Privacy Policy Mullet Maters

Privacy Policy

Last updated: October 5th, 2026

Mullet Maters is an independent dating service operated by Garret Kaye. This Privacy Policy explains what information Mullet Maters (“Mullet Maters,”, “M.M.,” “we,” “us,” or “our”) collects, how we use it, when we share it, and the choices available to you.

Mullet Maters is designed around a fairly simple idea: you should be able to understand what happens to your information without needing a law degree, a corporate org chart, or a magnifying glass.

This policy describes Mullet Maters' own practices as well as relevant processing performed by the third-party services we use to operate the service.

1. Information We Collect

The information we collect depends on how you use Mullet Maters.

Information you provide

When you create and use an account, we may collect:

Some information you provide to Mullet Maters is made available to other users as part of the dating service. Profile information, for example, is intended to be viewed by other Mullet Maters users. Information such as your phone number, date of birth, reports, and blocked-user information is not displayed to other users.

Messaging information

Messages are encrypted on the sender's device before transmission and remain encrypted until they reach the intended recipient's device. Mullet Maters does not possess the information required to reconstruct the plaintext of an encrypted message. Mullet Maters can receive message plaintext only when a user voluntarily discloses it, such as when submitting a report.

We nevertheless process information necessary to operate messaging, including account and device identifiers, delivery information, timestamps, notification information, and other message metadata.

Device and technical information

We collect or receive technical information needed to operate, secure, and troubleshoot the service. Depending on the service and platform involved, this may include:

Mullet Maters does not currently store IP addresses in its application database or use them as part of user profiles. Operational and request logs may nevertheless contain IP addresses and other technical request information.

Information collected by third-party services

Mullet Maters relies on third-party services, including Google Firebase, Google Cloud, Firebase Authentication, Firebase Cloud Messaging, Firebase App Check, Google Mobile Ads (AdMob), and related infrastructure.

These services may process information on our behalf and, for certain purposes, independently. Their processing is governed in part by their own privacy policies and documentation, in addition to the contractual and technical arrangements between Mullet Maters and those providers. Section 12 describes these different roles.

2. How We Use Information

We use information to:

Mullet Maters does not use your personal information or user-generated content to train its own machine-learning or generative-AI models.

3. End-to-End Encrypted Messaging

Mullet Maters uses end-to-end encryption for chat messages.

Messages are encrypted on the sender's device before transmission and remain encrypted until they reach the intended recipient's device. Mullet Maters does not possess the information required to reconstruct the plaintext of an encrypted message. Mullet Maters can receive message plaintext only when a user voluntarily discloses it, such as when submitting a report.

End-to-end encryption applies to message content, not to every piece of information associated with a conversation. Mullet Maters may still process message metadata such as user identifiers, timestamps, delivery information, and other information necessary to operate the messaging service.

Push notification application payloads are also end-to-end encrypted, with Mullet Maters' server and your device as the cryptographic endpoints. This differs from chat-message encryption, whose endpoints are the sender's and recipient's devices. Notification payload encryption is applied before submission to notification providers, separately from ordinary transport encryption, as described in Section 8.

If you voluntarily report a message, the reported message content may be provided to Mullet Maters as part of the reporting process. Mullet Maters uses message-franking mechanisms to authenticate voluntarily disclosed message content without otherwise requiring access to message plaintext.

End-to-end encryption does not prevent a participant in a conversation from copying, photographing, recording, forwarding, or otherwise disclosing a message they can already read. It also cannot protect a device that has itself been compromised.

Additional technical information about the Mullet Maters E2EE protocol, including its cryptographic design and security assumptions, is available in the Mullet Maters E2EE Protocol Specification.

4. Location Information

Mullet Maters uses location information to provide location-based discovery features.

Mullet Maters represents your location using a geohash with no more than five characters of precision. A five-character geohash identifies a geographic grid cell approximately 3 miles by 3 miles (4.9 km by 4.9 km) at the equator; its east-west width decreases with latitude. This describes the size of the grid cell, rather than a guaranteed accuracy or privacy radius.

Other users may be shown an approximate relative distance from you. Mullet Maters does not provide them with your precise device location, geographic coordinates, or stored geohash. Profile information you choose to provide, such as your city, may still be visible to other users.

Location information may also be used by the Discovery system to determine which profiles are relevant to your selected geographic preferences.

5. Advertising

Mullet Maters does not charge users for access to the dating service and therefore displays advertisements to help pay for the service's infrastructure and operating costs.

Mullet Maters uses Google AdMob to provide advertisements.

Mullet Maters does not request Apple's Identifier for Advertisers (IDFA) and does not request permission to track you across other companies' apps and websites using Apple's App Tracking Transparency framework.

AdMob may independently process limited information from your device in connection with advertising. Depending on the circumstances, this may include:

Mullet Maters may also provide AdMob with your age bracket and gender for advertising relevance. Where applicable, you are given a choice about whether to allow this information to be shared for advertising purposes.

Mullet Maters does not provide AdMob or advertisers with other information maintained by its dating service, including your phone number, date of birth, precise location, profile information, likes, matches, or chat records.

AdMob and Google's processing of information is also governed by Google's applicable privacy policies and documentation.

6. Phone Numbers

A phone number is required to create a Mullet Maters account for authentication and user-integrity purposes.

Mullet Maters does not share your phone number with other people or organizations, except for the SMS one-time-passcode provider used to authenticate your account: Google Firebase Authentication.

When you delete your account, Mullet Maters immediately deletes the phone number associated with the account from its systems. Google subsequently removes the phone number from its infrastructure in accordance with its published retention practices; Mullet Maters currently understands that this may take up to 180 days.

Phone numbers associated with prohibited accounts are handled differently. Mullet Maters stores an HMAC-SHA-256 hash derived from the phone number to help enforce account prohibitions without retaining the phone number itself in this system.

Because the possible range of phone numbers is comparatively small, these hashes can potentially be subjected to enumeration or guess-and-check attacks. They therefore should not be considered fully anonymous.

7. Safety, Reports, and Abuse Prevention

Mullet Maters processes information necessary to maintain a safe and functional service.

This may include:

Some safety mechanisms necessarily require us to retain information that would otherwise not be visible to other users. For example, reports and blocked-user information are not part of your public profile.

When submitting a report, you may voluntarily provide message content or other information to Mullet Maters for investigation.

8. Device and Push Notification Information

Mullet Maters maintains information about devices associated with your account so that the service can deliver notifications and support encrypted messaging.

A device record may include a device identifier, platform, language, push notification token, notification preferences, information used to support encrypted notifications, and timestamps associated with the device record.

Mullet Maters encrypts application-level push notification payloads before submitting them to Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM). The cryptographic endpoints for these payloads are Mullet Maters' server and your device. Apple and Google do not receive the plaintext application payload, but they still receive the routing and delivery information necessary to deliver the notification. This payload encryption is separate from ordinary transport encryption.

You can control which categories of notifications you receive through the app's notification settings.

9. App Integrity and Security

Mullet Maters uses Firebase App Check and related security mechanisms to help distinguish legitimate app clients from unauthorized or automated clients.

Information associated with App Check may be provided to Mullet Maters' backend to verify requests and protect the service. This information is used for security and service-integrity purposes and is not used to build a dating profile or advertising profile.

Mullet Maters also uses technical logs and other operational information to maintain the service, investigate errors, protect infrastructure, and respond to abuse.

Operational and request logs are configured to be retained for no more than 30 days, except where a longer retention period is required for security, legal, or infrastructure purposes.

10. Data Retention and Deletion

Mullet Maters does not maintain a separate inactive-user archive for its own purposes.

When you delete your account, Mullet Maters deletes the account information associated with it from its active systems. This includes, as applicable:

Phone-number handling for prohibited accounts is the exception described in Section 6.

Some information may also exist temporarily in backups, logs, caches, or third-party infrastructure after deletion. Third-party services may retain information according to their own retention policies.

Deletion of your Mullet Maters account does not require Google or another independent service provider to immediately delete information that it is legally or contractually permitted or required to retain.

11. Cookies and Similar Technologies

Mullet Maters does not currently use cookies for the operation of its website or dating service.

Third-party services used by Mullet Maters may use their own identifiers or similar technologies as part of providing their services. For example, advertising services may use device identifiers or other technologies described in their own documentation.

12. Third-Party Services

Mullet Maters relies on third-party providers to operate portions of the service. Mullet Maters is the controller of personal information for which Mullet Maters determines the purposes and means of processing. Infrastructure providers act as processors or service providers when handling that information on our behalf under applicable agreements. Information stored in Mullet Maters' Firebase and Google Cloud infrastructure remains under Mullet Maters' control as customer data; use of that infrastructure does not make Google the controller of that customer data.

Google processes Mullet Maters customer data on our behalf to provide, secure, and maintain the Firebase and Google Cloud infrastructure used by the service. Google separately processes limited technical and operational information generated through our use of those services, such as service usage, resource identifiers, IP addresses, and support communications, under its own privacy documentation. Google Mobile Ads processes the limited advertising information described in Section 5 under a separate advertising relationship.

The services we use and their applicable privacy documentation include:

These providers' privacy policies and documentation supplement rather than replace this Privacy Policy. They explain the providers' own processing; this policy describes Mullet Maters' practices and remains applicable to information processed on our behalf.

13. Your Privacy Rights

Depending on where you live and which laws apply to you, you may have rights regarding your personal information.

These may include the right to:

These rights vary by jurisdiction and may be subject to legal exceptions and limitations. Requests may be handled manually, including by providing information in a commonly used electronic format where applicable. Mullet Maters does not currently offer an automated data-export tool.

You can exercise applicable rights by contacting us at legal@mulletmaters.app. We may need to verify your identity before fulfilling certain requests.

14. International Data Processing

Mullet Maters uses service providers, including Google, whose infrastructure may process information in the United States and other countries.

Where applicable law requires safeguards for international transfers of personal information, Mullet Maters relies on the safeguards available through its service providers and applicable legal mechanisms.

15. Security

Mullet Maters uses technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure, or destruction.

These measures include end-to-end encryption for message content, encryption of information stored by our infrastructure and service providers where supported, authentication controls, application-integrity checks, access controls, and other security measures appropriate to the service.

Mullet Maters uses Google Cloud and Firebase infrastructure covered by Google's security and compliance programs. Applicable services, including Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Run, Firebase Cloud Messaging, and Firebase App Check, are covered by Google's ISO/IEC 27001 certification and independent SOC 2 reports. These certifications and assessments apply to the applicable Google services and infrastructure, not to Mullet Maters itself. See Firebase's security and compliance documentation, Google Cloud's ISO/IEC 27001 documentation, and Google Cloud's SOC 2 documentation.

No system can guarantee absolute security. In particular, end-to-end encryption cannot protect information after it has been decrypted on a user's device, and no online service can eliminate every risk associated with storing or transmitting information over the internet.

16. Children

Mullet Maters is intended for adults aged 18 and older.

We do not knowingly permit people under 18 to create or maintain Mullet Maters accounts. If we learn that an account belongs to someone under 18, we will take appropriate steps to remove the account and associated information.

17. Changes to This Policy

We may update this Privacy Policy as Mullet Maters, its features, or the laws applicable to the service change.

Whenever we change this policy, we will update the "Last updated" date. Changes take effect when the updated policy is published unless a different effective date is stated in the updated policy.

For material changes, we will make reasonable efforts to alert users through an in-app notice, push notification, or other reasonable means where appropriate. Minor changes may be reflected in the updated policy without a separate notice. We will provide any notice required by applicable law.

The current version of this Privacy Policy will always be available through the Mullet Maters website and is the authoritative version. You are responsible for reviewing the current policy to understand how Mullet Maters handles your information.

18. Contact

If you have questions about this Privacy Policy or how Mullet Maters handles information, contact us at:

Privacy: legal@mulletmaters.app

General: hello@mulletmaters.app

Support: support@mulletmaters.app