Privacy Policy
Last updated: 2 July 2026
This Privacy Policy explains what information muukly collects, how we use it, and the choices you have. muukly is a bilingual, offline-first wellness and self-development app: your practice lives on your device first, and syncs to your account in the cloud only if you choose to sign in.
The short version
- Local-first. Everything you do works without an account and is stored on your device.
- Cloud sync is optional. If you create an account and sign in, your practice is backed up and synced across your devices through our database provider (Supabase).
- No AI, no ads, analytics only if you allow it. muukly does not use any AI or large-language-model service, does not show advertising, and does not sell or rent your personal data. Product analytics run only if you opt in (see below).
- You're in control. You can export your data or delete it at any time.
Information we collect
Account information. If you create an account, we collect your email address and a password (handled by our authentication provider, Supabase — we never see your password in plain text). If you choose “Sign in with Google,” Google confirms your identity and shares your basic account details (such as your email) with us.
Content you create. This is the heart of muukly: journal entries, mood and energy check-ins and the factors you tag, saved practices and favorites, vision boards, routines, journey progress, your chosen display name/handle, and your settings (language, theme, reminders, goals). This content is created and stored on your device. When you are signed in, it is also synced to your private account in our cloud database so you don't lose it and can use muukly on more than one device.
Virtual items. muukly has an in-app reward currency (“coins”). Your balance is kept for your user id by our backend service. These are virtual items with no real-world monetary value; any “purchase” is currently simulated and involves no real payment and no card details (see the Terms).
Information stored on your device. Some things stay only on your device and are never sent to us — for example your profile emoji/avatar, any images you add to vision boards (kept in your browser's local storage), unsaved drafts, and your cookie choice. Clearing your browser storage removes this local data.
Product analytics (only with your consent). If you opt in through the cookie banner, we use PostHog — a privacy-respecting analytics tool hosted in the EU — to understand how muukly is used (pages visited, features and actions), so we can improve it. When you're signed in, these events are linked to your account. Analytics are off unless you accept them, you can withdraw consent at any time, and we never use this data for advertising or sell it. Separately, our hosting and infrastructure providers process the basic technical data needed to deliver the app securely (such as your IP address in server logs).
Support messages. If you email us, we receive your email address and whatever you choose to include in your message.
What we do NOT do
- We do not send your content to any AI or large-language-model provider — muukly has no such feature.
- We do not sell, rent, or trade your personal data.
- We do not show third-party advertising or use advertising cookies.
- We do not use cross-site trackers, and our product analytics run only if you opt in.
How and why we use your information
- To provide muukly: to run the app, save your practice, sync it across your devices, and remember your preferences.
- To secure your account: to authenticate you, keep you signed in, and protect against abuse or unauthorized access.
- To support you: to reply to your messages and fix problems.
- To comply with the law: to meet legal obligations and respond to valid legal requests.
If you are in the EEA/UK, our legal bases are: performance of our contract with you (providing the app), your consent (which you can withdraw), our legitimate interests (keeping muukly secure and improving it), and compliance with legal obligations.
Who we share information with
We share personal data only with the service providers that make muukly work, and only as needed. These are:
- Supabase — our database and authentication provider. It stores your account and the content you sync when signed in.
- Cloudflare — hosts the backend service that keeps your in-app virtual-currency balances.
- PostHog — our EU-hosted product-analytics provider. It only receives data if you opt into analytics.
- Google — only if you choose “Sign in with Google,” to verify your identity. Google's use of your data is governed by Google's own privacy policy.
We may also disclose information if required by law, to respond to valid legal process, or to protect the rights, safety, and security of our users and muukly. If muukly is ever involved in a merger or acquisition, we will ensure any successor continues to honor this policy.
Where your data is processed
muukly is operated from Romania (EU). Your data is processed by the providers above, whose infrastructure may be located in the EU or other countries. Where data leaves the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Keeping and deleting your data
We keep your account and synced content for as long as your account exists. You can delete your data at any time: use “Delete all my data” in Settings to clear your data, or email us to request full deletion of your account. Data stored only on your device is removed when you clear your browser storage or uninstall the app.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent. muukly includes built-in tools to export your data (as a file) and to delete it. To exercise any other right, contact us using the details below. If you are in the EEA/UK, you also have the right to lodge a complaint with your local data-protection authority (in Romania, the ANSPDCP).
Security
Access to your synced data is protected by authentication and database access rules so that each account can reach only its own data. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.
Children
muukly is not intended for children under 16 (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children below that age; if you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this policy as muukly evolves. We'll change the “last updated” date above and, for material changes, give notice in the app.
Contact
Questions or requests about your privacy? Email us at muukly@outlook.com.