Murmory Privacy Policy

Who is responsible

Data controller: Matthew Bilella, trading as Bilella Works, United Kingdom. For privacy questions and requests, email bilellaworks@gmail.com.

What this policy covers

This policy covers Murmory for Mac, iPhone and iPad, including App Store and TestFlight versions, optional iCloud sync, support and this website. The app has no Bilella Works account or Bilella Works server for your recording library.

Recordings and information on your device

Murmory saves microphone audio, recording dates, durations, titles, original transcripts, cleaned text, topic and client/company tags, and recording or processing issues in its local library. Text you provide for cleanup is also saved. Mac Meetings can save a separate application or system-audio recording, which may include other apps' sounds. iPhone and iPad record microphone audio only. The app does not save screen video.

Versions offering meeting briefs, actions, corrections, bookmarks and transcript timestamps save those results and edits with the entry. Source quotes and timing link notes to retained audio. A correction preserves the original transcript and audio. Client/topic pages combine saved notes and excerpts from your own library; copying a briefing places the text on your clipboard when you ask.

These records provide recording, playback, transcription, search, cleanup, organisation, retry and recovery. Appearance, shortcut, vocabulary, company-alias, model and sync preferences are stored locally. Your operating-system backup settings may include this data in a device backup.

On-device speech and text processing

Transcription and optional live transcription use Apple's on-device speech models. Text features such as cleanup, generated titles, meeting briefs, actions and tags use an available on-device text model. Apple Intelligence-compatible hardware, enabled settings and completed model downloads may be required for Apple's Foundation Models framework. Supported languages and feature availability vary by device and region. If an engine is unavailable, Murmory reports this and keeps the original recording and transcript available.

Versions offering Enhanced local processing can optionally download a third-party text model through Apple's asset delivery and run it on the device using MLX Swift. Model downloads do not send recordings, transcript text or prompts to the model publisher or a remote AI service. Apple operates the download infrastructure. Model preferences, downloaded files and device-check results stay on that device. Saved model name/version details can accompany results and sync with an entry. You can remove a downloaded model without deleting your library.

The app checks storage before offering a download and checks device compatibility, memory, power and temperature before local inference. It may pause processing or use Apple Intelligence when the current processing preference permits that fallback. The feature does not send model or hardware diagnostics to Bilella Works.

Vocabulary rules and company aliases help apply your preferred spellings and organise saved tags. Those preferences stay local, while words or labels included in saved entries fall under the library's normal sync and deletion rules. Generated text and tags can contain mistakes. You can review and edit them. Original audio and text remain available until you delete them. These features do not make decisions about you with legal or similarly significant effects.

Optional iCloud library

iCloud sync is optional. If enabled, Murmory saves recordings, transcripts, cleaned text, titles, dates, durations, tags, saved corrections, briefs, actions, bookmarks, transcript timing, model details and related entry or sync metadata in a private CloudKit database associated with your Apple Account. This lets your own devices sync the library. Audio can sync separately from text and is downloaded to another device when you request it.

Broader topic group names are generated separately on each device from the saved tags and their relationships. They are a local derived cache and may differ between devices; Murmory does not need to reprocess transcript text to regroup those tags. Apple operates iCloud under its own terms and privacy policy. Murmory does not ask for or receive your Apple Account password. Turning sync off stops future sync requests but does not delete information already uploaded or cancel a request already in progress. See Apple's Privacy Policy.

Clipboard, sharing and permissions

After inline dictation finishes, Murmory can place the resulting text on the clipboard. It checks whether the clipboard changed rather than reading its contents automatically. You may also copy text or use the system share sheet yourself. Clipboard contents may be available to other apps or Apple's Universal Clipboard according to your system settings; chosen share destinations handle received text under their own policies.

Microphone and speech permissions support recording and transcription. Mac meeting audio needs the relevant system recording permission. Optional Globe/Fn shortcut support uses Accessibility access to detect that key and to issue a paste command. These key events are not retained as a typing history or sent to Bilella Works. You can change permissions in system settings.

Retention and deletion

Delete moves a recording to Recently Deleted. Its audio and text remain available there until you restore it or choose Delete Permanently. Items do not expire automatically.

Permanent deletion removes the entry's original and cleaned text, title, tags, corrections, briefs, action states, bookmark labels, transcript timing, model details and recording issues. Audio used only by that entry and its download caches are removed from the device. The deletion is sent to iCloud and other devices as they successfully sync; an offline device or disabled sync delays that removal. Audio still used by another entry, including a conflict copy or another item in Recently Deleted, remains until that entry is also permanently deleted.

Small deletion markers and audio identifiers may remain to prevent old updates from restoring erased content; they do not contain transcript text or audio. Settings shows outstanding sync errors and lets you retry storage cleanup. Copies you exported, pasted into other apps or included in backups are managed separately. File removal cannot guarantee forensic erasure from storage hardware or provider backups.

Advertising, analytics and tracking

Murmory contains no advertising, third-party analytics SDK, tracking SDK or third-party crash-reporting SDK. The app does not sell recordings or use them for advertising. Apple may separately handle system diagnostics according to your Apple settings and its privacy terms.

TestFlight beta testing

If you install a beta through TestFlight, Apple automatically collects crash logs and usage information and shares it with the developer. This can include device and system details, sessions and installation information, and may include your name or email depending on the invitation. Feedback you choose to submit can include comments and screenshots.

Bilella Works uses this information to investigate faults and improve Murmory, not for marketing, and keeps any working copies only as long as needed to resolve the reported issue or a related legal obligation. Apple controls the records retained in TestFlight. Review screenshots and feedback before sending private material. Read TestFlight & Privacy for Apple's handling and retention.

If you contact support

Emailing support is optional. We receive your email address, any displayed name, your message and attachments or diagnostic details you choose to send. The app does not automatically email your recordings or transcripts. We use this information to answer you and investigate problems. Without a contact address or enough detail, we may not be able to reply or investigate.

Normal support correspondence is deleted from the support mailbox within 12 months after the last contact, following the existing Bilella Works support policy. Relevant information may be kept longer while an active complaint, security incident, legal claim or legal obligation requires it. Provider backups may take additional time to expire.

Our lawful bases

We rely on legitimate interests to answer support, investigate beta issues and maintain a secure website. We rely on legal obligation where records must be kept or disclosed by law. Support and beta information are not used for advertising. The app processes your recording library locally and uses the optional iCloud service you enable.

Service providers and this website

Apple provides optional iCloud and TestFlight services. Optional support email uses Gmail by Google. Cloudflare delivers and protects this website and receives technical request information such as your IP address, page request, browser headers and request time. The site has no visitor accounts, advertising or visitor analytics. We do not combine website requests with your recording library.

Read Google's Privacy Policy and Cloudflare's Privacy Policy. We may disclose support information to professional advisers or authorities where reasonably necessary to comply with law, defend rights or prevent harm. These providers operate internationally; where a restricted transfer applies, an applicable UK adequacy rule or other permitted safeguard is required. Contact us for details relevant to your request.

Your privacy rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of personal information held by Bilella Works. Contact bilellaworks@gmail.com; we may need enough information to verify your identity. These rights apply to support and beta information we hold. Apple manages its own records and your private iCloud service.

Right to object: you may object to processing based on legitimate interests by contacting the same address.

You can also complain to the UK Information Commissioner's Office through the ICO complaint page.

Changes to this policy

We will update this policy when the app or support service changes how information is handled. The effective date identifies this version.