Privacy in Muninn is not a setting you switch on. It is how the app is built. Your library lives on your Mac, the AI runs on your Mac, and nothing reaches our servers unless you decide to publish it.
Muninn is a local-first Mac app. By default, your photos and everything Muninn learns about them never leave your computer. The only time anything is uploaded is when you actively publish an album to the web or post to a connected social account. We collect only basic, anonymous usage to improve the app: never personal data, never your photos, and never sold. Your photos and everything Muninn learns about them stay on your Mac unless you choose to publish.
The following is computed and stored entirely on your device, and is never transmitted to us:
If you choose to publish a gallery or a slideshow, the media for that album is uploaded so it can be served on the web. Specifically:
Unpublish an album and its media is removed from our storage. You stay in control of what is public, unlisted or password-protected.
The app sends us small, anonymous usage counts so we can see how Muninn performs in the real world: things like how many libraries were opened today, how far new users get through onboarding, which features get used, and how many photos an average library holds. These are bare numbers only. They never include a photo, a filename, an album name, a caption, or a search. They are keyed to a random install identifier (and to your publishing account id once you sign in), never to an advertising identifier, and they are never sold or shared. Web galleries also keep a simple daily view count per public gallery, with no information about the viewer.
Subscriptions are processed by Stripe, and the one-time app purchase is handled by the Mac App Store. We do not see or store your full card details. We keep only what we need to manage your subscription status, such as your tier and billing state.
On the Pro tier, when you connect a social platform you grant Muninn permission to post on your behalf. Those credentials are used only to publish the content you schedule. You can disconnect any account at any time, which revokes that access.
You can unpublish any gallery, disconnect any social account, and cancel your subscription whenever you like. For data requests or questions about anything above, email support@muninnmemory.app and a real person will respond.
Muninn is built by The Forge, the software studio behind The Forge photography suite. The Forge is a division of Gatz Holdings LLC, the legal entity that operates Muninn. This page describes our intended practices for launch and may be updated as the product ships. Material changes will be noted here with a new date.
This page is a plain-language summary. The complete, binding Privacy Policy and Terms of Service are the governing documents.