Privacy in Muninn is not a setting you switch on. It is how the app is built. Your library lives on your Mac, the AI runs on your Mac, and nothing reaches our servers unless you decide to publish it.
Muninn is a local-first Mac app. By default, your photos and everything Muninn learns about them never leave your computer. The only time anything is uploaded is when you actively publish an album to the web or post to a connected social account. There is no tracking, no analytics SDK, and no selling of data, ever.
The following is computed and stored entirely on your device, and is never transmitted to us:
If you choose to publish a gallery or a slideshow, the media for that album is uploaded so it can be served on the web. Specifically:
Unpublish an album and its media is removed from our storage. You stay in control of what is public, unlisted or password-protected.
Subscriptions are processed by Stripe, and the one-time app purchase is handled by the Mac App Store. We do not see or store your full card details. We keep only what we need to manage your subscription status, such as your tier and billing state.
On the Pro tier, when you connect a social platform you grant Muninn permission to post on your behalf. Those credentials are used only to publish the content you schedule. You can disconnect any account at any time, which revokes that access.
You can unpublish any gallery, disconnect any social account, and cancel your subscription whenever you like. For data requests or questions about anything above, email support@muninnmemory.app and a real person will respond.
Muninn is built by The Forge, the software studio division of Gatz Holdings LLC, and is one half of the Sentinel + Muninn suite. This page describes our intended practices for launch and may be updated as the product ships. Material changes will be noted here with a new date.