SubMac Agent · Last updated 23 October 2026

Privacy Policy

This policy explains how the SubMac Agent app for Android ("SubMac", "the app", "we", "us") handles your information. It covers the app and the servers it uses.

The short version: most of what SubMac knows about you stays on your phone. When SubMac thinks, the message and the context it needs go through our server to an AI partner that works on our behalf. We never sell your information or give it to third parties for their own use, we don't show ads, and you can delete your account and its data from inside the app at any time.

What we collect Phone permissions How we use it Who processes it How long we keep it Deleting your data Your rights Security Children Changes Contact

1. What we collect

Account. Your email address and a password to create your SubMac account (the password is stored only as a secure hash). An invite code, if you enter one.

Your chats and what SubMac remembers. Your messages, SubMac's replies, files or pictures you attach, and facts SubMac saves to its memory about you. These live on your phone, and a backup is kept in your SubMac account so they come back when you sign in on a new phone. Results from WhatsApp tools are removed from that backup.

Bots and teams. The bots you hire or create, their instructions, memory, tasks and journal. When a bot is set to keep working while your phone is off, its data is synced to our server so it can run there. Bots you choose to publish in the Bot Store, and their public pages, are visible to other people.

Voice. In a voice call, your voice is streamed live to an AI voice model and is not recorded or stored by us; we keep only the call's start time and length to count your daily minutes. "Hello SubMac" listens for its name with a speech model that runs entirely on your phone; that audio never leaves the device. When you dictate a message, your phone's built-in speech service turns it into text.

Sites you publish. When you tap Publish and choose a free SubMac link, the site's files are uploaded and hosted at a public address for 7 days. When you choose your own Vercel account, the files go straight to your account at Vercel.

Usage and technical data. How much of your daily AI allowance you've used (counts of words or "tokens", timing and errors, not your message text), call minutes, an app-generated device ID, the app version and platform, a push notification token, and simple product events such as "a bot was hired" or "a reply was answered" (these never contain names, message text or contact details). Our servers also see your IP address when your phone connects, which is used for security and abuse prevention.

Payments. If you buy a package or pay as you go, we keep what you bought, the amount, the date, the payment status and the mobile money or wallet number you paid from, so we can add it to your account, show your history and keep the records the law requires. Payments are processed by a licensed payment partner. We never see or store your mobile money PIN or card details.

App updates. To offer you a new version, the app checks with our server which version it is running. Updates are downloaded from our servers and installed only when you tap Install.

Rewards. Your invite code, who joined with it, and the bonus allowance you've earned.

Messages from you. If you email us, we keep the conversation to help you.

What stays only on your phone. Logins you save for websites, the sign-ins and keys for apps you connect, email app passwords, your SMS, contacts, calendar, WhatsApp notifications SubMac keeps (the newest messages per chat for 7 days), and your phone files. These are not uploaded to our servers. The AI never sees your saved passwords. When you ask SubMac to use one of these (for example "summarize my texts from today"), only the part needed for that task is sent to the AI model, as described below.

2. Phone permissions

SubMac only uses a permission after you turn it on, and you can turn any of them off in Android settings. Each one is used only to do what you ask.

Accessibility service (phone control). Lets SubMac read what is on the screen and tap, type and scroll for you, for example to send a WhatsApp message you approved. It runs only during tasks you start or approve. Screen content it reads is sent to the AI model for that task only, and is not used for ads or sold. SubMac asks for your approval before anything that pays, sends, posts or deletes.
Notification access. Lets SubMac see notifications from apps such as WhatsApp so it can tell you about new messages, reply when you approve, and wake a bot you set to watch a chat. WhatsApp notification content is kept on your phone for up to 7 days and is never synced to our servers.
SMS (read). Lets SubMac read your text messages when you ask, for example to find a code or summarize messages.
Contacts and calendar. Lets SubMac find a contact, read your events and add events you ask for.
Files and storage (including all-files access). Lets SubMac open, organize and save files in Downloads, Documents and Photos when you ask.
Microphone. For voice calls, dictation and "Hello SubMac".
Camera and photos. Only for pictures you choose to take or share. Reading text in a picture happens on your phone.
Notifications, display over other apps, background work, alarms and battery settings. To tell you when a task is done, show the small task bubble while SubMac works in another app, keep a running task alive, and run reminders and scheduled tasks on time.

3. How we use your information

To run the app: answer your messages, carry out tasks you ask for, run your bots and reminders, back up and restore your chats, and publish sites you choose to publish.
To keep the service fair and working: count daily allowances and call minutes, apply limits, fix errors and measure speed.
To keep people safe: detect and stop abuse, fraud, spam or illegal use. Automated checks can flag an account, and our team may review flagged activity to decide what to do.
To improve SubMac using the usage counts and product events described above.
To send you notifications you turned on, and service messages in the app's "From SubMac" inbox.

We do not sell your personal information, share it for advertising, or use your chats to build ad profiles. We do not train our own AI models on your chats. We do not give your chats, contacts, files or personal details to anyone for their own marketing or business.

Where data protection law requires a legal basis, we rely on performing our contract with you (running the app you signed up for), our legitimate interests (security, abuse prevention and improving the service), and your consent (phone permissions and optional features, which you can withdraw at any time).

We don't sell your information and we don't give it to third parties for their own use. To run SubMac we work with a small number of trusted service partners. They process your information only on our behalf, only to provide SubMac to you, and they are not allowed to use it for anything else. We also share information when you ask us to, or when the law requires it.

AI partners. To answer you, your message, the relevant conversation history, memory, and any content a task needs (for example a web page, a file, screen text or a text message you asked about) are sent securely through our server to an AI partner, and voice calls are handled the same way. Only what the task needs is sent. Partners may keep requests for a limited time for safety and abuse monitoring, and some may use them to improve their services under their own terms, so please avoid sharing very sensitive information, such as health records or ID numbers, unless you need SubMac to work with it.
Storage, hosting and notifications. Secure cloud partners store your account, chat backups, bot sync data and usage records, host free SubMac site links, and deliver notifications to your phone.
Payments. When you pay, a licensed payment partner receives what it needs to take the payment.
Web search and page tools. When SubMac searches the web or opens pages for you, the search terms or addresses go to the search service or website involved.
Apps you connect. When you connect an app (for example Google, GitHub, Notion, Slack, Telegram or Vercel) or a tool server, SubMac sends that service what is needed to do your task, using your connection. Those services handle data under their own privacy policies.
Legal reasons. We may share information if the law requires it, to respond to valid legal requests, or to protect the rights and safety of our users or others.
Business changes. If SubMac is merged or sold, your information may move to the new owner, who must respect this policy.

Some partners are in other countries. When information moves between countries, we use partners that protect it with recognised safeguards.

5. How long we keep it

Account, chat backups, memory and bot data: until you delete them or your account.
Free SubMac site links: taken down automatically 7 days after first publishing, or sooner if you remove them. Sites on your own Vercel account stay there until you remove them.
Payment records: as long as tax and accounting laws require, even after you delete your account.
Usage counts and logs: as long as needed to run and protect the service. When you delete your account, your usage records are separated from you so they no longer identify you.
Data on your phone: until you delete it in the app or uninstall the app.

6. Deleting your data

You can delete any chat, all chats, or your whole account inside the app: Settings → Your data → Delete account. Deleting your account removes your account, chats and backups, memory, attachments, bots and bot sync data, Bot Store listings, rewards, events and settings from our servers, and takes down your free SubMac site links. Usage records are kept only in a form that no longer identifies you. Copies in routine backups are overwritten within about 30 days.

If you can't use the app, email contact@submac.site from the email address on your account and ask us to delete it. We will do it within 30 days and confirm by email.

7. Your rights

Depending on where you live, you may have the right to access, correct, download or delete your personal information, to object to or restrict some uses, and to withdraw consent. To use any of these rights, email contact@submac.site. We will answer within 30 days. You may also complain to your local data protection authority.

8. Security

Connections to our servers are encrypted. Logins and app sign-ins saved on your phone are encrypted with Android's secure storage. Server data is protected by access rules that let each account reach only its own data. No system is perfectly secure, so please use a strong password and keep your phone locked.

9. Children

SubMac is for people 18 and over. You must be 18 or older to use it. If you believe someone under 18 has given us personal information, email us and we will delete it.

10. Changes

We may update this policy as SubMac changes. We will change the date at the top, and for important changes we will tell you in the app before they take effect.

11. Contact

Questions or requests about privacy: contact@submac.site.