Privacy Policy
Last updated: June 11, 2026
Murmur ("we", "us", or "our") respects your privacy. This policy explains what information we collect, how we use it, who we share it with, and your rights regarding your voice recordings and journal entries.
Information We Collect
- Account information (email, Apple ID or Google ID)
- Voice recordings and transcriptions
- AI-generated diary content, emotion analysis, and tags
- Device information (device model, OS version, app version)
- Usage data (app usage patterns, subscription status)
How We Collect Your Information
- When you sign in with Apple or Google, we receive account identifiers needed to create and secure your account.
- When you record a voice journal, you create audio data that is uploaded for transcription and diary processing.
- When AI processing completes, we store the transcript, organized diary text, title, tags, emotion label, and emotion intensity in your account.
- When you purchase or restore a subscription, RevenueCat and the app store provide subscription status needed to unlock paid features.
- When you use the app, we may process basic device, app version, and usage information needed to operate, secure, and improve the service.
How We Use Your Information
- To transcribe your voice recordings using AI
- To organize and analyze your diary entries
- To provide emotion analysis and mood tracking
- To manage your account and subscriptions
- To improve our services
Voice and Audio Data
When you record a voice entry, your audio data is processed as follows:
- Your audio recording is securely uploaded to Firebase Storage (operated by Google)
- Your audio data is sent to OpenAI's servers for transcription using OpenAI's speech-to-text API
- The transcribed text is sent to OpenAI's servers for content organization, title generation, tag extraction, and emotion analysis
- The processed results (transcript, title, tags, emotion) are stored in your Firestore account
- Your data is accessible only to you through your authenticated account
- All data transfers use industry-standard encryption (TLS/SSL)
Before your first recording, the app will ask for your explicit consent to send data to OpenAI for processing. You can decline, but the core transcription and analysis features require this data processing to function.
Third-Party AI Processing and Consent
Murmur uses third-party artificial intelligence services only after you provide in-app consent. Before any audio recording or transcript is shared with an AI provider, the app displays a consent notice that identifies the data sent, the recipients, and the processing purposes.
If you tap "I Agree," Murmur may send the following personal data for AI processing:
- Your audio recordings
- Transcribed text generated from your recordings
- AI-generated diary content, titles, tags, emotion labels, and emotion intensity
The recipients and purposes are:
- OpenAI, LLC — speech transcription, diary organization, title generation, tag generation, and emotion analysis
- Firebase / Google Cloud — authentication, cloud storage, database storage, cloud functions, and secure processing infrastructure
If you do not consent, Murmur will not upload your recording for AI transcription or analysis, and recording-based AI journal features will not be available.
Third-Party Data Sharing
We share your data with the following third-party services to provide the app's functionality:
- OpenAI (San Francisco, USA) — We send your audio recordings to OpenAI for transcription, and the transcribed text for content analysis and emotion detection. OpenAI processes this data according to their API Data Usage Policy. Data sent via the API is not used to train OpenAI models.
- Firebase / Google Cloud — Authentication, data storage (Firestore), file storage (Cloud Storage), and cloud functions hosting
- RevenueCat — Subscription and purchase management
- Apple / Google — Authentication (Sign in with Apple / Google) and payment processing
We require these providers to process personal data only for the purposes needed to provide Murmur's features and to protect the data using security and privacy protections that are the same as or equivalent to those described in this policy.
User Consent
Murmur obtains your explicit consent before processing your data with third-party AI services:
- Before your first recording, a consent screen clearly explains that your audio recordings, transcripts, and AI-generated diary data may be sent to OpenAI and Firebase / Google Cloud
- The consent screen identifies OpenAI, LLC and Firebase / Google Cloud as recipients and explains the purposes of transcription, diary organization, title and tag generation, emotion analysis, storage, and cloud processing
- You can decline this consent, in which case no audio data will be recorded or sent
- By tapping "I Agree," you acknowledge and consent to the data processing described in this policy
- You can withdraw consent at any time by deleting your account in the app's Profile settings
Data Security
We implement industry-standard security measures including:
- Encrypted data transmission (TLS/SSL)
- Secure cloud storage with Firebase
- Authentication-based access controls
- Firestore security rules ensuring users can only access their own data
Your Rights
You have the right to:
- Access your recordings, transcriptions, and diary entries
- Delete your recordings and diary entries at any time
- Delete your account and all associated data
- Export your data
Data Retention
Your data is retained as long as your account is active. When you delete a diary entry, both the diary content and associated audio recording are permanently removed. When you delete your account, all associated data is deleted.
Children's Privacy
Murmur is not intended for children under 13. We do not knowingly collect information from children under 13.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via the app or email.
Contact Us
If you have questions about this Privacy Policy, contact us at: teampulse129@gmail.com