Privacy policy
Last updated 17 October 2026
Muesli records what you say while you read, turns it into notes, and keeps those notes for you. That makes privacy the whole product. This policy says what we collect, where it goes and how to get rid of it, in plain language.
What we collect
- Account: your email address and name from Sign in with Apple or Google, or the email you use for a sign-in link.
- Your library: the books, articles and papers you add, and the text of articles and papers you open in the reader.
- Your notes: intentions, rough notes, highlights, transcripts, enhanced notes, insights, actions and questions.
- Audio: the recording of each session, when recording is on.
- Context you give us: what you are working on and what you want to get better at, from onboarding and from what you say.
- Billing: your subscription status. Card details go to Stripe or Apple and never reach us.
Audio and transcripts
Transcription happens on your device first, so a session works offline and the transcript appears instantly. When the session ends, the audio uploads to your account and a hosted transcription provider produces a more accurate transcript for enhancement.
Audio is kept, in full, until you delete it. That is deliberate: you can replay any moment of a session and re-transcribe later as models improve. Delete a single recording from the note, or delete everything by deleting your account.
How your notes are used
Your transcript, rough notes and the source text are sent to Anthropic's Claude models to produce the enhanced note, insights, actions and answers. We send the minimum needed for that session. Nothing you write or say is used to train models, by us or by our processors, and no human reads your notes.
Who processes your data
We run on a small number of services. Each only receives what its job needs.
| Service | What it does for you | Where |
|---|---|---|
| Cloudflare | Hosting, the API, and storage of audio and files (R2) | EU and global edge |
| Neon | Database for your account, sources, notes, insights and actions | Frankfurt, Germany (EU) |
| Anthropic | Enhancement, insights, actions and answers (Claude models) | United States |
| A hosted transcription provider | Re-transcribes uploaded audio for enhancement | To be confirmed before launch |
| Apple | In-app purchase and subscription on iPhone | Global |
| RevenueCat | Subscription records across platforms | United States |
| Stripe | Card payments and tax on the web and Mac, as merchant of record | United States and EU |
| Resend | Transactional email, such as sign-in links and the morning recap | United States |
| Axiom | Server logs and traces (identifiers only) | EU |
| Sentry | Error and crash reports (identifiers only) | EU |
| OpenPanel | Product analytics (identifiers only) | EU |
Analytics, logs and errors
Our logs, traces, error reports and analytics never contain the text of your notes, transcripts, audio or source content. They carry identifiers (your user id, a note id), counts, durations and model names, and this is enforced in code. We measure which screens are used and how much each AI step costs, not what you read or said. IP addresses are not stored by our error reporting.
Where your data lives
The database is in Frankfurt, Germany. Audio and files are stored with Cloudflare. Some processors above operate in the United States; transfers from the UK and EU rely on the UK and EU standard contractual clauses or the EU-US Data Privacy Framework, as each provider offers.
Deleting your account
Open your account at app.muesli.ing/account and choose Delete account. This permanently removes your account, library, notes, insights, actions, transcripts and every audio recording, immediately. Billing records are kept by Stripe, Apple and RevenueCat for as long as tax and accounting law requires.
Your rights
If you are in the UK or the EU you have the right to access, correct, export and erase your data, to restrict or object to processing, and to complain to your data protection authority (the ICO in the UK). Export is built in: your notes are yours and can be copied out at any time. For anything else, email us.
Children
Muesli is not for children under 16 and we do not knowingly collect their data.
Changes
If this policy changes in a way that matters, we will email you before it takes effect. The date at the top is the date of the current version.
Contact
Email support@muesli.ing. Muesli is operated by [company name], [registered address].