends through the separate Friends feature.

Data shown to other signed-in users on Discover. When your profile is public, other Antonio users browsing Discover may see your social name, approved profile photos and avatar (moderated before display), city, age, bio, catalog car and nickname, favorite song, and zodiac sign. We do not show your email, private “about me” text, exact GPS coordinates, or Antonio personality on Discover cards.

City. The city shown is a coarse place name (for example from reverse geocoding), not your live map position. It is separate from friend location sharing on the map.

Interaction data. We store your likes and passes, and create a match record when both users like each other. Passes may be cleared when you refresh Discover; likes and matches are kept while your account is active and deleted when you delete your account.

Photos and moderation. Only approved photos appear on Discover. We may use automated tools and human review to moderate photos and profiles. We store reports you submit (your user ID, reason, and optional detail), internal review notes, and photo review metadata for safety and legal compliance. We recommend blurring license plates in car photos before upload; public profile fields are visible to other signed-in Discover users.

Age and consent. Discover is for users 18 and older only. Before you go public, we ask for explicit consent and an age attestation. Where available, we also use age signals from Apple or Google (see Age signals below) and apply the most restrictive privacy settings for users identified as under 18.

Opt out. Set your profile visibility to Friends or Private in the app at any time. This removes you from the Discover pool and withdraws your consent to public display on Discover going forward.

Legal basis (EEA/UK). Where GDPR applies, we rely on your consent to show your public profile on Discover. You may withdraw consent as described above without affecting the lawfulness of processing before withdrawal.

In some regions, app stores provide age-related signals to help apps apply appropriate settings (for example Apple's Declared Age Range on iOS or Google Play Age Signals on Android). When we receive such a signal indicating you are under 18, we apply restrictive defaults app-wide — such as private profile visibility, disabled Discover, and turned-off friend location sharing — unless applicable law and platform rules allow a parent or guardian to authorize broader settings. We store the signal tier, source, and timestamp on your profile for compliance and audit purposes.

You may continue as a guest without Apple, Google, or email sign-in. Guest mode creates an anonymous account tied to your device session. Guest data is stored in the cloud like other accounts but is not linked to an email until you upgrade.

You can link Apple or Google later in Settings to keep your profile and data across devices. If you sign in to an account that already exists, guest-only data from the current session may be discarded. You can end a guest session or delete a guest account in Settings → Delete Account.

We rely on trusted providers to run Antonio. They process data on our behalf under their own terms:

• Supabase — Account sign-in, user ID, profile, friendships, Discover likes, passes, and matches, location presence, map photo drops, profile reports and moderation metadata, usage and CarPlay interaction analytics, and stored integration tokens when you connect services.
• OpenAI — Powers assistant replies, text-to-speech audio, and structured actions (notes, lists, etc.) from your voice commands and messages. Data is processed in the United States under OpenAI's terms and privacy policy (openai.com/policies/privacy-policy). We configure API use for service delivery; review OpenAI's documentation for retention and training settings on your account tier. By using Antonio, you agree to your voice commands and messages being sent to OpenAI for this purpose.
• Apple (iOS app) — Calendar events on your device when you grant Calendar permission (EventKit; data stays on your phone). Contacts on your device when you grant Contacts permission to look up a name for calling (data stays on your phone). Optional hands-free and CarPlay wake-word listening uses Apple's on-device Speech framework on your iPhone (apple.com/legal/privacy).
• Google — Sign-in (OAuth) and, on the web, optional Calendar or Drive-related features.
• Apple Music (iOS) — When you connect Apple Music in Settings on the iOS app, we store a MusicKit user token and your storefront in our database so Antonio can search the catalog and start playback on your device. Playback uses Apple's MusicKit APIs and requires an active Apple Music subscription. Apple's privacy policy applies to MusicKit data (apple.com/legal/privacy).
• Spotify — Optional music playback when you connect your Spotify account (availability may be limited during beta).
• Weather providers — Approximate or precise coordinates to return local weather (for example Open-Meteo).

Each provider's privacy policy applies to their handling of data. We encourage you to review their policies before connecting optional integrations.

Data on your device remains until you delete it or uninstall the app. Account and cloud-stored data are kept while your account is active and for a reasonable period afterward for backup, legal, or security purposes. You can delete your account and all associated data directly in Settings → Delete Account.

Assistant requests are processed in real time. We retain voice commands, text messages, and Antonio's replies in our analytics database while your account is active to improve the product, including CarPlay interaction logs when you use CarPlay. We also log categorized product interaction events on the phone and web (feature type, success/failure, timing — not duplicate copies of your full message). Deleting your account removes stored commands, replies, CarPlay logs, and other analytics tied to you. Limited server logs may be retained briefly for security and debugging. Map photo drops are removed after 24 hours. Discover likes, passes, and match records are deleted when you delete your account. Data processed by third-party AI providers may be retained according to their policies (see Third-party services).

Depending on where you live, you may have additional rights regarding personal information:

• United States — Residents of certain states (for example California, Utah, and Louisiana) may have rights to know, delete, or opt out of certain processing, or may be subject to age-related settings when app stores provide age signals. Contact us to exercise those rights.
• European Economic Area and United Kingdom — Where GDPR applies, you may have the right to access, rectify, erase, restrict, or port your personal data, to withdraw consent (including for Discover), and to lodge a complaint with your local supervisory authority.
• Canada — You may have rights under PIPEDA and applicable provincial laws to access, correct, or challenge our handling of personal information, subject to legal exceptions.
• Türkiye — Under Turkish law (including KVKK), you may request information about processing, correction, or deletion of personal data as described below.

• AI processing — The voice and text assistant requires processing by our AI provider (see Third-party services). This is required for core features and is covered when you sign in. To stop that processing, delete your account in Settings.
• Push notifications — Friend requests and occasional product updates (iOS only). Controlled by your iOS notification permission for My Antonio. Past announcements remain in the in-app inbox.
• Location sharing — Turn friend location sharing on or off on the Friends page (signed-in users only; guests do not share location with friends).
• Friends — Remove friendships in the Friends screen; this stops sharing your location and photo drops with that person.
• Discover — Set profile visibility to Friends or Private to leave Discover and withdraw public-display consent. See Discover.
• Access and correction — Update your name and profile in the app; email comes from your sign-in provider.
• Delete account — Permanently delete your account and associated cloud data in Settings → Delete Account.
• Delete local data — Clear notes, lists, and other content stored on your device through the app or by removing app data.
• Disconnect integrations — Revoke Apple Music, Spotify, Google, or other connections in Settings.
• Sign out — End your session in Settings.
• Location and microphone — Control permissions in iOS Settings.

Depending on where you live, you may have additional rights (access, deletion, portability, objection). To exercise them, email us at privacy@myantonio.app.

Antonio is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children under 13. Discover is not available to users under 18. When app store age signals indicate you are under 18, we apply restrictive privacy settings as described under Age signals. If you believe a child has provided us data, contact us and we will delete it.

We use industry-standard measures such as HTTPS, access controls, and provider security features. No method of transmission or storage is completely secure; use Antonio only on devices you trust.

Our service providers may process data in the United States and other countries. By using Antonio, you consent to transfer and processing in those locations, subject to applicable law.

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. Continued use after changes means you accept the revised policy.

Questions about privacy or this policy? Email privacy@myantonio.app.