Privacy Policy

Effective date: 2026-05-13

Murmura ("we", "us") is operated by Datachain Consulting Pty Ltd. This policy explains what data Murmura collects, what we do with it, and what we explicitly do not do.

Summary

Your documents stay yours. Murmura does not upload your documents to our servers, does not train on them, and does not share them with anyone. Reading progress and bookmarks live in your private iCloud account. The narration service receives only the text needed to generate the audio you are about to hear, and we discard that text the moment the request completes — we keep only an irreversible cryptographic hash so that the next time you ask for the same passage in the same voice, we can deliver it without re-billing the synthesis. We use Azure Application Insights to count anonymous product events so we can fix bugs and prioritize features; this telemetry never includes document text, document titles, or your identity. We do not sell or share your data with advertisers.

What we collect

Category	Where it lives	Retention
Documents you import (file, parsed text, reading position, bookmarks, highlights)	Your private iCloud (Apple CloudKit)	Until you delete it
Narration text passages	Sent to Azure Speech for synthesis; held in our backend's RAM only for the duration of the request	Discarded immediately
Narration cache (MP3 + word-timing JSON) keyed by `sha256(provider:voice:rate:text)`	Azure Blob (East US)	180 days since last access
Anonymous device identifier + Apple App Attest attestation	Azure Postgres	Until your device requests deletion
Subscription status (Apple anonymous transaction id)	Azure Postgres	While active + 30 days
Anonymous event names, device model, OS version, app version, country	Azure Application Insights	30 days
Crash stack traces (redacted of user content)	Azure Application Insights	30 days

What we explicitly do NOT collect

Your name, email, phone number, or contact information.
Your Apple ID or iCloud identifier.
The titles of your documents.
The text content of your documents (beyond the transient slice needed to synthesize narration).
Your location.
Your contacts, photos, or any other system data.
Anything from third-party advertising or analytics SDKs (we use none).

Sub-processors

Party	What they receive	Why
Microsoft Azure (Speech)	Plain text passages to synthesize	Required for narration
Microsoft Azure (Storage, Postgres, App Insights, Container Apps)	Data per the table above	Hosts our infrastructure
Apple	Standard iCloud / StoreKit traffic	Required for the app to function

We do not share data with advertisers, data brokers, or any other third party.

Your rights

Delete everything: Settings → Account → Delete My Data.
Export: Settings → Account → Export Data (returns JSON).
Opt out of analytics: Settings → Privacy → Analytics off.
Contact us: privacy@murmura.app. We respond within 30 days.

Children

Murmura is not directed at children under 13.

Changes

If we change this policy in any material way we will notify you in the app.