Privacy Policy

Antonio is built for hands-free driving. We collect only what we need to run the app: account details when you sign in, precise location when you use location-based features, the content you create or speak to the assistant, a user identifier to tie your account together, and basic product interaction data so the app can work and improve. If you use friends or map features, we may also store friendship connections, optional location sharing with friends, and short-lived photos you choose to share on the map. We do not sell your personal information.

Depending on how you use Antonio, we may collect the following categories of data linked to you:

• Contact information — Your name and email address when you sign in with Apple or Google (via our authentication provider), sign in with email (one-time code), or when you add a display name in your profile.
• Identifiers — A user ID assigned when you create an account, used to associate your profile and connected services with you.
• Precise location — GPS coordinates when you allow location access, for example to save parking, show your position on the map, get local weather, or support driving-related features.
• User content — Voice commands and text you send to Antonio; notes, lists, reminders, trip journal entries, parking details and photos (when you add them), profile text (“about me”), conversation history stored for your sessions, and optional map photo drops you share with friends (see below).
• Social and friends — If you use Friends, we store your friendship connections (pending or accepted), a friend invite code linked to your profile, and display names you and your friends choose to show on the map.
• Product interaction — How you use app features (for example which screens you open, settings you change, and assistant requests), including data needed to process your commands and keep the app working across sessions.

Usage analytics — When you sign in, you agree to anonymous usage logging including session data and feature interactions to improve Antonio. We do not store raw conversation text in analytics.

Much of your content is stored locally on your device (for example in your browser or app storage). When you are signed in, some profile and integration data is stored in our cloud database. Voice and text you send to the assistant are processed on our servers to generate responses.

When you use the voice or text assistant, Antonio generates replies using artificial intelligence (via OpenAI). Those replies may be inaccurate or incomplete. They are not professional advice (legal, medical, financial, or otherwise). Do not use AI output to mislead others about who wrote a message.

By using Antonio, you agree to your voice commands and messages being processed by OpenAI to generate responses.

We use collected information only for app functionality, including to:

• Authenticate you and maintain your account and profile.
• Understand and respond to your voice and text requests.
• Store and sync notes, lists, trips, parking, reminders, and preferences.
• Show maps, weather, and location-based features you request.
• Connect you with friends you invite or accept, show friend locations on the map when sharing is enabled, and display map photo drops you or your friends post.
• Connect optional third-party services you choose (such as Apple Music on iOS or Spotify on the web), and on iOS read or update your Apple Calendar when you ask about or change your schedule, and contacts when you ask to call someone by name.
• Operate, secure, and troubleshoot the service.

We do not use your data for third-party advertising or sell it to data brokers.

Antonio uses your device microphone for voice commands and speech recognition. Audio may be processed on your device and/or sent to our servers and to service providers that power speech and AI features. We do not continuously record you in the background except when you activate the microphone or an optional wake-word feature you enable.

On iOS, Antonio may use the camera or photo library when you attach a parking photo or drop a photo on the map for friends. Camera access is optional and only used when you choose those features.

Location is collected only with your permission through iOS or browser location settings. You can disable location access in your device settings; location-dependent features (parking, map, local weather) will not work fully without it.

Sharing with friends. If you are signed in (not a guest) and use Friends, your latest location may be synced to our database so accepted friends can see you on the map. Location sharing is on by default for signed-in users; you can turn it off anytime in Settings → Location sharing. When sharing is off, we stop updating your shared location. Friends see your display name and approximate city when available, not your email address.

Friends. You can invite others or accept invites via a friend link or code. We store friendship status (pending, accepted, or blocked) and use it to control who can see your shared location and map photo drops. You can remove a friendship in the app.

Map photo drops. You may post a photo at a map location visible only to accepted friends. Drops expire automatically after 24 hours and are deleted from our servers. You can delete your own drops sooner. We limit drops to 10 per user per rolling 24-hour period. Photos are stored in private cloud storage; only you and accepted friends can access them while active. You can report a friend's drop in the app; we store the report and hide that photo for you while we review.

You may continue as a guest without Apple, Google, or email sign-in. Guest mode creates an anonymous account tied to your device session. Guest data is stored in the cloud like other accounts but is not linked to an email until you upgrade.

You can link Apple or Google later in Settings to keep your profile and data across devices. If you sign in to an account that already exists, guest-only data from the current session may be discarded. You can end a guest session or delete a guest account in Settings → Delete Account.

We rely on trusted providers to run Antonio. They process data on our behalf under their own terms:

• Supabase — Account sign-in, user ID, profile, friendships, location presence, map photo drops, and stored integration tokens when you connect services.
• OpenAI — Processing your messages to generate assistant replies, text-to-speech audio, and structured actions (notes, lists, etc.). Data is processed in the United States under OpenAI's terms and privacy policy (openai.com/policies/privacy-policy). We configure API use for service delivery; review OpenAI's documentation for retention and training settings on your account tier. By signing in to Antonio, you agree to your voice commands and messages being processed by OpenAI to generate assistant responses.
• Apple (iOS app) — Calendar events on your device when you grant Calendar permission (EventKit; data stays on your phone). Contacts on your device when you grant Contacts permission to look up a name for calling (data stays on your phone).
• Google — Sign-in (OAuth) and, on the web, optional Calendar or Drive-related features.
• Apple Music (iOS) — When you connect Apple Music in Settings on the iOS app, we store a MusicKit user token and your storefront in our database so Antonio can search the catalog and start playback on your device. Playback uses Apple's MusicKit APIs and requires an active Apple Music subscription. Apple's privacy policy applies to MusicKit data (apple.com/legal/privacy).
• Spotify — Optional music playback when you connect your Spotify account (availability may be limited during beta).
• Weather providers — Approximate or precise coordinates to return local weather (for example Open-Meteo).
• Picovoice — Optional on-device wake-word detection when enabled.

Each provider's privacy policy applies to their handling of data. We encourage you to review their policies before connecting optional integrations.

Data on your device remains until you delete it or uninstall the app. Account and cloud-stored data are kept while your account is active and for a reasonable period afterward for backup, legal, or security purposes. You can delete your account and all associated data directly in Settings → Delete Account.

Assistant requests are processed in real time. We log categorized product interaction events (not raw conversation text) for analytics. Limited server logs may be retained briefly for security and debugging. Map photo drops are removed after 24 hours. OpenAI may retain API data according to their policies and your OpenAI account settings.

Depending on where you live, you may have additional rights regarding personal information:

• United States — Residents of certain states (for example California) may have rights to know, delete, or opt out of certain processing. Contact us to exercise those rights.
• Canada — You may have rights under PIPEDA and applicable provincial laws to access, correct, or challenge our handling of personal information, subject to legal exceptions.
• Türkiye — Under Turkish law (including KVKK), you may request information about processing, correction, or deletion of personal data as described below.

• AI processing — Antonio uses OpenAI to process your voice and messages to power the assistant. This is required for core features and is covered when you sign in. To stop OpenAI processing of your data, delete your account in Settings.
• Location sharing — Turn friend location sharing on or off in Settings → Location sharing (signed-in users only; guests do not share location with friends).
• Friends — Remove friendships in the Friends screen; this stops sharing your location and photo drops with that person.
• Access and correction — Update your name and profile in the app; email comes from your sign-in provider.
• Delete account — Permanently delete your account and associated cloud data in Settings → Delete Account.
• Delete local data — Clear notes, lists, and other content stored on your device through the app or by removing app data.
• Disconnect integrations — Revoke Apple Music, Spotify, Google, or other connections in Settings.
• Sign out — End your session in Settings.
• Location and microphone — Control permissions in iOS Settings.

Depending on where you live, you may have additional rights (access, deletion, portability, objection). To exercise them, email us at privacy@myantonio.app.

Antonio is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

We use industry-standard measures such as HTTPS, access controls, and provider security features. No method of transmission or storage is completely secure; use Antonio only on devices you trust.

Our service providers may process data in the United States and other countries. By using Antonio, you consent to transfer and processing in those locations, subject to applicable law.

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. Continued use after changes means you accept the revised policy.

Questions about privacy or this policy? Email privacy@myantonio.app.