matadoo ("the app") is a mobile client for accessing Odoo instances hosted on Matadoo, operated by Unitek Solusi ("Unitek", "we").
What we collect
The app stores your Odoo login email and password, encrypted, on your own device — this lets you stay signed in without re-entering your password every time you open the app. This data is never transmitted anywhere except directly to the Odoo server you configure the account for.
If you choose to attach a photo or document to an Odoo record (for example, an expense receipt), that file is sent directly to your Odoo instance, the same as it would be if you attached it through a web browser. The app does not retain a separate copy.
What we don't do
We do not collect analytics, track your usage, or show ads. If you turn notifications on, the notification token and the content of the notifications sent to you pass through Google's delivery service, as described below. Apart from that, we do not have access to your Odoo business data — it is stored and processed entirely within your own Odoo instance, which Unitek hosts but does not access outside of normal hosting/support operations already covered by your service agreement with Unitek.
App lock
You can optionally require a fingerprint/face unlock or a PIN to open matadoo. This is handled entirely by your device's operating system (for biometric) or stored encrypted on your device (for a PIN) — the app never receives or stores your actual fingerprint/face data, only a yes/no confirmation from the device's own authentication check.
Push notifications
If you allow notifications, your device generates a notification token — an identifier for this installation of the app, issued by Google's Firebase Cloud Messaging service. The app sends that token to the Odoo instance you are signed in to, so that instance can address notifications to your device. If you are signed in to more than one Odoo instance, each one receives its own copy of the token and can only send you notifications from that instance.
Notifications are delivered through Google's Firebase Cloud Messaging, which acts as our delivery provider. So that a notification is useful at a glance, its text may include details of the record it concerns — for example a document reference, a description, a customer or supplier name, or an amount. That text passes through Google's delivery infrastructure on its way to your device, and Google may hold it briefly if your device is offline. It is not used by Google for any other purpose, and the rest of your business data stays in your own Odoo instance.
Because notification text can be read from your lock screen, you may prefer to hide notification previews for this app in your device's notification settings.
Notifications are optional. You can decline the permission when asked, or turn notifications off later in your device settings, and every other part of the app continues to work. Your token is deleted when you sign out of that account, remove the account from the app, or uninstall the app.
Data deletion
Remove a saved account from within the app, or uninstall the app, to delete all locally stored credentials immediately. To request deletion of your business data within Odoo itself, contact your organization's Odoo administrator or Unitek support. Signing out or removing an account also deletes that account's notification token, so notifications from that Odoo instance stop immediately.
Contact
Questions about this policy: [email protected]