Legal

Privacy Policy

Effective: 25 June 2026 · Last updated: 25 June 2026
App: Mumr for macOS · Contact: [email protected]

1) Who we are & what this covers

Mumr is a free macOS meeting recorder. It records your microphone and system audio, transcribes the audio on your Mac, and produces a summary using an AI engine you choose. Mumr is made by an independent developer based in the United Kingdom ("Mumr", "we", "us").

This Privacy Policy explains what the Mumr macOS app and the mumr.app website do with data. Mumr operates no servers of its own for your content — there is no Mumr backend, no Mumr account, and nowhere for us to store your recordings.

2) Data stored on your Mac (not collected by us)

Everything Mumr produces is written to a folder you choose on first launch (you can change it in Settings). For each recording, Mumr stores locally:

• The audio files (your microphone and the system/meeting audio).
• The transcript.
• The summary and its action items.
• Recording metadata (title, date, duration, language, the transcription engine and summary backend you used).

Mumr also keeps app settings (chosen folder, transcription engine, summary backend, onboarding answers, permission states) in standard macOS preferences on your device. Because all of this lives on your Mac inside the app's sandbox or your chosen folder, we have no access to it and cannot retrieve it for you.

3) When data leaves your Mac — and to whom

Recording and transcription always happen entirely on your Mac. Your audio files never leave your device. The only times data leaves your Mac are described below, and none of them go to a Mumr server.

3a) Summaries — you choose the AI

The summary step is the one place a transcript can leave your Mac, and only if you pick a cloud engine. Your options:

• Apple Intelligence (Foundation Models, macOS 26+) — runs on-device. Nothing leaves your Mac.
• Local CLI (your own claude / codex wrapper script) — runs as a local subprocess on your Mac. Mumr sends nothing over the network; what the script then does is governed by the tool you installed.
• Anthropic API — your transcript text is sent to api.anthropic.com using your own Anthropic key, under your Anthropic account and their privacy terms.
• OpenAI API — your transcript text is sent to api.openai.com using your own OpenAI key, under your OpenAI account and their privacy terms.
• OpenRouter API — your transcript text is sent to openrouter.ai using your own OpenRouter key, under your OpenRouter account and their privacy terms.

For the cloud options, only the transcript text (placed into the summarisation prompt) is sent — never the audio file. The request goes directly from your Mac to the provider you chose; it does not pass through any Mumr system. You are responsible for the account, key, costs, and data handling of whichever provider you select.

3b) Transcription model downloads

If you choose the WhisperKit or Parakeet transcription engines, Mumr downloads the necessary machine-learning model files once (from Hugging Face) and caches them on your Mac. This transfers only the model files — never your audio, transcript, or any personal data. Apple Speech is built into macOS and needs no download.

4) Usage analytics (PostHog)

The Mumr app sends anonymous, content-free usage analytics via PostHog to help us understand which features are used and where the app can improve. PostHog data is hosted in the EU.

• Events are structural only — for example: app launched, onboarding step completed, a transcription engine or summary backend selected, a recording started or finished, a model downloaded, or an error category. Numeric values are bucketed.
• Events are tied to a random, anonymous identifier — not your name, email, or any account (Mumr has no accounts).
• We do not send audio, transcripts, summaries, meeting titles, file names, calendar details, or any free-text you type. No advertising or cross-app tracking is performed.

If you prefer not to be included in analytics, you can opt out — email [email protected] and we'll help. (An in-app opt-out control is on the roadmap.)

5) Crash reports (Sentry)

To diagnose and fix crashes, Mumr's release builds may send anonymous crash reports via Sentry. A crash report contains a stack trace, the app version, your macOS version, and basic device context, tied only to an anonymous per-install identifier.

• Crash reports never include your audio, transcripts, summaries, file paths under your home folder, or calendar content.
• Debug builds do not send crash reports at all.

6) Website analytics (mumr.app)

The mumr.app website (including this page) uses PostHog for page-view counts only — no autocapture, no click tracking, no session recording, and we honour your browser's "Do Not Track" setting. We use this solely to understand how many people visit.

7) Your API keys

If you add an Anthropic, OpenAI, or OpenRouter key, Mumr stores it in the macOS Keychain — never in plain text on disk and never on any Mumr server. Keys are used only to call the provider you selected. Because the Keychain item is marked synchronisable, your keys may sync across your own Macs through iCloud Keychain if you have it enabled; that sync is handled by Apple under Apple's policies, not by us. You can remove a key at any time in Mumr's Settings.

8) Permissions Mumr requests

Depending on the features you use, macOS will ask your permission for:

• Microphone — to record your voice.
• System audio capture — to record the other side of a meeting.
• Speech recognition — for on-device transcription (Apple Speech).
• Calendar — optional, only if you enable automatic recording of scheduled meetings; calendar data is read on your Mac and is never uploaded to us.
• Folder access — to save recordings to the folder you choose.

You can review or revoke any of these at any time in System Settings → Privacy & Security.

9) No Mumr accounts, no Mumr servers

There is no sign-up, no login, and no Mumr-operated cloud. We do not collect your name, email, contacts, photos, precise location, or biometric data. We do not sell data, and we do not use your data for advertising.

10) Backups & iCloud

We do not upload your content. However, your Mac may back up app data depending on your own settings — for example Time Machine, or iCloud Keychain for stored API keys. Those mechanisms are controlled by you and governed by Apple's policies, not by Mumr.

11) Data retention

• Your content (audio, transcripts, summaries) stays on your Mac until you delete it in the app, delete the files, or remove the app.
• Anonymous analytics and crash data are retained by PostHog / Sentry per their standard retention policies and contain no personal content.

12) Your choices & controls

• Delete any recording (and its transcript, summary, and audio) inside Mumr, or delete the files directly.
• Remove stored API keys in Settings.
• Revoke microphone, system-audio, speech, or calendar permissions in System Settings.
• Opt out of analytics by emailing [email protected].
• Remove the app to delete its locally stored settings.

Because we don't receive your content, a request to "export everything you hold about me" generally won't return anything — your data is on your device, not with us.

13) Security

Mumr runs inside the macOS App Sandbox with a hardened runtime, stores API keys in the Keychain, and uses HTTPS for any network call. No method is 100% secure; you are responsible for securing your Mac, its login, and your backups.

14) Children

Mumr is a general-purpose productivity tool intended for adults and is not directed at children under 13 (or the minimum age in your region). We do not knowingly collect personal data from children.

15) International users

Mumr is operated from the United Kingdom. Because we do not collect or store your content on servers, we generally do not transfer that content internationally. If you choose a cloud summary backend, your transcript is processed by that provider in whatever region their service operates. Anonymous analytics are processed in the EU.

16) Third-party services

Mumr relies on these third parties. Each has its own privacy policy:

• Apple — App Store distribution, macOS frameworks, on-device Apple Intelligence, and iCloud Keychain (if you enable it).
• Anthropic, OpenAI, OpenRouter — only if you choose that cloud summary backend and supply your own key. Your transcript is processed under your account with that provider.
• PostHog (EU) — anonymous, content-free usage analytics.
• Sentry — anonymous crash reports (release builds), if enabled.
• Hugging Face — one-time download of transcription model files; no user content is sent.

17) Changes to this policy

We may update this policy from time to time. If a change is material, we'll update the "Last updated" date above and, where feasible, note it on the website or in the app.

18) Contact

Questions about privacy? Email [email protected].