Matte keeps the core display workflow on your Mac

Matte is a local-first macOS canvas installation app for museums and galleries. This policy explains what permissions Matte may request, what it does not track, and when a user-selected assistant provider is involved.

At a glance

The short version for operators, reviewers, and App Store Connect.

App

Matte for macOS

Bundle ID

ai.lobsterwork.aurora-gallery

Contact

gallery-support@lobsterwork.ai

+18015551234

Core principles

How Matte handles privacy in the shipped app

Local-first by default

Core canvases, bundled artwork browsing, and display playback are designed to run on your Mac without a required cloud account.

No tracking or advertising

Matte does not position itself as an analytics or ad product and does not ship App Store tracking behavior for the core app.

Opt-in assistant processing only

OpenAI account use is optional, and on-device local-model support is intended for bounded assistant tasks like collection search and add-piece flows.

Permissions only for chosen workflows

Matte requests Photos or user-selected file access only when you choose the matching import or save action.

Permissions Matte may request

Permissions are tied to the exact import or save action you choose.

Photos

Used only when you choose artwork references from your photo library.

Photos Add

Used only when you ask Matte to save rendered captures or exports back to Photos.

Files and folders you choose

Used only for the exact files or folders you explicitly pick while importing or exporting artwork.

No camera or microphone

The shipped image-only Matte app does not rely on camera or microphone permissions for core operation.

No tracking and optional provider use

Matte is not an ad-tech product, and the assistant path is opt-in.

No advertising identifiers are required for the App Store release path.
Core display playback works without analytics or login.
The public support site exists to document permissions, privacy, and support contact in plain language.

Optional assistant processing

If you connect an OpenAI account and use assistant features, the prompt and the minimum context needed for that assistant turn are sent to OpenAI. If you choose the on-device local model in a supported build, the bounded collection workflow runs on the Mac instead.