The short version
- Murmur never connects to your bank. Everything in it is something you chose to enter.
- Your voice is transcribed on your device. Audio never leaves your phone.
- We don't sell your data, we don't show ads, and we don't run analytics or crash trackers today.
- You can export or permanently delete everything, yourself, from Settings, no email required.
Who we are
Murmur ("Murmur", "we", "us") is the voice-first expense tracker published under the developer name shown on its App Store listing. This policy explains what we collect when you use the Murmur iPhone app, the desktop app and the web dashboard (together, the "Service"), why, and what control you have.
What we collect
Account
Your email address, a display name if you set one, and which sign-in method you use (email, Apple or Google). Sign in with Apple can hide your real email; we work with the relay address Apple gives us.
What you record
The expenses and income you enter: amount, currency, merchant, category, date, payment method, an optional note, and, for recurring items, the rule that generates them. Budgets and your monthly income if you set them. Preferences such as language, currency and time zone.
Voice
Speech is turned into text on your device using Apple's speech recognition (or the Android equivalent). Only the resulting text is sent to our server to be interpreted into an expense; the audio never leaves your phone.
Receipts and paychecks you scan
If you photograph a receipt or a paycheck, the image is sent to our AI provider to extract the amounts and merchant, then discarded by us, we store the extracted transaction, not the image.
Ask Murmur
When you ask Murmur a question, your question and a summary of the relevant transactions are sent to our AI provider to compose the answer. Conversations are stored in your account so you can pick them up later, and you can delete them.
Devices and sync
The name and platform of each device you sign in on, and when it last synced, so you can see and manage them in Settings.
Subscription
If you subscribe to Murmur Plus, Apple processes the payment, we never see your card details. We receive a confirmation of your subscription status (plan, renewal date, trial state) so we can unlock Plus on all your devices.
What we don't do
- No bank or card linking, ever. Murmur has no access to your accounts.
- No selling, renting or sharing of your data for advertising.
- No advertising in the product.
- No usage analytics or crash reporting is collected today. If that changes, it will be opt-in and this policy will say so first.
Who processes data on our behalf
We use a small number of providers to run the Service. Each receives only what it needs.
| Provider | What for | What they receive |
|---|---|---|
| Supabase | Database, authentication, sync (hosted in the United States) | Your account and everything you record |
| Vercel | Hosting for the web dashboard and our API | Requests you make to the Service |
| OpenAI | Interpreting spoken entries, reading receipts, answering Ask Murmur | The text of what you said, scanned images, and the question plus transaction summary you ask about, never your name or email |
| Apple | Sign in with Apple, on-device speech recognition, App Store subscriptions | What Apple already holds as your platform provider; payment details stay with Apple |
| RevenueCat | Subscription management | Your account identifier and Apple's subscription receipt |
| Sign in with Google (if you choose it); merchant logos | Sign-in only if used; for logos, the merchant name alone (disclosed in the app under Settings → Privacy) | |
| Frankfurter (ECB rates) | Currency conversion for entries in another currency | Currency pair and date only, nothing about you |
How long we keep it
For as long as your account exists. Deleting your account (Settings → Privacy → Delete everything) permanently removes your transactions, budgets, categories, recurring rules, conversations, devices, profile and sign-in record; database backups are purged on their rolling schedule shortly after. You can export everything at any time as CSV, JSON or PDF.
Security
Data is encrypted in transit and at rest. Every table is protected by row-level security tied to your account, so the database itself refuses to hand one person's rows to another. Your Plus entitlement is written only by our server from the store's receipt.
Your rights
Wherever you live, you can access, correct, export and delete your data from within the app. If you are in the EU/EEA, UK, Switzerland, Brazil, California or another jurisdiction with data-protection rights, the same tools serve those rights; you may also contact us (below) and, if unresolved, your local supervisory authority. We process your data because you asked us to run the Service for you (performance of a contract) and, for security and abuse prevention, on our legitimate interests.
Children
Murmur is not directed to children under 13 (16 where that is the local age of consent), and we do not knowingly collect their data.
Changes
When this policy changes in a way that matters, we'll say so in the app before it takes effect and update the date at the top.
Contact
See the footer of this page for how to reach us about privacy.