This policy covers the SuperMuse app and supermuse.app. SuperMuse (“we”, “us”) is responsible for the processing described here. For privacy, account or deletion enquiries, contact [email protected].
We process information needed for the features you choose. Signing in and accepting this policy does not grant every device permission, authorize every AI transfer, or replace consent required for optional processing. Relevant features and system prompts request permissions or separate consent where required.
1. Information we process and why
Accounts and profiles
You can use local app features without creating an account. Signing in enables account and profile features; Sign in with Apple provides authentication credentials, an account identifier, and the name and email you choose to share. Your email may be an Apple private relay address. We use Supabase for authentication, sessions and account profiles. Names and avatars you choose to set are stored; uploaded avatars may be held in the account service’s cloud storage. This supports sign-in, account management and profile display. We do not receive your Apple Account password.
You can delete your account in the app from Home avatar → Personal & Settings → Delete Account. Deletion requires a fresh Sign in with Apple confirmation. It revokes SuperMuse’s Apple authorization and deletes the SuperMuse authentication account, profile and uploaded avatar under our control. It does not delete content held separately in your private iCloud account or copies held by services you selected.
Notes, reading and creative work
Text, recordings, transcripts, photos, Live Photo motion resources, links, books, reading annotations, conversations, works and revision history that you create or import are stored on your device as needed. When iCloud is available and synchronization is allowed, core content and associated media may sync through Apple CloudKit to your private iCloud account. Signing in does not publish your content.
Your content may include personal, third-party or sensitive information. Only provide material you are entitled to process, and review the reference scope before sending it to AI, an external execution service or a sharing recipient.
AI, speech and external execution requests
AI requests may include instructions, selected Note or conversation context, transcripts, article or book excerpts, OCR text, photo descriptions, and relevant dates or place names. Models supporting visual input may also receive still images from selected photos. Transfers depend on the feature, model and reference scope; not all AI processing happens on your device.
Photo AI features may also send the selected photos’ full available metadata, including precise GPS coordinates, altitude, location accuracy, capture time, place descriptions, and camera and lens information. This supports photo understanding and related creative work. Our servers do not persist these AI request contents or photo metadata as server-side content records. Sending data for inference is separate from retaining it: SuperMuse AI processing follows section 2, while retention by a provider or custom endpoint you configure follows that recipient’s policy. These AI features do not upload original recordings or Live Photo motion/audio. Original media and metadata you save on your device or in your private iCloud remain under the storage rules below.
Supported system transcription, OCR and some media processing run on-device. Cloud read-aloud or speech synthesis sends the text to be spoken and voice settings to the relevant service. Returned audio may be saved and synced with its associated content. When you configure an external Agent service and confirm dispatch, the task and necessary material are sent to that execution endpoint.
Camera effects such as live avatars temporarily process face positions and expressions on-device to render the image. Face meshes and expression coefficients are not saved, uploaded or used for identification. A final video you choose to record or export is part of your saved content.
Subscriptions and transactions
Apple handles App Store purchases and payments. Apple and RevenueCat process product and transaction identifiers, subscription status, expiry and an associated app user identifier to provide entitlements, restore purchases and check subscription status. We do not receive or store your full payment card information.
Permissions and photo metadata
The microphone supports recording; speech recognition permission supports relevant system features; camera and photo access support media you choose to capture or import. Photos may include original capture times, device metadata and GPS coordinates; Live Photos may include sound. Optional location features use location after receiving the relevant system permission, for place information or maps. Geocoding may send a place query or coordinates to a map service. Declining an optional permission affects that feature and does not authorize other processing.
Service operation and feedback
Network services receive necessary connection information such as IP addresses, request times, device or client versions and status codes. Account, security and billing services may process authentication, usage and error metadata to operate the service, prevent abuse and diagnose failures. SuperMuse AI inputs and outputs are not retained in these operational logs; see section 2.
When you submit feedback by email or a system share sheet, we process the text, attachments and optional diagnostics you send. In-app issue reporting lets you review the content, decide whether to attach diagnostics and choose a recipient. Opening the feedback screen does not automatically send a report.
2. SuperMuse AI and BYOK
SuperMuse AI: zero data retention (ZDR)
For AI services provided by SuperMuse, we commit to zero data retention (ZDR) for AI request inputs and outputs. Content is processed only to perform the current inference and return its result. It is not persistently stored by the SuperMuse AI service or its model processors, logged as request or response content, or used to train models.
ZDR concerns inputs and outputs processed by the inference service. It does not mean that inference happens without processing content, or that Notes, conversations, works or iCloud copies you choose to save will be deleted. Account identifiers, model names, usage, request times, status and other metadata without input or output content may still be processed for authentication, billing, security and operation as described elsewhere in this policy.
Bring your own key (BYOK): direct to your configured provider
With your own API key, the app sends requests directly to the AI provider or custom endpoint you configure, without routing them through the SuperMuse AI inference service. That recipient processes information under its own terms and privacy policy. Retention, training settings, processing regions and any ZDR offering depend on the provider and your account configuration. SuperMuse’s ZDR commitment does not cover BYOK providers.
A proxy or aggregator you configure may forward requests to upstream model providers. Check the endpoint and recipient before sharing content or credentials. Configured API keys are stored using the system Keychain and used to authenticate with the relevant endpoint.
Changing a provider or custom endpoint may change the recipient. You can manage AI configuration and consent in the app to stop future transmissions. Withdrawal does not automatically erase data previously received by a BYOK provider; use that provider’s deletion process.
3. Purposes and grounds for processing
We process information to provide and maintain your selected features, manage accounts and subscriptions, respond to requests, protect the service and comply with legal obligations. We do not use Note content for advertising profiles.
Where applicable law requires a legal basis, we rely, as appropriate, on performing our contract with you; your consent for optional features, permissions or specific transfers; legal obligations; and legally permitted legitimate interests in security and abuse prevention, taking your rights into account. General acceptance of this policy does not replace separate consent or other conditions required by law.
4. Recipients and sharing
We do not sell personal information or share it for cross-app targeted advertising. Depending on the feature, recipients include:
- Apple: Sign in with Apple, iCloud/CloudKit, App Store, system speech, maps and other Apple services you use. See Apple’s Privacy Policy.
- Supabase: authentication, sessions, profiles and avatar storage. See Supabase’s Privacy Policy.
- RevenueCat: subscription verification, entitlements and purchase restoration. See RevenueCat’s Privacy Policy.
- AI and speech providers: request processing according to the SuperMuse AI or BYOK mode you select, as described in section 2.
- Other services you choose: external Agent endpoints, sharing recipients, websites, RSS sources and map services. Fetching or opening their content may send network requests, IP addresses and relevant queries to them, under their own policies.
We may also disclose information where necessary to meet legal obligations, respond to valid legal process, protect lawful rights or address security incidents. If a business transfer changes how information is handled, we will provide legally required notice and require continued protection. Changes of purpose or processing will follow applicable notice and consent requirements.
5. Retention and deletion
Retention depends on the purpose, your actions, necessary security or transaction records and applicable law. We do not retain information indefinitely after it is no longer needed. SuperMuse AI request content remains subject to ZDR in section 2; general operational-record retention does not apply to AI input or output content.
- Device and iCloud content: manage it through the app and your Apple Account’s iCloud controls. Revision history, trash, exports and other devices may hold separate copies. Deleting a current item may not remove those copies at the same time. Sync and backup cleanup may take time.
- Accounts and profiles: retained as needed to provide the account. Use Delete Account in the app to delete the authentication account, profile and uploaded avatar under our control after confirming your identity with Apple. If you cannot access the in-app control, contact [email protected]. We will request only the identity details needed to handle the request and respond within applicable legal deadlines.
- Transaction, security and feedback records: kept only as needed for purchases, disputes, security, support or legal requirements. Records that must be retained are restricted to the relevant purpose.
- BYOK, exported and shared copies: we cannot delete copies held by independent providers or recipients on their behalf. You may contact those recipients directly.
Signing out, uninstalling or deleting an account does not automatically cancel an App Store subscription or necessarily remove content in your private iCloud account. Save needed material before deletion and separately cancel unwanted subscriptions through Apple’s subscription controls.
6. Your choices and rights
You can edit or delete content supported by the app, manage iCloud sync, revoke microphone, photo, camera or location permissions in iOS Settings, and manage AI configuration and consent in the app.
Depending on applicable law, you may have rights to access, copy, correct or delete information, restrict or object to processing, receive portable data and withdraw consent. You may also complain to your competent data protection authority. Contact us at the email above. We request only information necessary to verify identity and handle the request, and explain any legal reason we cannot fulfill it. Withdrawal does not affect the lawfulness of earlier processing based on consent.
7. Security and international processing
We use reasonable safeguards such as access controls, system credential protection and encrypted transport. No system can guarantee absolute security. Protect your device, Apple Account, service accounts and API keys. We will take remedial and notification measures required by law for relevant security incidents.
Apple, Supabase, RevenueCat and your selected AI, map or other services may process information outside your country or region. Locations depend on the service and account configuration; we do not promise that all data remains in one country. For transfers subject to legal requirements, we will meet applicable notice, consent and other protection requirements. You should also review your BYOK provider’s processing locations and terms.
8. Website, cookies and external links
The website uses a supermuse_lang cookie to remember the language you actively select, for up to one year. You can delete or block it in your browser. The current website does not set advertising-tracking or analytics cookies. Hosting and network infrastructure may process access logs needed to serve the website.
Pages load fonts from Google Fonts. Your browser sends requests involving your IP address and browser request information to Google’s font services; see Google’s Privacy Policy. External websites have their own policies, which this policy does not replace.
9. Children
SuperMuse is intended for users able to use its services appropriately and is not directed at children. Minors should use it with guardian guidance and consent where required by law. We do not knowingly process children’s information without legally required authorization. A guardian who identifies such a situation should contact us so we can investigate and delete the information or take other appropriate action.
10. Updates and contact
The date on this page identifies the current version. Material changes to personal-information processing will be communicated through the app or another appropriate channel. Where renewed consent is required, we will obtain it before starting the relevant processing.
Operator: SuperMuse
Contact: [email protected]
Website: https://supermuse.app
Please also read our Terms of Service.