Privacy
Last updated 22 October 2026
This is how Miatzil treats what you drop in, and who else handles any of it. The same deal is written in the terms. The Android app uses the package name com.xeliuh.miatzil; the product name is Miatzil.
What we keep
Your memory is encrypted with a key that belongs to your account. Notes, photos, clips, voice notes, documents, people, reports, and anything this phone is allowed to read for you — calendar, place, contacts, Health — become part of that memory once you drop them in. Text is encrypted with your account’s own key, itself protected by AWS Key Management Service; files are stored encrypted with Miatzil’s storage key. Everything is kept on Amazon Web Services in the United States. We use it to do the one job you came here for: to file who is in your life, build your reports, answer what you ask, write your Dreams, and raise the handful of things worth telling you about. That is the whole list.
AI reads what you drop
Every drop you make is read by Anthropic’s Claude models on Amazon Bedrock, so that Miatzil can file it. What is sent is the text of the drop — a note, the words in a photo or a document, what is said in a voice note or a clip, an event, a place or a contact you drop, and the chats or sent mail you import — with the time and the names of people already on file. Asking a question, Brief me, the assistant and Dreams send the question and the pieces of your memory they need; a Dream’s song sends its lyrics. The models pick out who and what matters and write the answers, and the replies come straight back to Miatzil. Amazon Titan Text Embeddings, also on Amazon Bedrock, turns each fact and each question into numbers so Miatzil can find the facts a question is about.
Amazon Bedrock runs these models for us in the United States. It does not keep what it is sent (we leave its request logging off), it does not train any model on it, and Anthropic never receives it. Before a model reads a photo, a document or a voice note, Amazon Textract reads the words in photos and documents and Amazon Transcribe turns speech into words. Our AWS account has opted out of AWS using that content to improve its AI services (an AWS Organizations opt-out policy for all AI services, in force since 22 October 2026), so neither Textract, Transcribe nor Bedrock learns from what you drop. Our own copy of a transcript job expires after 3 days.
Miatzil cannot work without this, so you are asked before anything is sent: on the form that creates an account, after a first sign-in with Apple or Google, and on any phone or browser that has not yet agreed to the current terms. Saying no signs you out; nothing is deleted.
What we never do
We do not sell your memory, or any part of it, to anyone, for any purpose. We do not use your memory to train models, and Amazon Bedrock does not train any model on what Miatzil sends it. We do not read your memory ourselves. No advertiser, broker or data partner is ever given access to it. There is no advertising in Miatzil, and no analytics, advertising or tracking software in the apps or on this site.
Who else handles what
- Sign-in (Amazon Cognito, Apple, Google). Your email address and password (Cognito keeps only a hash of it), your language, and, if you use them, that you signed in with Apple or Google. They tell us an address (Apple may give a private relay address) and that you proved who you are. We never get your Apple or Google password, and signing in does not open a mailbox.
- Mail (Amazon SES). Your email address and a code, for the sign-up and password-reset mail from hello@miatzil.com. Miatzil sends you no other mail.
- Notifications (Amazon SNS, the Apple Push Notification service, Firebase Cloud Messaging). The device’s push address, and each notification’s title and short text, which may name a person in your memory. Android uses Firebase only to deliver notifications: no Firebase Analytics, and the advertising id is removed from the app.
- Payments (the App Store, Google Play, Stripe). On a phone the App Store or Google Play takes the payment and our server checks the receipt with Apple or Google. On the web Stripe takes it; Stripe gets your account’s id and your email address to fill in its page, and you type your card on Stripe’s page, so we never see it.
- Weather (MET Norway). For a weather drop our server asks api.met.no about a place rounded to about a kilometre, with no account or device identity.
- Place names (your phone’s own maps service, Apple’s or Google’s). A coordinate when you drop a place, and an event’s address when Miatzil works out when to leave.
Each of them keeps what it gets under its own terms. Everything else runs in our own AWS account: the app’s functions, database, file storage and the computer that sings Pro’s Dream songs.
Imports
Mail is never read from a live mailbox. You can import an export file of your mail (.mbox, .eml or a .zip of them) that you download from your provider; Miatzil reads it on your phone and keeps only the messages you sent. Mail other people sent you is left out. A ChatGPT or Claude export is read the same way, and only your own messages are kept. What is kept goes into your memory and is read by the models like any other drop.
This phone
Camera, photos, contacts, calendar, place, microphone, Health and Face ID are used when you tap them, while Miatzil is open. Two things then keep themselves current while the app is open: once you have dropped Health, its figures are dropped again when they change (at most every 20 minutes), and leave-by reads your calendar and where you are to tell you when to set off. Nothing is read in the background, we do not listen in and we do not trail you. From the address book only the people you tick are kept, with their name, phone number and email. Health is read-only: Miatzil never writes anything back to Apple Health or Health Connect. Health snapshots that leave the phone are encrypted with your account key and used only to file your own memory and reports. They are never used for advertising, data mining, or research. Notifications, when you allow them, are how Miatzil speaks back — a Sunday report, a reminder you set, a time to leave.
Counts, and nothing else
We count things like how often a feature is used, how many drops, people and Dreams an account has, when it was last used, its plan and what its AI costs, so we know what to build and what it costs to run. Those counts carry no content. Crash reports are the ones Apple and Google pass on to app makers when you allow it: stack traces, not your notes.
How long, and how to leave
We keep your memory for as long as the account exists. Sign out any time. Delete my account erases your memory, the key that protects it and every file you dropped, including everything the app worked out about you, and every stored version of those files. Copies in the database’s backups expire within 14 days. While an account exists, a replaced file’s older version is kept for 30 days, and the app’s own logs, which carry no content, for 14 days. The steps are on Delete your account.
Who this is for
You must be old enough to have an account where you live, and at least 13.
Changes
When this policy changes in a way that alters the deal, we ask you to agree again. The date at the top is the version you are reading.
Who we are
Miatzil is made by Xeliuh LLC, a Texas limited liability company, 5900 Balcones Drive #31571, Austin, TX 78731, USA. Write to hello@miatzil.com.
© 2026 Xeliuh LLC
Miatzil™ is a trademark of Xeliuh LLC.