Munu Privacy Policy

1. What stays on your computer

Munu's memory is a folder of notes on your own computer. To keep your computers and your phone in step, Munu syncs these notes through our server. They are encrypted on your device before they leave it, and we cannot read them (see section 3). Your microphone is used for wake-word detection on your device. Hand-control camera frames are processed on your device and are not sent to us. Munu has no analytics or advertising tools built in.

One exception we are still checking: Google's MediaPipe library, which Munu uses for hand tracking, includes code that can send basic usage statistics to Google. We have not yet confirmed whether it does so in Munu. Munu itself has no analytics: it sends Moon Labs only what our account service needs, described in section 3.

2. The Munu phone app

The Munu app for iPhone and Android handles your data like this:

• Voice. When you talk to Munu, your audio is streamed through our server to Deepgram, which turns it into text. Our server only counts the seconds. It does not store the audio or the text.
• Chat, photos and files. The text you type and the photos and files you send go from your phone directly to OpenRouter and the AI models it routes to. We do not store them.
• Location, contacts and calendar. The app reads these on your phone only when you ask Munu something that needs them, and only with the permission you gave in your phone's settings. The result goes to OpenRouter as part of that one request. We never store it.
• Notifications. To send you reminders and Munu Link notifications, we store a push notification token from Firebase Cloud Messaging (Android) or Apple Push Notification service (iPhone).
• Purchases. Munu Pro and top-ups are bought through the App Store or Google Play. We and RevenueCat store your RevenueCat app user id and your purchase history. Apple and Google keep their own records.

The phone app has no analytics tools, no crash reporting tools and no advertising, and it does not use your advertising ID.

3. What our account service stores

When you sign in on a computer or a phone, our server (hosted on Fly.io in Germany) stores:

• your email address, and a one-way hash of it;
• a one-way hash of a device identifier, so one trial is given per device;
• the sign-in code we emailed you (stored hashed, deleted after use or expiry);
• hashed session tokens that keep you signed in;
• the IP address and time of sign-in code requests, used to limit abuse. They are deleted after the daily limit window ends, and when you delete your account;
• your plan record: plan type, status, renewal date, your RevenueCat app user id, your purchase history (what you bought, when, and the store transaction id), and the time you accepted the terms;
• the access key for your included AI use, stored encrypted. It is turned off when your plan ends and deleted if the plan is refunded;
• how many seconds of listening and how many points of AI you used, per day, to apply your plan's limits;
• your routines and your usage settings;
• the push notification token of your phone;
• your synced notes, end-to-end encrypted. They are encrypted on your device and we cannot read them;
• for Munu Link, which pairs your phone with your computers: the names of the paired devices and their local network or Tailscale addresses.

When you use the included voice, your live audio passes through our server on its way to Deepgram, and the text Deepgram makes from it passes back the same way. Our server only counts the seconds. It does not store the audio or the text and does not write either into its logs. Our server does not see your conversations with the AI: those requests go from your device directly to OpenRouter. All data is encrypted in transit (HTTPS).

4. Third parties

These services handle data when you use the matching feature:

• OpenRouter (openrouter.ai) and the AI model providers it routes to receive your requests to the assistant, including any text, photos, files or screen images you ask Munu to look at, and any location, contact or calendar details a request needs. They apply their own privacy policies.
• Deepgram turns your voice audio into text, through our server (see section 3). With your own Deepgram key, the audio goes straight from your device to your Deepgram account. The voice Munu speaks with is made through OpenRouter by the voice model in your settings (from Microsoft or Deepgram, depending on the voice you pick), from the text of Munu's reply.
• Apple (App Store) and Google (Google Play) take the payment for Munu Pro and top-ups, handle tax, and keep their own purchase records under their own privacy policies.
• RevenueCat (revenuecat.com) processes purchase records for us: your RevenueCat app user id and your purchase history.
• Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iPhone) deliver notifications to your phone.
• Resend delivers the sign-in code email.
• Fly.io hosts our account service.
• Composio (composio.dev), only if you connect apps such as Gmail or Google Calendar. You use Composio under your own account and its terms. Composio and the connected apps see the requests Munu makes for you, and what Munu reads from them is sent to the AI models. Munu stores only your Composio sign-in, in your device's keychain. You can disconnect in Settings at any time.

We do not sell your data and we do not use it for advertising.

5. How long we keep it

Account records are kept while your account exists. Sign-in codes are deleted after use or expiry. Records of sign-in code requests (IP address and time) are deleted after the daily limit window ends. When you delete your account, we delete your sign-in, sessions, linked devices, push tokens, AI access keys, synced notes, routines, usage settings and sign-in code requests. We keep purchase records (what was bought, when, and the store transaction id) without your email, as long as tax law requires, and a one-way hash of your email and device to stop a second free trial. See how to delete your account.

6. Your rights

You can ask us for a copy of your data, a correction, or deletion by writing to munetic.studiogmail.com. We answer within 30 days. If you live in the EU, UK or another place with data protection law, you have the rights that law gives you, including the right to complain to your local authority.

7. Children

Munu is not for anyone under 18. If you think a child has made an account, tell us and we will delete it.

8. Changes and contact

When this policy changes, the date above changes with it. Moon Labs LLC is based in Yerevan, Armenia. Contact: munetic.studiogmail.com. See also the terms of service.