Privacy at MATRIX AI
MATRIX AI is operated by THAMJJ13.TOP White Hat Team for users aged 11–17. Privacy is not a feature here — it is the architecture.
What we store
Your profile (name, date of birth for age verification, school, country), conversations, memories, course progress, quiz results, certificates, security events, scam reports and notification preferences. All stored in Google Cloud Firestore (Firebase) — the single source of truth.
What we never store
Passwords, OTPs, access tokens, payment details, or raw identity document numbers. Birth certificate numbers are never stored; we keep only a verification reference and a review outcome.
Row Level Security
Every user-owned record is protected by PostgreSQL Row Level Security. You can only read and modify your own data — not even the application code can bypass this from the client.
AI and PII redaction
Before your message reaches the AI, a PII redaction service removes emails, phone numbers, codes, passwords, addresses and ID-like data. The AI never sees them and is instructed never to ask for them. Normal questions—including Bangla and Banglish—are passed through; only clearly harmful operational cyber requests are stopped and redirected to safer help.
Temporary chats
Temporary chats never appear in history or search, never enter memory or summaries, and are hard-deleted after 24 hours.
Your controls
View and delete memories, disable memory or chat history, export all your data as JSON (link expires after 7 days), or delete your account entirely — after re-authentication, a server-side workflow removes and anonymises your records.
Who can see your data
Only you. Admins use role-based access control (RBAC); conversations are never shown by default — any privileged access requires an explicit reason, a time-limited grant, and an audit entry. Some countries require guardian consent for users under a certain age.
Questions? Contact the THAMJJ13.TOP White Hat Team through your parent or guardian.