M3XI Get CallMe

Legal & policies

M3XI policies.

Everything in one place: how the M3XI website handles your data, plus a policy for each of our products — CallMe and M3XI Spatial. Cornelia and AutoUV are on hold; what we still hold for them is covered near the end. Plain English wherever the law allows.

Effective: 28 April 2026 · Last updated: 18 October 2026 · Contact: support@m3xi.com

Policy 01 · m3xi.com

Website & waitlists

Who we are

M3XI LTD ("we", "us") — company number 17425819, registered office 128 City Road, London EC1V 2NX, England — operates this website and the products described on this page, and is the data controller for the personal data they collect, except where a section below says otherwise. Privacy requests: support@m3xi.com.

What the website collects

  • Waitlist signups. If you join a waitlist on this website we store the email address you give us, an optional name, which list you joined, and the page you signed up from. This is stored securely in our database (Supabase, EU region).
  • Email you send us. If you contact support@m3xi.com or m3xiteam@m3xi.com we receive whatever you include in your message.
  • Operational data. Our hosting provider (Vercel) processes standard server logs (IP address, user agent) to deliver the site over HTTPS. We do not run advertising trackers on this website.

How we use waitlist data

  • To email you about what you signed up for — launch news, early-access invites, and important updates. Nothing else.
  • We do not sell or share waitlist emails with third parties for their marketing.
  • You can leave a waitlist at any time by emailing us or using the unsubscribe link in any email we send; we then delete your entry.

Cookies

This site uses only strictly necessary operational storage, such as keeping you signed in to M3XI Spatial, or keeping a computer signed in to the CallMe creator studio for as long as its tab is open. If we ever add analytics, we will update this policy and add consent tooling first.

↑ Back to all policies

Policy 02 · CallMe — a place to hang out on live calls

CallMe

CallMe is a place for adults to hang out on live calls: at tables, with friends and crews, at events, and one-to-one with someone who is free to talk. A call opens on voice, and video turns on only when both people agree. Every user's age is verified before they can call anyone, and some of what CallMe uses is sensitive, so this policy is deliberately specific about what that involves.

Age and identity verification

CallMe is strictly 18+, and verification is mandatory — there is no way to skip it and reach the calling features. The check is carried out by Didit, our verification provider, and involves three steps:

  • photographing an identity document — passport, driving licence or national ID;
  • taking a live selfie, checked for liveness: that a real person is present rather than a photograph, mask or video;
  • a face match between that selfie and the photograph on your document.

The face match is biometric processing. Under UK and EU GDPR, biometric data used to identify someone is special-category data, and we rely on your explicit consent together with the substantial public interest in keeping under-18s out of an adult service.

Your document images and selfie go directly to Didit, and we receive only the outcome — pass or fail, your date of birth, and your derived age. For the photo check, your verification selfie passes through our server's memory to compare it with your card photo. CallMe never stores your ID images or selfie. The photo check happens only if you ask for it; see Photo verified, below.

Photo verified

If you tap Verify my photo in Design your MeCards, we ask Didit to compare the face in the first photo on your Card 1 with the selfie you took for your ID check. Our server fetches that selfie from Didit and sends it, with your card photo, back to Didit for the comparison. The selfie passes through our server’s memory for that one request: it is never stored, logged, shown to anyone or sent to your phone, and we ask Didit not to keep the comparison. Your ID document’s own images are never used. If Didit finds it is clearly you in both, your card shows a small Photo verified stamp to anyone who sees it.

This comparison is biometric processing too, and we do it only with your explicit consent, which you give each time you tap Verify my photo after reading what it does. We keep which photo was verified and when, until you change that photo (which takes the stamp off) or delete your account, and a note of each try (the photo, the result and the time) for 35 days, so checks cannot be run too often. Nothing else about the comparison is kept: no score and no image.

Data we collect

  • Account. Sign-in with Google, Apple, or an email address and password; your display name; and an internal user ID.
  • Verification outcome. Pass or fail, date of birth and derived age — not the documents themselves.
  • Profile. Age, city, bio and interests, and optionally gender, occupation, education, a social handle and your origin — one country flag you choose. Earlier versions of CallMe also asked for a relationship aim, sexual orientation and ethnicity. The app no longer asks for them and matching does not use them; an answer you gave then stays on your profile until you delete your account or ask us to remove it. Orientation and ethnicity are special-category data.
  • MeCards. The cards you design — the photograph you add, a GIF, the words you write, a colour style, and any stickers you place on them.
  • Card designs. If you use the creator studio: your designs, their art, the copies you give and receive, and the computers you sign in on. See The creator studio below.
  • Preferences. How far to look: people from your own country, or people from other countries. See "Origin and reach in matching" below. If you set an age range, a distance, genders or ethnicity groups in an older version of CallMe, those answers are still stored with your preferences, but matching no longer reads them.
  • City. The city on your profile, which you type or let your phone find, and the coordinates that came with it. Your friends are shown your city, never your coordinates; since 11 October 2026 people you are not friends with are not shown it. What you type into the city field is sent to Open-Meteo's place search so it can suggest cities.
  • Friends map. Location sharing is off until you turn it on, in Settings → Location. While it is on, your phone sends its place only while CallMe is open, never in the background, and only the friends you choose can see it: your town, rounded to about 5 km before it is stored, or your precise place if you pick that. Sharing switches itself off 24 hours after you turn it on, so it never stays on unless you choose it again. Friends see your last place for up to 12 hours after it was sent. We keep the places you send for up to 7 days to draw your own trail. Turning sharing off deletes them at once, and when sharing switches itself off they are deleted within minutes.
  • Walks. If you walk the dog in CallMe: when each walk started and ended, and your step count, from your phone's step counter, counted only while a walk you started is running. If you also let CallMe use your location for walks: the distance, the time spent moving, the average pace, whether it was a walk or a run, an estimate of the calories burned, and the name of the district or town where the walk started and where it ended. Location is used for a walk only while the walk is running and CallMe is open. The route itself stays on your phone and is never sent to us, and we do not keep the start or end coordinates; to name the district, your phone looks up a point rounded to about 100 metres with its own place service (Apple's or Google's). If you enter your weight for the calorie estimate, the weight stays on your phone, but the calorie estimates made with it are kept with your walks. Only you can see your walks and your personal bests; while a walk is running, friends you share your activity with see that you are out walking.
  • Photos. Images you upload to a MeCard, shown during call intros. If you and the person you talked to both opt in to connect, the photo captured at that moment is saved to each of your connection walls.
  • Messages. What you write in chats with friends, in groups and at tables, kept so the conversation is there when you come back.
  • Your poster and snapshots. The photos, words, stickers and pieces you pin to your poster, and its short status line; friends see your poster, and people you have talked to too if you let them. A snapshot is a photo for your friends, with an optional caption and place name, shown for 24 hours once it has passed its check.
  • Events. If you check in at a CallMe event, that you checked in, when, and any answers you give to the event's questions.
  • Call metadata. Who was matched with whom, call start and end times, whether video was mutually enabled, and connection quality — needed to run the service, prevent abuse and improve matching.
  • What your calls teach pairing. For one-to-one calls, how long each call lasted and what it taught the server about who you get on with, and whether you have switched Personalised pairing off. See How one-to-one pairing is personalised below.
  • Crews. The crews you start or join, the crew invites you send and answer and when, whether you have tapped Ready, where your crew chose to go, the ticket to catch up that you get if your crew went on without you, the call each of you used to sit at the crew's own table (and whether it was given back), and the crew links a crew's host makes. See Crews, house tables and who's around below.
  • Connections and friends. Your friends can see the social handle you chose to share. Until 11 October 2026 it was also shown when you and another person both chose to connect after a call; that no longer reveals it. We also keep the friend requests you send and accept, and your friends list.
  • Safety reports and flags. If you report, block or mute someone, we store the report and enough context to act on it. If CallMe's word check holds or refuses something you wrote, we store the words, what the check found and what our team decided, together with any other safety flags raised against your content.
  • Safety decisions and appeals. Strikes, suspensions and bans on your account with the evidence behind them, a keyed identity fingerprint (see "Safety checks, strikes and bans"), and any appeal you send — your email address, what you wrote and the files you attach.
  • Invites. The one-time invite links you create, whether each was used and when, and how many friends joined; if you joined through an invite, which link and whether it qualified. When you install through an invite link, Google Play passes the code to the app.
  • Purchases. Your Premium subscription status, the coin packs you buy, and how you spend coins in the app. Card details are handled entirely by Apple or Google and never reach us.
  • Sticker searches. What you type into the sticker and GIF picker is sent to GIPHY to return results.
  • Advertising. CallMe shows ads via Google AdMob, which uses your device's advertising ID. See "Advertising & consent" below.

Your calls

  • Calls are never recorded or transcribed. No recording of a call's sound or video is made or kept, what is said is never turned into text or analysed, and no software and nobody at CallMe listens in.
  • How a call travels. A call or table runs either through Agora or through CallMe's own media server in Helsinki, Finland (run for us by Hetzner, EU). On our own server the sound and pictures pass through its memory only and are never written to disk. They are encrypted on the way to and from the server, but not end to end, so that video can be checked for safety as described below.
  • Connection records. For calls and tables on our own server we keep which one you joined and when you joined and left, for 62 days, to count usage and to make sure only people with a seat are connected. The media server's own logs, which include the call's identifier, your account identifier and technical connection details that can include your IP address, are kept for about a week.
  • When video is on, occasional still frames may be checked for nudity. How that works, and what is kept, is set out in "Safety checks, strikes and bans" below.
  • Every call opens on voice. Video turns on only when both people opt in during the call, and you can turn your camera off at any time.
  • Your phone number and email are never shown to other users; calls connect through the app.

Safety checks, strikes and bans

CallMe checks some things automatically, because people on a call with someone they don't know yet deserve protection that does not depend on someone managing to report in the moment. None of it involves listening to calls, and no AI reads what members say or write.

  • Speech is not checked. Since 29 September 2026 no call's sound is transcribed, analysed or reviewed, during the call or afterwards. If someone says something on a call that breaks the rules, report them: a person on our safety team reads every report.
  • Written words. What you write for other people — messages in chats, groups and at tables, your name and profile, the words on your cards, poster and snapshots, call notes, gift notes, event answers, card designs and the suggestion board — is checked as it is saved against CallMe's own lists of words and patterns, on CallMe's own servers. No AI reads it, and it is not sent to any other company to be checked. Depending on what the check finds, your words are saved as you wrote them, saved with part hidden (a phone number or strong swearing in a chat, for example), saved and shown to a person on our safety team, or not sent at all. Newer versions of the app run the same check on your phone first, so you can change your words before they go.
  • Pictures. Pictures for your poster, your snapshots and card-design art are checked by an image moderation service, Sightengine, before anyone else can see them, for nudity and sexual content, weapons, drugs, gore, violence and hateful symbols; a face that looks like a child's can be refused too. The camera details and location stored inside a picture are removed before it is checked. A picture refused as sexual or hateful is kept as evidence with that decision; other refused pictures are deleted. Profile and card photos, snapshots and poster pictures are also checked by CallMe's own image check, on CallMe's own server in Helsinki (Hetzner, EU): it compares each picture with pictures our safety team has banned and scores it for nudity with an image model that runs on that server. A picture that may break the rules is not shown to anyone but you until a person on our safety team has looked at it; this check never punishes anyone by itself. We keep a fingerprint (a hash) of each checked picture, so a banned picture cannot simply be uploaded again.
  • Video on calls through CallMe's own server. When video is on, our server takes an occasional still of each camera and shared screen exactly as it receives them, and checks it on the same server with CallMe's own image model; stills are not sent to any other company to be checked, and nobody's phone sends anything. Clean stills are not stored anywhere; a still that looks explicit is kept in our private storage as evidence and may be looked at by a person on our safety team. Such a still can also pause that person's camera and screen for everyone on the call for a short while (usually under a minute), with no penalty. On these calls a still never removes or suspends anyone by itself. The server takes stills of video only: it never listens to a call's sound.
  • Video on calls through Agora. When video is on, the apps of the other people on the call send occasional still frames of your video (including a shared screen) to Sightengine to check for nudity and sexual content. A frame that looks explicit hides that video from the person watching straight away, with no penalty, and asks your own app for a frame of your own camera. Only when your own frame is also unmistakably explicit are you removed from the call, with a provisional ban of a few days, and a person on our safety team reviews it before it can become permanent. Everything less certain goes to a person, with no penalty, and a frame that may show someone under 18 goes to the top of their queue. A frame is kept only when it looked explicit, in private storage, as evidence; clean frames are not stored anywhere.
  • If it happens on your call. When someone on your call is removed, you get a short letter saying so — without their name or details — and the two of you are never matched again. You don't need to report what they were removed for.
  • Nobody can be framed. On calls through CallMe's own server the stills are taken by our server from what your camera sent, so nobody else's phone can supply one. On calls through Agora a phone can send any picture, so what someone else's app reports about you is never enough on its own to sanction you. A suspicious frame from another person's app only hides your video from them and asks your own app for a frame of your own camera; if the two do not agree, at most a person looks at it.
  • What can happen. The automatic checks can hide or refuse words, give a strike for a clear slur, threat of violence, sexual request or sexual words about a child, and remove someone from a video call with a provisional ban. Strikes add up: repeated strikes lead to a warning, then a suspension. Only a person on our safety team can make a ban permanent, apart from a new account opened by someone who is already banned (see "Identity fingerprint"). Serious direct harm — unwanted sexual messages, nudity on camera, sexual threats, threats of violence, sharing private details, or anything sexual involving a minor — is a permanent ban. Abuse, slurs or harassment lead to a strike or a suspension of a few days to a few weeks. If you are suspended or banned you are taken out of any call, told the reason, how long it lasts and a reference, and the app locks until the ban ends or is lifted.
  • If you might be at risk. Words suggesting you may harm yourself are never punished. You get a letter with places to find support, and a person on our team may read what you wrote.
  • Identity fingerprint. To stop a banned person returning with a new account, we keep a one-way keyed fingerprint (an HMAC) derived from the document details your verification returns — never the document or its number in readable form. A new account whose fingerprint matches a banned one is banned too. A looser match, on name and date of birth only, is never acted on automatically; it is flagged for a person to review. The same fingerprint stops one person claiming a friend's invite reward more than once.
  • Reports, appeals and human review. Every report is read by a person on our safety team. You can appeal any decision at m3xi.com/appeal or by emailing safety@m3xi.com, with anything that shows what happened. A person on our safety team reads every appeal and decides it, and tells you why if they turn it down. No AI reads reports or appeals. This is how we meet your rights under UK GDPR to human intervention in, and to contest, a decision made automatically about you.
  • Legal basis. Our legitimate interests in keeping people safe, and our duties under the Online Safety Act 2023. Suspected child sexual abuse material is reported to the National Crime Agency, as the law requires.

Stickers and GIFs

Stickers and GIFs come from GIPHY and are requested at GIPHY's family-safe "G" rating. How words and pictures you publish are checked is set out in "Safety checks, strikes and bans" above.

The creator studio

Premium members can design card art on a computer at m3xi.com/design and give copies to people they have met. The website never holds your password or your account: your phone signs the computer in. This is what the studio keeps.

  • Your designs. Each design's title and words; how it is laid out — the paper, the stickers and where the wearer's photo sits; how far it has got (a draft, being checked, waiting for a person, ready, given out or retired); and what its checks found. Once you give copies, we keep who holds each one and who gave it to them.
  • The art. A picture you add is redrawn in your browser before it is sent, which removes the camera details and location stored inside it, and it is cleaned again when it reaches us. It stays private until a person on our team has passed the design. Only then do we make the copy that CallMe shows on cards, and like any picture on a card, anyone with that copy's exact address can open it.
  • The checks. Every picture is checked by Sightengine for sexual, violent or hateful content, and the words by CallMe's own word check. Then a person on our team reads every design before it can reach anyone, looking for codes and contact details, photographs of real people and other people's characters or brands. If a picture is refused as sexual or hateful, the original is kept as evidence with that decision.
  • The computer's session. When a computer asks to sign in, we record what kind of browser it is (for example “Chrome on Windows”), a rough location if our host supplies one, when it was opened, signed in and last used, and why it ended. We never store the computer's internet address. We keep a salted one-way hash of it instead, to limit how often sign-in codes can be asked for, and clear it after about a day; if something sexual is sent from that computer, the first part of the hash stays with the safety record. The computer keeps its key to the session in that browser tab alone, and the key is gone when the tab closes.
  • Your phone's confirmation. A computer is signed in only after your phone has scanned its code and you have picked the matching number. We record which account confirmed it, when, and whether you asked us to keep that computer signed in. You can see every signed-in computer, and end any of them, in the app under Settings → Computers signed in.

How long we keep it:

  • Designs and their art — until you delete them, or your account. A draft you throw away is hidden at once and removed for good about a month later, so that we can put it back if someone else threw it away from your signed-in computer. The editing layers of a draft nobody has touched for 90 days are cleared; the design itself stays.
  • Pictures no design uses — cleared after about a month, unless someone holds a copy of a design that uses them.
  • Signed-in computers — a studio session ends after 12 hours without use, or after 7 days at most if you chose to keep that computer signed in, and you can end it sooner. Its record is deleted 90 days after it ends.
  • When you delete your account — your designs go with it, except designs that other people hold copies of. Those stay, with their art, so that the copies keep working, but your name comes off them: the people holding them see only that the person who made it has left CallMe. Gifts still waiting to be accepted, to or from you, are cancelled.

Origin and reach in matching

Matching does not filter people by taste. Gender, age range, distance, sexual orientation and ethnicity play no part in who you are matched with. What always applies is safety: everyone must be a verified adult, and blocks, mutes, suspensions and bans are never set aside. Among the people who pass those checks, one-to-one calls lean towards people you are likely to get on with, as set out in How one-to-one pairing is personalised below.

The one thing you choose is reach: people from your own country, or people from other countries. You can change it at any time in Settings → Stay local or go global.

  • "Your country" means your origin: the flag you choose for yourself, which can differ from where you live. It is not worked out from your location.
  • Origin is optional. If you have not chosen one, reach never keeps you from being matched.
  • Your flag can be seen by other people in CallMe, for example on a table you host.

How one-to-one pairing is personalised

When you ask to talk to someone one-to-one (by sending out the letter on home, for example), our server chooses who you talk to from the verified adults who are free right then. It leans towards people you are likely to get on with, unless you switch that off (see Switching it off, below). You never fill anything in for it; it uses two things.

  • What you have already written about yourself: the interests on your card, the GIFs you picked for it, and the words in your bio.
  • How long your one-to-one calls last. A long call teaches it a little about the kind of people you enjoy talking to, and a call that ends quickly counts slightly against. It never learns from a call that was reported or flagged, from one where either person had blocked the other or was paused or banned, or from a call nobody hung up, and a report made after a call takes back what that call taught.

What it never uses. It skips words that say who someone is — their gender, sexuality, relationship status, religion, ethnicity, health or age — using a list of such words that we keep and add to, and it never reads the job you may have entered in an older version of CallMe. In pairing, your age is used only to make sure everyone is a verified adult. Crews, tables and events are not personalised this way.

It stays open. A quarter of pairings ignore it completely, so you keep talking to people outside “your type”, and someone who has been waiting much longer is always paired first, whatever it thinks.

What anyone sees. Before a call, both of you may see up to two interests you both already show on your cards (“You’re both into …”). Nobody, including you, is shown a score or anything it has learned. What it has learned stays on our servers, is never sold or used for advertising, fades as you make new calls, and is deleted with your account.

Switching it off. You can switch it off at any time in the app, in Settings → Legal and privacy → Personalised pairing. While it is off:

  • who you talk to one-to-one is simply whoever has waited longest, give or take a few seconds so that near-ties don’t always fall the same way;
  • what you wrote is not used to steer anyone’s pairing, yours or theirs, so when someone else is looking you are placed only by how long you have waited (give or take those few seconds);
  • nothing is learned from your one-to-one calls, for you or for the person you talked to.

What your calls had taught it is deleted the moment you switch it off. You can switch it back on whenever you like, and it starts again from nothing. The “You’re both into …” line before a call can still show interests you both print on your cards, because it decides nothing about who you talk to.

Your choice. We do this on the basis of our legitimate interest in making calls go well, and the switch is how you object to it. If your version of CallMe is older and has no switch, email support@m3xi.com from your registered email and we will switch it off for you, with the same effect. You will still be paired, just without it.

Crews, house tables and who’s around

  • Crews. A crew is you and up to three friends who go places together. Only a friend can ask you into a crew, and an invite always asks: nothing happens unless you say yes, and saying yes is not the same as being ready. A crew goes somewhere once everyone in it has tapped Ready, or when its host chooses to go with whoever is ready; anyone who is not ready stays behind and gets a ticket to join the others later. Nobody is ever moved anywhere without their own Ready (in an older CallMe, which has no Ready button, joining the crew counts as ready), and Ready clears after each outing. The people in your crew see your name, your profile photos, whether you are on the crew’s page right now, whether you are ready and whether your CallMe is new enough for the crew room. The crew goes to its own private table (“Just us”, which uses one call from each person who goes, given back if nobody else is on the call with them within 3 minutes), sits at an open table together, or finds another crew who is also looking. The people at that table, or in that other crew, see what anyone on a call with you sees (below).
  • Crew links. A crew’s host can make a link (m3xi.com/j/…) to send to friends. It works only for the host’s friends, never fills more than four seats, and stops working when the crew closes; it is deleted within minutes after that. The page it opens on this website loads nothing about the crew or the person who sent it; only the CallMe app reads the code in it, once you are signed in. We keep each link’s code, which crew it opens, who made it and when.
  • House tables. CallMe keeps four tables open all the time: Common Room, Late Night, Quiet Study and Game Night. Nobody hosts them and they cost nothing to join. Otherwise they work like any other table: the people sitting there see your name and card photo and what you write in the table’s chat. What you write there is checked like any other message and deleted after 24 hours, as at any table.
  • Who’s around. Home shows roughly how many people are around right now: a number, never who they are, and below five it just says “a few”. Your name and photo appear there only to your friends, and only while you let friends see what you’re up to (Show friends what I’m up to, on your poster). Blocks and mutes are respected. People who are not your friends never see that you, by name, are around.

What other people can see

  • On a call, at a table or with another crew: your display name and the MeCard you were dealt — its photo, interests and words. Since 11 October 2026 your age and city are shown only to your friends, never to people you are not friends with.
  • People you have talked to in the last 48 hours, including people you sat with at a table or at your crew’s table, can see you (your name and the first photo on your card) in their Recent calls.
  • For 24 hours after a call, the person you spoke to may see one of your MeCards on their home screen. It disappears on its own.
  • Your social handle, if you added one, is shown only to your friends.
  • Your crew sees your name, your profile photos, whether you are on the crew’s page, whether you are ready and whether your CallMe is new enough for the crew room; friends see you under who’s around only as set out in Crews, house tables and who’s around above.
  • Your place on the friends map is seen only by the friends you share it with, only while sharing is on, as set out under "Friends map" above.
  • People you block or mute cannot be matched with you unless you undo it, and apart from your lists in Settings they do not appear in your app.

How long we keep things

  • Account, profile and MeCards — until you delete your account.
  • Card designs, their art and signed-in computers — as set out in The creator studio above.
  • Walks — until you delete the walk (in the app, under Your walks) or your account.
  • Friends map — the places you send, for up to 7 days, and never longer than sharing stays on: it switches itself off 24 hours after you turn it on, and the places go when it does.
  • Recent calls list in the app — visible for 48 hours.
  • What pairing has learned — while your account exists, until you switch Personalised pairing off (it is deleted at once), or until you ask us to stop it. Older lessons fade with each new call and only the strongest are kept. The note of which call taught what is kept with that call’s metadata, below.
  • Crews and crew invites — until you delete your account. Crew links stop working as soon as their crew closes and are deleted within minutes.
  • MeCard wall in the app — visible for 24 hours.
  • Call metadata — up to 12 months, so we can investigate reports.
  • Verification outcome — while your account exists; it is what keeps you verified.
  • Photo verified — which photo and when, until you change that photo or delete your account; the note of each try, for 35 days.
  • Calls — never recorded or transcribed, so there is no recording or transcript to keep.
  • Words the word check held or refused — until you delete your account. A ban or other decision made because of them is kept as set out below.
  • Evidence frames and appeal files — kept with the decision they relate to, for as long as that decision is on record.
  • Identity fingerprint — while your account exists, and after it closes, so that a ban cannot be escaped and an invite reward cannot be claimed twice by deleting an account.
  • Purchase records — kept after an account closes where we need them for tax, accounting and to stop a store transaction being credited twice.
  • Reports, the decisions made on them, and any ban — retained after an account closes, together with a minimal record of the closed account (its verification session references and any sanction on it, with no name, photo or profile), so that a banned user cannot simply come back.

Ground rules

  • 18+ only. CallMe is strictly for adults. Accounts found to belong to minors are removed.
  • We never sell your matching preferences, your match history or what pairing has learned about you, and we never share them with advertisers. Ads in CallMe are not targeted using your profile, preferences or who you matched with.
  • Blocking someone prevents them from being matched with you again.
  • Delete your account from Settings → Delete account & data, or, if you no longer have the app installed, by emailing us as explained at m3xi.com/delete-account. We erase your profile, MeCards, photos, preferences, walks, friends-map places, crews, match history and what pairing has learned within 30 days, except the safety and purchase records described above and, without your name, any card design other people hold copies of.
  • You must not create an account for anyone else, use another person's identity document, or attempt to defeat the verification check.

Advertising & consent

Ads are served by Google AdMob. In the UK and EEA you will see a consent form when the app first opens, provided by Google's User Messaging Platform, and can change your answer any time from Settings → Ad privacy options. On iOS you will also see Apple's tracking prompt; declining still leaves every feature available. You can also choose to watch a rewarded advert to earn an extra call. As above, your matching data is never used to target ads.

Subprocessors

Supabase (auth, database, storage, and CallMe's own word check — EU region) · Didit (identity document, liveness and face-match verification, and the Photo verified comparison you can ask for — EU) · Agora (carries live voice and video on some calls — calls are not recorded, transcribed or stored) · Hetzner (hosts CallMe's own media server and image check in Helsinki — EU; calls pass through memory only and are not recorded) · Sightengine (checks poster pictures, snapshots, card-design art and still frames from video calls carried by Agora — EU) · Resend (appeal emails — USA) · Google AdMob (advertising) · GIPHY (sticker and GIF search, and checking the rating of the GIFs on cards, by the GIF's own id only — USA) · OpenFreeMap (the map tiles for the friends map, from OpenStreetMap data, drawn in the app with MapLibre) · Open-Meteo (city search) · Google Play & Apple (purchase verification) · Vercel (hosting).

Earlier versions of this policy also listed Anthropic, whose AI (Claude) reviewed call transcripts, appeals and card designs, and ElevenLabs, for a synthesised host voice. CallMe no longer uses either, and nothing a member says or writes is sent to them.

Where a provider processes data outside the UK or EEA, we rely on Standard Contractual Clauses or the UK International Data Transfer Addendum.

↑ Back to all policies

Policy 03 · M3XI Spatial — property walkthroughs for agencies

M3XI Spatial

M3XI Spatial is an online tool for estate and letting agencies. Agencies scan or photograph a property, or build a walkthrough from a floor plan, and publish it for buyers and tenants to walk through in a browser. This policy covers two groups of people: agency users, who have an account, and visitors, who open a walkthrough and may send an enquiry.

If you have an account

  • Account. Your email address, from Google Sign-In or a one-time sign-in link, and an internal user ID.
  • Profile. Optionally a username, a symbol for your avatar, an Instagram handle and a website link, shown as the maker of walkthroughs you publish.
  • Your organisation and plan. The agency you belong to, your business plan, your build-credit balance and how credits were used.
  • What you upload. Property scans, 360° photographs, room photographs, floor plans, the property's address and postcode, room names, notes you place in a walkthrough, and your agency's branding: name, colours, logo, email, phone and website. Photographs keep whatever information your camera stored in them, such as when and where they were taken.
  • What you write. Descriptions and prompts you use to build a walkthrough.
  • What we measure. When a scan is attached we calculate facts about it — which way is up, where the floor and walls are, how much can be walked, and how much the camera did not capture — and store them with the scan.

If you visit a walkthrough

  • Opening a walkthrough needs no account. We keep anonymous counts of views, not who viewed.
  • Sending an enquiry. If you use Enquire, we store your name, the email address or phone number you give, your message, and which room you were in when you sent it. We deliver it to the agency that published the walkthrough: always to their dashboard, and by email where email delivery is set up.
  • The agency decides what to do with your enquiry and is responsible for how it uses your details. We store and deliver enquiries on the agency's behalf and do not use them for anything else.

Who can see what

Files for walkthroughs built in the Spatial Engine are kept in a public file store. Anyone who has the exact address of a file can open it, including while the walkthrough is still a draft. The address is long and not published anywhere, but it is not private. Do not upload anything to the Spatial Engine that you would not be comfortable being seen.

  • Property tours made with /capture/ use private storage. Photographs and scans are only reachable through short-lived links, and a tour is not public until the agency presses Go live.
  • A published walkthrough or tour can be opened by anyone with its link and may be listed publicly.
  • A draft is shared only through a private preview link, which the agency can replace to shut off old links.

Building a walkthrough with AI

When you build a walkthrough from photographs, a floor plan or a description, the material you give is sent to the services below to do that work, and the result is stored with us. Generated walkthroughs are labelled as AI-generated wherever they appear.

  • World Labs (USA) receives your photographs and description and generates the walkable space.
  • Groq (USA) reads floor plans and room photographs to work out the rooms and how they connect, and rewrites your description if you switch on prompt sharpening.
  • OpenStreetMap Nominatim looks up the postcode and house number you give, and Google Street View or Mapillary supplies a street-level photograph of the front of the property. We keep a copy of that photograph with the walkthrough.

How long we keep things

  • Walkthroughs, tours, scans and photographs — until the agency deletes them, or closes its account.
  • Enquiries — until the agency asks us to delete them or closes its account. Deleting a tour does not delete the enquiries it received, so an agency does not lose its leads by accident.
  • Account and plan records — while the account exists, and afterwards where we need them for tax and accounting.

Payments

Business plans are arranged directly with us. If you pay by card, the payment is processed by Stripe; we receive the payment's status, never your full card number.

Subprocessors

Supabase (auth, database, storage — EU region) · Vercel (hosting) · World Labs (walkthrough generation — USA) · Groq (floor-plan reading and prompt rewriting — USA) · OpenStreetMap Nominatim (address lookup) · Google Street View and Mapillary (street photographs) · Resend (enquiry emails — USA) · Stripe (card payments) · Google (sign-in).

↑ Back to all policies

Policy 04 · Products on hold

Cornelia and AutoUV

We have put these two products on hold to focus on CallMe and M3XI Spatial. Neither is being sold, downloaded or signed up to. This section says what we still hold and how to have it removed.

Cornelia (NoteTaker)

Cornelia was a study note-taking app. It was never released publicly on an app store. If you joined the Cornelia waitlist, we hold your email address as described under Website & waitlists. If you used an early test version, anything it recorded or generated stayed on your phone unless you switched on sync; any account details held for testers stay in our paused database until you ask us to delete them. Email support@m3xi.com and we will remove them.

AutoUV

AutoUV is a desktop add-on for Blender. It processed your meshes, textures and UVs entirely on your own computer and never uploaded your models or scenes to us.

  • Update checks. A copy that is already installed may still contact our website to compare its version against the latest release. Like any web request, this involves your IP address.
  • Licences and trials. If you started a trial or were issued a licence key, we hold the email address and key used to validate it. Card payments were processed by Stripe, which holds the payment record; we received the payment's status, never your card number.
  • Crash reports were only ever sent if you chose to send them, and never included your mesh data.

To have your AutoUV licence details removed, or to ask about a charge, email support@m3xi.com.

↑ Back to all policies

Applies to everything above

Your rights & the shared small print

Legal bases (UK / EU GDPR)

Contract — delivering the products and features you ask for, including sending an enquiry to the agency you chose. Legitimate interests — security, debugging, preventing abuse, improving our products and personalising one-to-one pairing in CallMe, balanced against your rights. Consent — where required, such as advertising choices, special-category data in CallMe, and optional diagnostics.

Where data lives

Our primary database region is the EU (Supabase, eu-west-1). Some providers named above process data in the UK, EEA or United States; where transfers leave your country we rely on appropriate safeguards including Standard Contractual Clauses. All traffic is encrypted in transit (HTTPS/TLS) and access follows least-privilege controls.

Your rights

Depending on your jurisdiction you can request access, correction, deletion, portability, restriction or objection, and you can complain to a regulator. UK users can contact the ICO at ico.org.uk. Send requests to support@m3xi.com from your registered email where possible — we respond to all of them. For an enquiry you sent through M3XI Spatial, you can also contact the agency directly.

Changes

When we update these policies we change the date at the top of this page; for material changes we notify you in the app or by email. See also our Terms.

↑ Back to all policies