Privacy Policy

Last Updated: August 5, 2026

This Privacy Policy explains how Murmur ("Murmur," "we," "us," or "our") collects, uses, stores, and protects information when you use our mobile application and related services (the "Service"). Please read this policy carefully. By using Murmur, you agree to the practices described here.

1. Who We Are

Murmur is a voice-first personal memory application that allows users to record thoughts, generate transcripts and titles using artificial intelligence, search their memories, and receive reminders. Our goal is to help you capture fleeting thoughts so they are not lost.

2. Information We Collect

2.1 Account Information

• Name
• Email address
• Firebase user identifier
• Profile information provided through Google Sign-In, where applicable

2.2 User-Generated Content

• Voice recordings you create within the app
• Audio files associated with your recordings
• Transcripts generated from your recordings
• AI-generated titles for your memories
• Search embeddings created to enable memory search

2.3 Metadata

• Recording duration
• Creation timestamp
• Detected language
• App version
• Device information, where required for app functionality or security

2.4 Notification Data

We collect a Firebase Cloud Messaging token to deliver memory reminders and product notifications to your device.

3. How We Use Your Information

We use the information described above to:

• Provide, operate, and maintain the Service
• Process your voice recordings to generate transcripts, titles, and embeddings
• Detect the language of your recordings and translate content where required
• Enable search across your saved memories
• Send reminders and notifications you have enabled
• Authenticate your account and protect against unauthorized access
• Maintain, troubleshoot, and improve the Service
• Comply with legal obligations

4. AI Processing

Murmur uses artificial intelligence, provided through OpenAI's API, to process your voice recordings. This processing includes:

• Speech-to-text transcription
• Language detection
• Translation, where applicable
• Generation of AI titles for your memories
• Generation of semantic embeddings used to power search

Your recordings and related content are transmitted to our AI processing provider solely to perform these functions. We do not use your recordings, transcripts, or other personal content to train AI models unless we explicitly disclose this practice to you and obtain your consent beforehand.

AI-generated outputs, including transcripts and titles, may contain errors or inaccuracies. Please see our AI Transparency Policy for further detail on these limitations.

5. How We Store Your Information

• Audio recordings are stored using Cloudflare R2 object storage.
• Account data, transcripts, metadata, and embeddings are stored in a PostgreSQL database managed through Prisma ORM.
• Backend infrastructure is hosted on Amazon Web Services (AWS) EC2 instances.

6. Third-Party Services

We work with the following third-party service providers to operate Murmur. Each provider processes limited categories of data solely to perform the functions described below.

These providers are contractually or operationally restricted from using your data for purposes beyond providing services to Murmur, except as required by law.

7. Security

We take reasonable steps to protect your information, including:

• Encrypting data in transit using HTTPS/TLS
• Restricting access to storage systems to authorized systems and personnel
• Processing recordings automatically through our systems

We do not manually review your recordings during normal operations. However, please note that Murmur's current architecture is a client-server model and is not end-to-end encrypted. This means that, unlike some messaging applications, Murmur's systems are technically capable of accessing recordings in order to process and store them. We do not access recordings for purposes other than providing and maintaining the Service, except where necessary to investigate abuse, respond to legal obligations, or address security incidents. For more detail, see our Security and Data Protection Policy.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access the personal data we hold about you
• The right to correct inaccurate information
• The right to delete your account
• The right to delete individual memories
• The right to request an export of your data
• The right to withdraw consent for processing, where consent is the basis for processing
• The right to submit privacy-related inquiries or complaints

To exercise these rights, please contact us using the information in Section 11. See our Data Retention and Deletion Policy for details on deletion timelines.

9. International Users

9.1 India

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, to the extent applicable to our operations.

9.2 European Economic Area and United Kingdom

If you are located in the European Economic Area or the United Kingdom, we process your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK GDPR, where applicable. Our legal bases for processing include your consent, the performance of our contract with you, and our legitimate interests in operating and improving the Service.

9.3 California and Other US States

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know, delete, and correct your personal information, and the right to opt out of certain data practices. We do not sell personal information as defined under these laws.

10. Children's Privacy

Murmur is not directed to children and is not intended for use by individuals under the age of 18, or the applicable age of digital consent in your jurisdiction. Please see our Children's Privacy Policy for further information.

11. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: privacy@murmurapp.example

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by other reasonable means. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

← Back to Murmur