MuninlistPrivacy policy
This policy explains what personal data Muninlist collects, why, who handles it, and what rights you have. We try to keep it short and plain. In short: we keep your data to run the app, we store it in the EU, and we do not use ads, analytics or tracking, or sell your data.
1. Who is responsible
The controller for your personal data is Jørgen Braseth, Otto Sogns vei 3a, 0681 Oslo, Norway. Contact: [email protected].
2. What we collect
- Account data: your email address, display name, sign-in method, and, if you choose "Sign in with Google", the avatar URL Google provides.
- Your content: lists, tasks, subtasks, notes, tags, due dates, photos you attach, and places you attach (including their coordinates).
- Activity history: a record of changes made to your lists (what changed, when, and by whom).
- Technical logs: when you use the app, our servers see your IP address, browser or device type (user agent) and request details. The API host keeps these request logs for as long as the host's log retention allows.
- Data on your device: the app keeps a local copy of your data so it works offline (SQLite or browser storage), and keeps your sign-in session in your browser's local storage. This is needed for the app to work.
We do not use advertising or tracking cookies, and we do not use analytics.
3. Why we use it, and on what basis
- To provide the service (storing and syncing your lists, signing you in, sending account emails such as sign-in confirmations and password resets). Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
- Security, abuse prevention and fixing faults (technical logs, bot protection on sign-in). Legal basis: our legitimate interest in keeping the service safe and working (Art. 6(1)(f)).
4. Who else handles your data
We use the following providers to run Muninlist. They process data on our behalf, except where noted.
| Provider | What for | Where |
|---|---|---|
| Supabase | Sign-in, database, file storage (photos), realtime sync | EU (Ireland) |
| Google Cloud | Hosting of our API (Cloud Run) and its logs | EU (Belgium) |
| Cloudflare | DNS, hosting of this website and the web app, and bot protection (Turnstile) on sign-in | Global network |
| Resend | Sending account emails (confirmation, password reset) | EU (Ireland); may involve processing in the US |
| Only if you choose "Sign in with Google": Google confirms your identity to us. Google acts under its own privacy policy. | Google's locations | |
| komoot Photon | Place search: the text you type and an approximate location (if you allow it) are sent through our server to komoot's Photon service. We do not link these searches to your identity. | Germany (komoot GmbH) |
Some providers, in particular Cloudflare's global network and Resend, may process data outside the EU/EEA. Where that happens, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
We do not sell your data and we do not share it with advertisers.
5. How long we keep it
- Your content is kept as long as your account exists.
- When you delete a task or list, it moves to "Recently deleted" and is kept for 90 days. After that it is permanently removed.
- When you delete your account (in the app under Me, Delete account; this arrives with the public launch), all your data is deleted.
- Our database provider keeps rotating backups (daily, retained for 7 days). Deleted data disappears from backups once they rotate out, within 7 days.
- Technical logs are kept for the retention period of the hosting provider.
6. Your rights
Under the GDPR you can ask us for access to your data, to correct it, to delete it, to restrict or object to its processing, and to receive a copy in a portable format. Write to [email protected]. The app will also offer export and account deletion directly. You can also complain to your data protection authority. In Norway this is Datatilsynet (datatilsynet.no).
7. AI agents (planned)
Muninlist plans to let you connect AI agents, such as Claude, to your lists. This only happens if you connect an agent yourself. The agent then receives the data of the lists you allow it to use, and nothing else. Actions it takes are labelled as such in the activity history. You can revoke access at any time. We will update this policy before this feature launches.
8. Children
Muninlist is not directed at children under 13 (or under 16 where local law requires), and we do not knowingly collect their data. If you believe a child has an account, contact us and we will delete it.
9. Security
Data travels over encrypted connections, photos are stored privately and served through short-lived links, and database access is restricted per user. No system is perfectly secure, but we work to protect your data.
10. Changes
We may update this policy. The date at the top shows when it last changed, and we will tell you about important changes in the app or by email.