--- title: "Privacy Policy — Mumr" description: "Mumr's Privacy Policy. Recording and transcription stay on your Mac. No Mumr account, no Mumr cloud. You pick the summary AI; your API keys live in your Keychain." canonical: "https://mumr.app/privacy" language: "en-GB" last-updated: "2026-08-24T22:29:18+01:00" source: "https://mumr.app — Markdown rendition of the HTML page at `canonical`" --- Legal # Privacy Policy Effective: 25 June 2026 · Last updated: 30 July 2026 App: Mumr for macOS · Contact: [hello@mumr.app](mailto:hello@mumr.app) The short version - Your recordings, transcripts, and summaries are created and stored **on your Mac**. We can't see them. - There is **no Mumr account and no Mumr server** — Mumr never uploads your audio, transcripts, or summaries to us. - You **choose the summary AI**. Apple Intelligence and the local CLI stay on your machine; if you pick a cloud AI (Anthropic, OpenAI, OpenRouter), your transcript goes to _that_ provider under your own account and key. - Mumr sends **anonymous, content-free usage analytics** (and, if enabled, anonymous crash reports). No audio, transcript, or summary text is ever included. You can opt out. - Your API keys are stored in the **macOS Keychain**, never on any Mumr server. ## 1) Who we are & what this covers Mumr is a free macOS meeting recorder. It records your microphone and system audio, transcribes the audio on your Mac, and produces a summary using an AI engine you choose. Mumr is made by an independent developer based in the United Kingdom ("Mumr", "we", "us"). This Privacy Policy explains what the Mumr macOS app and the **mumr.app** website do with data. Mumr operates **no servers of its own** for your content — there is no Mumr backend, no Mumr account, and nowhere for us to store your recordings. ## 2) Data stored on your Mac (not collected by us) Everything Mumr produces is written to a folder **you choose on first launch** (you can change it in Settings). For each recording, Mumr stores locally: - The audio files (your microphone and the system/meeting audio). - The transcript. - The summary and its action items. - Recording metadata (title, date, duration, language, the transcription engine and summary backend you used). Mumr also keeps app settings (chosen folder, transcription engine, summary backend, onboarding answers, permission states) in standard macOS preferences on your device. Because all of this lives on your Mac inside the app's sandbox or your chosen folder, **we have no access to it** and cannot retrieve it for you. ## 3) When data leaves your Mac — and to whom Recording and transcription always happen **entirely on your Mac**. Your **audio files never leave your device**. The only times data leaves your Mac are described below, and none of them go to a Mumr server. ### 3a) Summaries — you choose the AI The summary step is the one place a transcript can leave your Mac, and only if _you_ pick a cloud engine. Your options: - **Apple Intelligence** (Foundation Models, macOS 26+) — runs **on-device**. Nothing leaves your Mac. - **Local CLI** (your own `claude` / `codex` wrapper script) — runs as a **local subprocess** on your Mac. Mumr sends nothing over the network; what the script then does is governed by the tool you installed. - **Anthropic API** — your transcript text is sent to `api.anthropic.com` using **your own Anthropic key**, under your Anthropic account and their privacy terms. - **OpenAI API** — your transcript text is sent to `api.openai.com` using **your own OpenAI key**, under your OpenAI account and their privacy terms. - **OpenRouter API** — your transcript text is sent to `openrouter.ai` using **your own OpenRouter key**, under your OpenRouter account and their privacy terms. For the cloud options, only the **transcript text** (placed into the summarisation prompt) is sent — **never the audio file**. The request goes directly from your Mac to the provider you chose; it does not pass through any Mumr system. You are responsible for the account, key, costs, and data handling of whichever provider you select. ### 3b) Transcription model downloads If you choose the WhisperKit or Parakeet transcription engines, Mumr downloads the necessary machine-learning model files once (from Hugging Face) and caches them on your Mac. This transfers **only the model files** — never your audio, transcript, or any personal data. Apple Speech is built into macOS and needs no download. ## 4) Usage analytics (PostHog) The Mumr app sends **anonymous, content-free usage analytics** via [PostHog](https://posthog.com) to help us understand which features are used and where the app can improve. PostHog data is hosted in the **EU**. - Events are **structural only** — for example: app launched, onboarding step completed, a transcription engine or summary backend selected, a recording started or finished, a model downloaded, or an error category. Numeric values are bucketed. - Events are tied to a **random, anonymous identifier** — not your name, email, or any account (Mumr has no accounts). - We do **not** send audio, transcripts, summaries, meeting titles, file names, calendar details, or any free-text you type. No advertising or cross-app tracking is performed. If you prefer not to be included in analytics, open Mumr's **Settings → General → Privacy** and turn off **Share anonymous usage data**. Turning it off stops reporting immediately; turning it back on takes effect the next time you start Mumr. ## 5) Crash reports (Sentry) To diagnose and fix crashes, Mumr's release builds may send **anonymous crash reports** via [Sentry](https://sentry.io). A crash report contains a stack trace, the app version, your macOS version, and basic device context, tied only to an **anonymous per-install identifier**. - Crash reports **never** include your audio, transcripts, summaries, file paths under your home folder, or calendar content. - Debug builds do not send crash reports at all. ## 6) Website analytics & session replay (mumr.app) The mumr.app website (including this page) uses PostHog to count page views and to record **anonymous session replays** — a reconstruction of how a visitor moved through these public marketing pages, so we can see where the site confuses people. A replay can capture page content, clicks, scrolling and mouse movement **on these public web pages only**. All form inputs are masked, replays are not used to identify you, and they are deleted after **30 days**. We honour your browser's **"Do Not Track"** setting: with DNT enabled, neither page views nor replays are recorded. Website analytics are hosted in the **EU**. **This applies to the website, not the app.** Session replay does not exist in Mumr for Mac. It cannot see your recordings, transcripts, or summaries — those never leave your Mac in the first place (see sections 2 and 3). ## 7) Your API keys If you add an Anthropic, OpenAI, or OpenRouter key, Mumr stores it in the **macOS Keychain** — never in plain text on disk and **never on any Mumr server**. Keys are used only to call the provider you selected. Because the Keychain item is marked synchronisable, your keys may sync across your own Macs through **iCloud Keychain** if you have it enabled; that sync is handled by Apple under Apple's policies, not by us. You can remove a key at any time in Mumr's Settings. ## 8) Permissions Mumr requests Depending on the features you use, macOS will ask your permission for: - **Microphone** — to record your voice. - **System audio capture** — to record the other side of a meeting. - **Speech recognition** — for on-device transcription (Apple Speech). - **Calendar** — optional, only if you enable automatic recording of scheduled meetings; calendar data is read on your Mac and is never uploaded to us. - **Folder access** — to save recordings to the folder you choose. You can review or revoke any of these at any time in **System Settings → Privacy & Security**. ## 9) No Mumr accounts, no Mumr servers There is no sign-up, no login, and no Mumr-operated cloud. We do not collect your name, email, contacts, photos, precise location, or biometric data. We do not sell data, and we do not use your data for advertising. ## 10) Backups & iCloud We do not upload your content. However, your Mac may back up app data depending on your own settings — for example Time Machine, or iCloud Keychain for stored API keys. Those mechanisms are controlled by you and governed by Apple's policies, not by Mumr. ## 11) Data retention - **Your content** (audio, transcripts, summaries) stays on your Mac until you delete it in the app, delete the files, or remove the app. - **Anonymous analytics and crash data** are retained by PostHog / Sentry per their standard retention policies and contain no personal content. ## 12) Your choices & controls - Delete any recording (and its transcript, summary, and audio) inside Mumr, or delete the files directly. - Remove stored API keys in Settings. - Revoke microphone, system-audio, speech, or calendar permissions in System Settings. - Turn off analytics in Settings → General → Privacy. - Remove the app to delete its locally stored settings. Because we don't receive your content, a request to "export everything you hold about me" generally won't return anything — your data is on your device, not with us. ## 13) Security Mumr runs inside the macOS App Sandbox with a hardened runtime, stores API keys in the Keychain, and uses HTTPS for any network call. No method is 100% secure; you are responsible for securing your Mac, its login, and your backups. ## 14) Children Mumr is a general-purpose productivity tool intended for adults and is not directed at children under 13 (or the minimum age in your region). We do not knowingly collect personal data from children. ## 15) International users Mumr is operated from the United Kingdom. Because we do not collect or store your content on servers, we generally do not transfer that content internationally. If you choose a cloud summary backend, your transcript is processed by that provider in whatever region their service operates. Anonymous analytics are processed in the EU. ## 16) Third-party services Mumr relies on these third parties. Each has its own privacy policy: - **Apple** — App Store distribution, macOS frameworks, on-device Apple Intelligence, and iCloud Keychain (if you enable it). - **Anthropic**, **OpenAI**, **OpenRouter** — only if you choose that cloud summary backend and supply your own key. Your transcript is processed under your account with that provider. - **PostHog** (EU) — anonymous, content-free usage analytics, plus website session replay (public marketing pages only, see section 6). - **Sentry** — anonymous crash reports (release builds), if enabled. - **Hugging Face** — one-time download of transcription model files; no user content is sent. ## 17) Changes to this policy We may update this policy from time to time. If a change is material, we'll update the "Last updated" date above and, where feasible, note it on the website or in the app. ## 18) Contact Questions about privacy? Email [hello@mumr.app](mailto:hello@mumr.app).