The short version
Your entries belong to you. They live in your own account and on your device. Nobody at Murmr reads them. No feed, no followers, no ads, no selling of anything. The AI features send the text of an entry to Google’s Gemini and you can switch each one off. You can export or delete everything, any time, in one tap.
What Murmr stores
- Your account: an email address, and a password if you chose one. Sign-in codes expire after an hour.
- Your entries: the words, the title, the date, tags, and the people, places and activities you mention. The Mind and Body check-ins you record.
- Your recordings and photos: kept in private storage that only your account can open. Links to them expire after an hour and are issued only to you.
- What Murmr said: lens responses, weekly reflections, and your Ask conversations, so you can come back to them.
- Settings: your name, reminder times, time zone, theme, app-lock preference, which AI features are on, and the words you have asked Murmr to spell your way.
- A copy on your device: the app keeps your journal in the browser’s own storage so it opens instantly and works offline. Signing out clears it.
Where it goes
- Supabase hosts the database, sign-in and file storage. Access is scoped to your account by the database itself, not just by the app.
- Cloudflare serves the site and runs the small server that talks to the services below. It does not keep your entries.
- Google Gemini receives the text (or audio) of an entry for the features you turn on: transcription when you record, titles, tags and check-in suggestions, the follow-up question, lenses, Ask Murmr, daily prompts and the weekly reflection. On the paid tier Murmr uses, Google does not keep the content or use it to train models. Each feature has its own switch in Settings; recording only sends audio when you press record.
- Email: sign-in codes; reminders, when no device of yours can show the notification and you keep “Also by email” on; the weekly reflection, only if you turn “Email me the weekly reflection” on, since it is written from your entries; and news from Murmr if you keep that switch on. All of it goes through Resend, and every one of those emails has a link that turns it off without signing in.
- Notifications: if you turn reminders on, your browser gives Murmr an address to send them to. Turning them off removes it.
- Payments: if you ever pay for Murmr Plus, Stripe handles the card. Murmr sees that a payment happened, the amount and the plan, never the card.
What Murmr does not do
- No advertising, no tracker that follows you between sites, no sale or sharing of your data with anyone for their purposes.
- No analytics on your journal. It never loads there. Every page outside the journal, meaning this one, the home page, the blog and the rest of the public site, uses Ahrefs Web Analytics to count page views and where visitors arrived from: no cookie, nothing that identifies you, and no way to tell one visitor from another. The home page also counts taps on its buttons (which button, when, and whether the device was a phone) on the same terms.
- Nobody reads your entries to run the service. The admin tools show counts and dates only, and the database enforces that.
How long it stays
As long as you keep your account. Delete an entry and it is gone from your journal at once and from storage with it. Delete your account (Settings → “Delete my account and everything in it”) and every entry, photo, recording, reflection, conversation and setting is removed straight away, along with the account itself.
Taking it with you
Settings → Your data gives you everything as JSON, or as one Markdown document, whenever you like.
Your rights
Wherever you are, you can see, export, correct and delete everything Murmr holds about you from inside the app. If you are in the UK or EU you also have the rights the GDPR gives you, including to complain to your data protection authority. For anything the app can’t do, get in touch.
Who runs Murmr
Murmr is made and run by an independent maker, not a company, and the person who answers the contact form is the person responsible for your data. Where the law needs a place, Murmr is run from the United Kingdom.
Changes
If this page changes in a way that matters, the app will say so the next time you open it. Last updated 11 September 2026.