Privacy Policy

Your music stays on your device. Every note Murmur generates is generated on your iPhone — your prompts, your style choices, and your saved tracks are never uploaded anywhere.

Murmur is a normal app in one respect: it collects anonymous usage analytics and crash reports, so a one-person developer can see which features get used and what is breaking. That data is about how the app is used, never about what you make. There is no advertising, no ad tracking, and nothing is sold or shared with data brokers.

Music generation runs entirely on your iPhone. The prompts you type, the moods you describe, the music you create, and the settings you choose are processed and stored on your device. We don’t collect, transmit, or store your prompts or generated audio on our servers. Deleting the app removes all of it.

Murmur sends anonymous product-analytics events to PostHog, hosted in the EU. This exists so we can answer questions like “how many people give up during the first-run model download?” and “does anyone ever finish the tutorial?”

Each event carries:

• An anonymous device identifier — a random string, not tied to your name, email, Apple ID, or any account. It’s stored in the iOS Keychain, which means it survives deleting and reinstalling the app. That’s deliberate: it stops one person’s reinstall from being counted as a dozen different people.
• A session identifier, regenerated every time the app launches.
• Device and build facts — device name and hardware model, iOS version, app version and build number, and whether the app is running in a simulator.
• The event itself — app opens; onboarding completion; the model download’s start, completion or failure (with duration and, on failure, a truncated error message); model load failures; Neural Engine compatibility fallbacks; storage fallbacks; paywall and upsell impressions; purchases, cancellations and restores; preset selections; generation and Live-session start and end; each step of the first-run tutorial; and taps on the demo sound bubbles during the download screen.

Events never carry your prompt text, your generated audio, your saved library, file names, your location, or your contacts.

As with any web request, PostHog’s servers see the IP address of the request, and the app identifies itself with a User-Agent header naming the app version, device and iOS version.

What it isn’t used for: advertising, ad targeting, audience building, or profiling. There is no ad SDK in Murmur, no IDFA or App Tracking Transparency prompt, and no cross-app or cross-site tracking. Analytics data is not sold, rented, or shared with data brokers.

Murmur uses Sentry for crash and error reporting, so crashes get fixed instead of going unnoticed. When the app crashes or hits an unhandled error, Sentry receives a diagnostic report: the error message and stack trace, the device model and iOS version, the app version, and the thread the error happened on.

Performance tracing is switched off — Murmur sends crashes and errors, not a trace of your session. Sentry never receives your audio, your prompts, your library, or your files.

• Purchases. When you buy Murmur, the purchase is processed by Apple and managed through our payments provider, RevenueCat, to deliver and restore your purchase. This includes the transaction and a non-personal app-user identifier. It isn’t linked to your name or email.
• Device verification. To confirm the app is a genuine, unmodified copy and to protect our AI models from abuse, the app uses Apple’s App Attest service, which provides a per-installation device identifier. It’s used only to authorize model downloads and prevent misuse.

We don’t require an account, and we don’t collect your name, email address, or contacts.

If you choose to dictate a prompt, Murmur uses your microphone and Apple’s speech recognition to convert your speech to text. We don’t store or upload your voice recordings. Note that Apple’s speech recognition may process the audio on Apple’s servers rather than on-device, under Apple’s own privacy policy — that step is Apple’s, not ours.

The AI models are large and are downloaded after install rather than shipped inside the app. The app asks a small server for a temporary signed download link, then downloads the model files from object storage over an encrypted connection. The servers involved see your IP address and standard request metadata, as any web server does. No prompt, no audio, and no library content is ever sent.

Murmur can notify you when a long generation or the first-run download finishes. These are local notifications, scheduled on your device — there is no push server and no push token sent anywhere.

There is currently no in-app toggle to turn off analytics or crash reporting. That’s an honest gap rather than a policy — it’s on the list to add. In the meantime, if you’d like your device’s analytics data deleted, email us and we’ll remove it.

• It doesn’t record, upload, or analyze any audio you generate or save.
• It doesn’t read your prompts on a server — prompts never leave the device.
• It doesn’t track your location. There is no location permission.
• It doesn’t access your contacts, calendar, health data, or browsing history.
• It contains no advertising SDKs and shows no ads.
• It doesn’t track you across other companies’ apps or websites.
• It doesn’t sell or rent your data.

• Apple — App Store, in-app purchases, App Attest, and speech recognition.
• RevenueCat — purchase management. Their privacy policy.
• PostHog — anonymous product analytics, EU-hosted. Their privacy policy.
• Sentry — crash and error reporting. Their privacy policy.
• Google Cloud and Cloudflare — hosting for the model-download service and model file storage.

Analytics events, crash reports, and purchase and device-verification records are kept only as long as needed to operate and improve the app and to meet legal and accounting requirements.

Murmur isn’t directed to children under 13 and doesn’t knowingly collect personal information from children.

Depending on your region, you may have rights to access or delete data associated with your purchase, your device identifier, or your analytics events. Contact us and we’ll assist.

We may update this policy; material changes will be reflected by the “Last updated” date above.

Questions? Email murmurapps@gmail.com.