This policy covers the SuperMuse app and supermuse.app. SuperMuse (“we”, “us”) is responsible for the processing described here. For privacy, account or deletion enquiries, contact [email protected].
We process information needed for the features you choose. Signing in and accepting this policy does not grant every device permission, authorize every AI transfer, or replace consent required for optional processing. Relevant features and system prompts request permissions or separate consent where required.
1. Information we process and why
Accounts and profiles
You can use local app features without creating an account. Signing in enables account and profile features; Sign in with Apple provides authentication credentials, an account identifier, and the name and email you choose to share. Your email may be an Apple private relay address. An account and profile processor supports authentication, sessions, account profiles and private avatar storage. Names and avatars you choose to set are stored for sign-in, account management and profile display. We do not receive your Apple Account password.
You can delete your account in the app from Home avatar → Personal & Settings → Delete Account. Deletion requires a fresh Sign in with Apple confirmation. It revokes SuperMuse’s Apple authorization and deletes the SuperMuse authentication account, profile and uploaded avatar under our control. It does not delete content held separately in your private iCloud account or copies held by services you selected.
Notes, reading and creative work
Text, recordings, transcripts, photos, Live Photo motion resources, links, books, reading annotations, conversations, works and revision history that you create or import are stored on your device as needed. When iCloud is available and synchronization is allowed, core content and associated media may sync through Apple CloudKit to your private iCloud account. The overall sync setting is stored per device, and a change takes effect after the app is fully reopened. Signing in does not publish your content.
When overall iCloud sync is enabled, whether newly imported PDF and EPUB originals are stored in iCloud follows the book-original sync choice on that device. The choice applies to future imports and does not silently move existing originals. If overall iCloud sync is disabled, new originals remain on that device even if the separate book-original choice is still on. Book metadata, reading progress, bookmarks, annotations and other core records may sync only when overall iCloud sync is enabled. Derived reading caches—including local search databases, embeddings, OCR caches and unpacked EPUB data—are rebuilt on the device as needed and are not uploaded to iCloud.
Your content may include personal, third-party or sensitive information. Only provide material you are entitled to process, and review the reference scope before sending it to AI, an external execution service or a sharing recipient.
AI, speech and external execution requests
AI requests may include your instructions, selected Note or conversation context, transcripts, article or book excerpts, OCR text, photo descriptions, relevant dates or place names, and other material you include in the reference scope. Vision and image-editing features may also receive selected still images, user-created edit masks and related edit instructions. The information sent depends on the feature, model, reference scope and permissions granted for the particular recipient; not all AI processing happens on your device.
Photo-related AI requests may include capture time, place descriptions, camera, lens or exposure information. Exact GPS coordinates, altitude and location accuracy are sent only when you separately enable precise-location sharing for that specific AI recipient. Permission granted to one provider or custom endpoint does not authorize another recipient. These features do not upload original recordings or Live Photo motion or audio. SuperMuse AI request content follows the ZDR rules in section 2; a BYOK provider, proxy or custom endpoint handles received information under its own policy. Original media and metadata you save on your device or in your private iCloud remain under the storage rules below.
Supported system transcription, OCR and some media processing run on-device. Cloud read-aloud or speech synthesis sends the text to be spoken and voice settings to the relevant service. Returned audio may be saved and synced with its associated content. When you configure an external Agent service and confirm dispatch, the task and necessary material are sent to that execution endpoint.
Camera effects such as live avatars temporarily process face positions and expressions on-device to render the image. Face meshes and expression coefficients are not saved, uploaded or used for identification. A final video you choose to record or export is part of your saved content.
Subscriptions and transactions
Apple handles App Store purchases and payments. Apple and a subscription and entitlement processor handle product and transaction identifiers, subscription status, expiry and an associated app user identifier to provide entitlements, restore purchases and check subscription status. We do not receive or store your full payment card information.
Permissions and photo metadata
The microphone supports recording; speech recognition permission supports relevant system features; camera and photo access support media you choose to capture or import. Photos may include original capture times, device metadata and GPS coordinates; Live Photos may include sound. Optional location features use location after receiving the relevant system permission, for place information or maps. Geocoding may send a place query or coordinates to a map service. Declining an optional permission affects that feature and does not authorize other processing.
Product analytics
To understand whether features work reliably and to improve the product, the app sends limited product-analytics events to a product-analytics processor. These may include a pseudonymous app-account identifier while signed in, or a random SDK identifier while signed out; app, operating-system and device context; application lifecycle events; and typed events for onboarding, Workspace creation or deletion, recording start or save, generation start or completion, presentation or visual export or save, and completed subscription purchase or restoration. Event properties are limited to predefined modes, durations and counts. If you later sign in on the same installation, events previously recorded under its anonymous identifier may be associated with that app account. Signed-in events may be associated with the same app account across sessions, but the analytics data does not include the account holder’s name or email address.
Product analytics does not include Note titles or content, transcripts, prompts, AI responses, tool payloads, audio, photos, imported documents, external-link content, API keys, precise location or other user-created content. Automatic screen-view and element capture, session replay, surveys and automatic error capture are disabled. We do not use advertising identifiers, track activity across other companies’ apps or websites, or use these events for targeted advertising.
Service operation and feedback
Network services receive necessary connection information such as IP addresses, request times, device or client versions and status codes. Account, security and billing services may process authentication, usage and error metadata to operate the service, prevent abuse and diagnose failures. SuperMuse AI inputs and outputs are not retained in these operational logs; see section 2.
When you submit feedback by email or a system share sheet, we process the text, attachments and optional diagnostics you send. In-app issue reporting lets you review the content, decide whether to attach diagnostics and choose a recipient. Opening the feedback screen does not automatically send a report.
2. SuperMuse AI and BYOK
SuperMuse AI: zero data retention (ZDR)
For AI services provided by SuperMuse, we commit to zero data retention (ZDR) for AI request inputs and outputs. Content is processed only to perform the current inference and return its result. It is not persistently stored by the SuperMuse AI service or its model processors, logged as request or response content, or used to train models.
ZDR concerns inputs and outputs processed by the inference service. It does not mean that inference happens without processing content, or that Notes, conversations, works or iCloud copies you choose to save will be deleted. Account identifiers, model names, usage, request times, status and other metadata without input or output content may still be processed for authentication, billing, security and operation as described elsewhere in this policy.
Bring your own key (BYOK): direct to your configured destination
When you bring your own key (BYOK), the app sends each request from your device directly to the AI service or custom endpoint you configure, without routing the request through the SuperMuse AI inference service. The request may contain the information described in section 1 that you select or authorize for that recipient. The API key is protected using the system Keychain and is used to authenticate with the configured endpoint.
A custom endpoint may be a proxy or aggregator and may forward the request to one or more upstream model providers. Before the first user-content transmission to an exact destination, the app identifies that destination and the relevant data categories and requests authorization unless that destination already has a valid authorization. Authorization is destination-specific. Selecting an unauthorized provider or endpoint, or changing a provider’s endpoint, requires authorization before user content is sent there.
The recipient’s own terms, privacy policy and account settings determine retention, use for model training, processing regions, subprocessors, available ZDR controls and deletion procedures. SuperMuse’s ZDR commitment does not extend to BYOK recipients. Removing a key, disabling a configuration or withdrawing authorization prevents future user-content transmissions to that recipient, but cannot retrieve or automatically delete information already received by it. Use the recipient’s deletion process for earlier data.
3. Purposes and grounds for processing
We process information to provide and maintain your selected features, manage accounts and subscriptions, respond to requests, protect the service and comply with legal obligations. We do not use Note content for advertising profiles.
Where applicable law requires a legal basis, we rely, as appropriate, on performing our contract with you; your consent for optional features, permissions or specific transfers; legal obligations; and legally permitted legitimate interests in security and abuse prevention, taking your rights into account. General acceptance of this policy does not replace separate consent or other conditions required by law.
4. Recipients and sharing
We do not sell personal information or share it for cross-app targeted advertising. Depending on the feature, recipients include:
- Apple: Sign in with Apple, iCloud/CloudKit, App Store, system speech, maps and other Apple services you use. See Apple’s Privacy Policy.
- Account and profile processors: authentication, sessions, profiles and private avatar storage.
- Subscription and entitlement processors: subscription verification, entitlement status and purchase restoration.
- Product analytics processors: limited pseudonymous identifiers, app and device context, and typed lifecycle or feature events described above, solely for reliability and product improvement. They do not receive user-created content or use these events for advertising or cross-app or cross-site tracking.
- AI and speech providers: request processing according to the SuperMuse AI or BYOK mode you select, as described in section 2.
- Other services you choose: external Agent endpoints, sharing recipients, websites, RSS sources and map services. Fetching or opening their content may send network requests, IP addresses and relevant queries to them, under their own policies.
We may also disclose information where necessary to meet legal obligations, respond to valid legal process, protect lawful rights or address security incidents. If a business transfer changes how information is handled, we will provide legally required notice and require continued protection. Changes of purpose or processing will follow applicable notice and consent requirements.
We require processors engaged by SuperMuse to use information only for the specified services and to protect it consistently with this policy and applicable law. A BYOK destination, custom endpoint or other independent recipient you select is not a processor we control merely because you configure it in the app; its own terms and privacy practices apply as described above.
5. Retention and deletion
Retention depends on the purpose, your actions, necessary security or transaction records and applicable law. We do not retain information indefinitely after it is no longer needed. SuperMuse AI request content remains subject to ZDR in section 2; general operational-record retention does not apply to AI input or output content.
- Device and iCloud content: manage it through the app and your Apple Account’s iCloud controls. Turning off sync preserves local content and does not by itself delete cloud data. The app’s separate iCloud-deletion flow requires explicit confirmation after sync is disabled. Revision history, trash, exports and other devices may hold separate copies; deleting a current item may not remove those copies at the same time. Sync and backup cleanup may take time.
- Accounts and profiles: retained as needed to provide the account. Use Delete Account in the app to delete the authentication account, profile and uploaded avatar under our control after confirming your identity with Apple. If you cannot access the in-app control, contact [email protected]. We will request only the identity details needed to handle the request and respond within applicable legal deadlines.
- Transaction, security and feedback records: kept only as needed for purchases, disputes, security, support or legal requirements. Records that must be retained are restricted to the relevant purpose.
- Product analytics: limited event and pseudonymous-identifier records are retained only as needed to measure reliability and feature use, improve the product and investigate failures. The content exclusions above continue to apply.
- BYOK, exported and shared copies: we cannot delete copies held by independent providers or recipients on their behalf. You may contact those recipients directly.
Signing out, uninstalling or deleting an account does not automatically cancel an App Store subscription or necessarily remove content in your private iCloud account. Save needed material before deletion and separately cancel unwanted subscriptions through Apple’s subscription controls.
6. Your choices and rights
You can edit or delete content supported by the app, manage iCloud sync, revoke microphone, photo, camera or location permissions in iOS Settings, and manage AI configuration and consent in the app. AI authorization is managed separately for each recipient. You can independently disable precise-location sharing or withdraw authorization for a recipient, and future requests will omit the affected information.
Depending on applicable law, you may have rights to access, copy, correct or delete information, restrict or object to processing, receive portable data and withdraw consent. You may also complain to your competent data protection authority. Contact us at the email above. We request only information necessary to verify identity and handle the request, and explain any legal reason we cannot fulfill it. Withdrawal does not affect the lawfulness of earlier processing based on consent.
7. Security and international processing
We use reasonable safeguards such as access controls, system credential protection and encrypted transport. No system can guarantee absolute security. Protect your device, Apple Account, service accounts and API keys. We will take remedial and notification measures required by law for relevant security incidents.
Apple, our account, subscription and product-analytics processors, and your selected AI, map or other services may process information outside your country or region. Locations depend on the service and account configuration; we do not promise that all data remains in one country. For transfers subject to legal requirements, we will meet applicable notice, consent and other protection requirements. You should also review your BYOK provider’s processing locations and terms.
8. Website, cookies and external links
The website uses a supermuse_lang cookie to remember the language you actively select, for up to one year. You can delete or block it in your browser. The current website does not set advertising-tracking or analytics cookies. Hosting and network infrastructure may process access logs needed to serve the website.
Pages may load fonts from an external font-delivery service. Your browser then sends that service a request that includes your IP address and browser request information. The font service handles those requests under its own terms and privacy practices. External websites have their own policies, which this policy does not replace.
9. Children
SuperMuse is intended for users able to use its services appropriately and is not directed at children. Minors should use it with guardian guidance and consent where required by law. We do not knowingly process children’s information without legally required authorization. A guardian who identifies such a situation should contact us so we can investigate and delete the information or take other appropriate action.
10. Updates and contact
The date on this page identifies the current version. Material changes to personal-information processing will be communicated through the app or another appropriate channel. Where renewed consent is required, we will obtain it before starting the relevant processing.
Operator: SuperMuse
Contact: [email protected]
Website: https://supermuse.app
Please also read our Terms of Service.