Privacy Policy

1. Summary & Core Philosophy

Mun is built on a fundamental principle: Your computer belongs to you, and your productivity software should not be spyware.

Mun operates under a Local-First Architecture. We do not run tracking servers, we do not sell telemetry, we do not collect usage analytics, and we do not proxy your queries through intermediary servers. All searches, window tiling operations, shortcut executions, and diagnostic captures execute entirely on your local machine.

2. Data We Do NOT Collect

• No Telemetry or Tracking: Mun contains zero analytics SDKs (no Google Analytics, no Mixpanel, no PostHog, no Sentry, no telemetry pings).
• No Keystroke Logging: The launcher registers global shortcuts (e.g., Ctrl+Space) using OS-native hotkey hooks. Keystrokes are evaluated exclusively inside your local process memory and are never transmitted anywhere.
• No Query Logging: Search queries (calculator inputs, app searches, web search queries) are processed purely in local memory.
• No Central Proxy: When you execute a search or talk to an AI model, Mun connects directly to the provider's official API endpoint over HTTPS. Mun servers never see, handle, or log your tokens or prompts.

3. Third-Party AI Services (BYOK - Bring Your Own Key)

Mun enables you to connect third-party AI models (Anthropic Claude, OpenAI, Google Gemini, Groq, DeepSeek) or local offline models via Ollama.

• Direct Connections: All API requests are dispatched directly from your device to the respective provider's HTTPS endpoint.
• Local Credential Storage: Your API keys are stored locally on your device in your user configuration directory (or native operating system keyring). They are never sent to Mun.
• Third-Party Policies: Your interactions with third-party LLMs are subject to the privacy policies of those individual providers. When using local models via Ollama, zero data leaves your local network.

4. Workspace Connectors & Google User Data Policy Compliance

Mun provides optional workspace integrations (Google Workspace and Microsoft 365) to allow instant desktop searching across your documents and emails.

How Google & Microsoft Data is Handled:

• Local Token Storage: OAuth access and refresh tokens obtained via PKCE flow are stored exclusively on your local machine. Mun does not operate a central server that receives or intercepts your tokens.
• Local In-Memory Search: Retrieved search index results (such as Gmail message headers or Google Drive file titles) are processed in-memory on your machine to display search results in the launcher.
• No External Storage or Transmission: Your Google and Microsoft Workspace data is never uploaded to Mun servers, never stored in external databases, and never transferred to third parties.
• No AI Model Training: Workspace user data is never used to train, retrain, or improve generalized AI or machine learning models.
• No Advertising: Workspace data is never shared with advertising platforms or data brokers.

5. Diagnostics, Local Logs & Crash Reports

To diagnose errors and unexpected crashes, Mun generates local log files stored strictly on your local disk in ~/.config/com.mun-ai.launcher/logs/:

• Automatic Redaction: Mun includes a built-in privacy sanitizer that automatically strips API keys (e.g., sk-..., AIza...), Bearer tokens, passwords, JSON secret values, personal user home directory paths, and non-support emails before anything is written to disk.
• Zero Automatic Upload: Logs are never automatically uploaded to the cloud.
• User-Controlled Reporting: In the Settings menu under Diagnostics, you can inspect the exact contents of local logs. When reporting an issue, Mun packages the data into a single sanitized file (mun-diagnostic-report.txt) and prompts you to select how you wish to email it to help@mun-ai.com.

6. Purchases & Payment Information

If you purchase the Ad-Free Lifetime license ($4.99 one-time), transactions are processed by our authorized Merchant of Record (MoR) (such as Lemon Squeezy, Polar, or Stripe).

Your payment information (credit card numbers, billing addresses) is collected and processed directly by the payment processor. Mun does not receive, store, or have access to your financial payment details. We only receive confirmation of payment, your order ID, and your email address to deliver your license key.

7. Data Deletion & Revocation

Because all your data is stored locally, you maintain total control over its deletion:

• Revoking Connectors: You can disconnect Google or Microsoft accounts at any time in Mun Settings with one click, which instantly wipes local tokens.
• Clearing Logs: You can permanently delete all local logs and crash dumps by clicking "Clear Logs" in the Diagnostics tab.
• Full Removal: Uninstalling Mun and deleting the configuration folder (~/.config/com.mun-ai.launcher/) permanently removes all cached data from your machine.

8. Contact Us

If you have any questions or privacy inquiries regarding Mun, please contact our support team at:

Email: help@mun-ai.com
Website: https://mun-ai.com