chibotBack to home

Privacy Policy

Privacy Policy

Effective date: September 21, 2026

This Privacy Policy explains how Matoffo OÜ (“Matoffo”, “we”, “us”, or “our”) collects, uses, stores, and processes information in connection with Chibot, including the Chibot mobile application, Chibot robots, and related services.

Chibot is a companion application used to set up and configure a physical Chibot robot.

1. Who We Are

Chibot is provided by:

Matoffo OÜ
Registry code: 16517194
Kaupmehe tn 7-120
10114 Tallinn
Estonia

Email: contact@chibot.io

2. Information We Collect

Account Information

When you create a Chibot account, we collect:

  • your name;
  • email address;
  • company name; and
  • password.

Passwords are stored as hashes rather than in plain text.

Your email address is also used for account verification, password reset, and other service-related communications.

Robot Information

When a Chibot robot is linked to your account, we may store:

  • a unique robot identifier;
  • robot name;
  • selected language;
  • selected voice;
  • behavior instructions; and
  • other settings necessary to configure and operate the robot.

A robot identifier remains associated with your account while the robot is linked to that account.

Wi-Fi Configuration Data

When you configure a Chibot robot to connect to a Wi-Fi network, we process the Wi-Fi network name and credentials that you provide.

These credentials are stored in encrypted form on the Chibot device and on our backend and are retained until you configure the robot to use another Wi-Fi network.

Setup QR Code

During initial setup, the Chibot application uses the camera to scan a QR code displayed on the robot.

The QR code contains the SSID and password of the robot's temporary Wi-Fi hotspot.

This information is used only to establish the initial local connection between your mobile device and the robot. The temporary hotspot credentials are not stored by the mobile application or sent to our backend.

Voice Interactions

Voice interaction takes place through the physical Chibot robot rather than through the mobile application's microphone.

When you activate voice interaction on the robot, the robot temporarily records your voice and sends the recording to our backend infrastructure for processing.

The voice recording is processed to:

  1. convert speech into text;
  2. process the resulting text and generate a response; and
  3. convert the response into audio and return it to the robot.

Voice recordings and generated audio responses are processed temporarily and are not retained as conversation history.

To maintain conversational context, Chibot may temporarily retain up to 10 recent question-and-answer exchanges in text form. This temporary context is cleared after a period of inactivity.

3. Mobile App Permissions

The Chibot mobile application may request access to:

Camera — to scan the setup QR code displayed on your Chibot robot.

Local Network / Wi-Fi — to establish a local connection with the Chibot robot during setup.

The current version of the application does not require access to your microphone, photos, contacts, or location.

4. How We Use Information

We use information described in this Privacy Policy to:

  • create and manage Chibot accounts;
  • verify email addresses;
  • authenticate users;
  • reset passwords;
  • link Chibot robots to user accounts;
  • configure and operate Chibot robots;
  • connect robots to Wi-Fi networks;
  • process voice interactions;
  • maintain short-term conversational context;
  • provide customer support;
  • maintain and protect the Chibot service; and
  • comply with applicable legal obligations.

We do not currently use personal information for advertising or marketing purposes.

5. Cloud Infrastructure and Service Providers

We use third-party service providers where necessary to operate Chibot.

Amazon Web Services

Chibot's backend infrastructure is hosted using Amazon Web Services (AWS) in the European Union.

AWS infrastructure is used to operate Chibot, store account and robot configuration information, and process robot voice interactions.

The specific AWS services used may change as the Chibot infrastructure evolves.

Resend

We use Resend to deliver transactional and service-related emails, including:

  • email verification;
  • password reset emails; and
  • account or service notifications.

We do not currently use Resend to send promotional or marketing emails.

6. Analytics and Advertising

The current version of the Chibot mobile application does not use advertising SDKs or third-party analytics or crash-reporting services such as advertising networks or behavioral tracking tools.

We do not sell personal information to advertisers.

7. Data Retention

We retain account information while your Chibot account remains active.

Robot configuration information and robot identifiers are retained while they are associated with your account.

Wi-Fi configuration information is retained until it is replaced by a new Wi-Fi configuration or the associated account data is deleted.

Voice recordings and generated audio responses are processed temporarily and are not retained as conversation history.

Recent textual conversation context is retained only temporarily and is cleared after a period of inactivity.

8. Account and Data Deletion

You can request deletion of your Chibot account directly in the Chibot app or at https://chibot.io/delete-account.

We require email confirmation before deletion begins. After confirmation, your active sessions are revoked and your account-associated cloud data is deleted. We aim to complete the process within 24 hours.

Some limited records may be retained where required for legal, security, backup, or service-provider purposes. Account deletion does not perform a factory reset or erase data stored locally on the physical Chibot device.

9. Robot Unlinking

If you need to unlink a Chibot robot from your account and this option is not available directly in the application, contact us at:

contact@chibot.io

10. Your Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

  • access information we hold about you;
  • correct inaccurate information;
  • request deletion of your information;
  • restrict or object to certain processing;
  • request a copy of your information; and
  • withdraw consent where processing is based on consent.

To exercise these rights, contact contact@chibot.io.

You may also have the right to submit a complaint to the relevant data protection authority.

11. Children

Chibot is designed as a business-oriented product and the Chibot mobile application is not specifically directed at children.

We do not knowingly design the mobile application for the collection of personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy as Chibot develops or when legal or operational requirements change.

When we make changes, we will update the effective date shown at the beginning of this Privacy Policy.

13. Contact Us

For privacy questions, account deletion requests, or other inquiries relating to personal information, contact:

Matoffo OÜ
Kaupmehe tn 7-120
10114 Tallinn
Estonia

Email: contact@chibot.io