Privacy policy

This policy explains what the Muteloop app does with information. It covers the app on Android and iPhone.

The short version

Muteloop reads a group chat file that you give it and makes a short digest on your phone. In this version the chat is not uploaded anywhere: there is no server that receives your chats, names, dates or digests. There is no account, no ads, and nothing in the app tracks how you use it.

The only information that leaves the phone because of the app is what is needed to run subscriptions: the purchase records that Apple or Google share with RevenueCat, the service we use to check which plan is active. Anything else leaves the phone only when you send it yourself, for example a card you share, a date you add to your calendar, or a file you export.

Who we are

The app is published by the developer named in the details at the top of this page. For any question about privacy, or to use your rights, write to the email address given there.

Chats you import

You export a group chat from your messaging app and share the file to Muteloop, or choose the file in the app. The app reads it once on the phone, builds the digest, and keeps the digest and the messages it needs to show where each line came from. A chat file you share is kept in a temporary tray on the phone for up to 24 hours. Voice notes from an export are kept on the phone for up to 7 days so that you can play them.

The digest is made on your phone by the app itself. Nothing from the chat is sent to us or to anyone else. Chats contain other people's names, phone numbers and messages; you decide which chats to import, and you are responsible for having a good reason to do so.

Digests are deleted automatically after 90 days unless you choose 30 or 90 days in Settings → Privacy and data.

What stays on your phone

• your name, the names of your children and nicknames, and your watch words, which the app uses to put your things first;
• the groups, the digests, the dates, the bring and pay lists, what you ticked, and the messages behind each line;
• your settings.

The app's database is encrypted, and its key is kept in the phone's secure storage. The app does not allow cloud backup of its data. We cannot see or recover any of it. If you delete it or uninstall the app, it is gone, apart from copies you made yourself (exports).

Live mode (Android only)

Live mode is off until you turn it on. Before you do, the app explains what it reads, and then Android's own notification-access screen asks you to allow it. After that, Android shows Muteloop the notifications of all your apps, including sender names and message text. Muteloop keeps only messages from the messaging-app groups you choose, and ignores and never saves everything else.

The messages of the groups you chose are stored encrypted on the phone (AES-GCM, with a key in the Android Keystore) until your digest is made, and are deleted after at most 7 days. They are excluded from the phone's backup. Muteloop never replies, reacts, marks as read or opens your chats; it only reads. Groups that use Advanced Chat Privacy are left out of digests. At the hour you choose, the app builds the digest on the phone, and it can alert you when a message mentions a watch word.

You can turn live mode off at any time in Android's notification-access settings, or in the app (Groups), and you can delete the stored messages from Settings → Privacy and data.

Calendar

When you tap the add-to-calendar button on a date, the app opens your phone's own calendar screen with the title and time filled in, and you save it there. On Android this needs no permission. On iPhone the app asks for write-only calendar access the first time; it cannot read your calendar.

Sharing and files

When you share a card, export your dates and lists, or save a file, it goes only where you send it from the share sheet. To import a file, the app opens the system file picker or receives the file you shared, and gets only what you choose. The app has no access to your photo library, location, contacts, text messages or call log.

Subscriptions and RevenueCat

Subscriptions are sold by Apple (App Store) or Google (Google Play). They handle the payment, and we never see your card or bank details. Their own privacy policies apply to the payment.

To know which plan is active on your phone, the app uses RevenueCat, Inc. (United States). RevenueCat receives:

• a random ID that the app creates on the phone (it is not your name, email or phone number);
• the store's records of purchases in this app: which plan, when it started and renews, trial status, price, currency and store country;
• basic technical details needed to answer, such as the app version and the phone's language. Like any internet request, it also sees the IP address the request comes from.

RevenueCat never receives your chats or anything you type into the app. We use RevenueCat's dashboard to see purchase totals, for example how many trials became subscriptions; these are not linked to your name. RevenueCat's privacy policy: https://www.revenuecat.com/privacy

Notifications

If you allow notifications, the app works them out on the phone from your own dates and lists (for example the evening before a date, or a payment due) and the phone shows them. Nothing is sent to a server, and this version does not register for push messages. Each kind can be switched off in Settings → Notifications.

Your choices and rights

• Export your dates and lists at any time: Settings → Privacy and data, also on the plan screen. Export is free with or without a plan.
• Delete everything on the phone: Settings → Privacy and data → Delete everything, also on the plan screen. Uninstalling the app deletes it too.
• Turn live mode off in Android's notification-access settings.
• Cancel a subscription in your App Store or Google Play subscription settings.
• Ask us to delete the purchase records RevenueCat holds for you: email us with the order number from your store receipt, and we will delete the matching RevenueCat record within 30 days. The store keeps its own records under its policy.

Depending on where you live (for example under Israel's Protection of Privacy Law or the EU and UK GDPR), you may have the right to access, correct or delete personal information, to object to its use, and to complain to your data protection authority. Write to us and we will answer within 30 days.

What we do not do

• No ads, no advertising ID, and no tracking across other apps or websites.
• No analytics or crash-reporting tools in the app.
• No upload of your chats, and no AI service in this version.
• No access to your location, contacts, text messages or call log.
• No messages sent, and no replies in your chats.
• We do not sell or rent personal information.

Legal bases (EU and UK users)

We process purchase records to provide the subscription you asked for (performance of a contract) and to see purchase totals and prevent abuse of trials (legitimate interests).

Where the data is processed

Your chats and digests are processed on your phone. RevenueCat processes purchase records in the United States. Apple and Google process payments in the countries where they operate. Where the law requires it, these transfers rely on the safeguards those companies provide, such as standard contractual clauses.

How long we keep it

Data on your phone stays until you delete it, the automatic deletion removes it, or you uninstall the app; live-mode messages stay at most 7 days. Purchase records at RevenueCat are kept while they are needed to run your subscription and for the store's and the law's record-keeping, and are deleted on request as described above.

Security

Your data is protected by your phone's own security, such as its lock screen and storage encryption, and by the encryption described above. The connection to RevenueCat is encrypted (TLS).

Children

The app is for people aged 18 and over and is not directed to children. It may show the names of your children that you type in, on your phone only.

Features that are not in this version

AI-written digests and transcription of voice notes are not part of this version. If they are added later, this policy will say what they send, where and why before that version is released, and the app will ask for your consent first.

Independent app

Muteloop is an independent app. It is not affiliated with, endorsed by or sponsored by any messaging service.

Changes to this policy

If this policy changes, the new version will have a new date, and the app will show it. If a change means the app sends more information, we will tell you in the app before it happens.