Privacy Policy

Everything the app stores lives only on your phone, in the OS-level secure store (iOS Keychain):

• Bluetooth pairing key (PSK) — generated by the murmur daemon on your Raspberry Pi during pairing.
• LLM API key — for Anthropic Claude, OpenAI, or Google Gemini, if you choose to use Agent mode. This is your own key, entered by you.
• Sudo password — optional, per paired device, used only to let Agent mode run privileged commands on that specific Pi.
• Saved agent conversations — stored as files in the app's private document directory on your phone.

None of this is uploaded to us. We don't operate any server that receives it, because there isn't one.

Only two things:

• LLM API calls — if you use Agent mode, the app calls Anthropic, OpenAI, or Google directly using the API key you provided, subject to that provider's own privacy policy. We never see these requests or responses.
• Bluetooth traffic to your paired Raspberry Pi — an encrypted, authenticated link between your phone and your own hardware, used to run shell commands you request. This never touches the internet.

In the app's Settings screen, at any time, you can:

• Forget a device — deletes that Pi's pairing key and sudo password.
• Clear conversation history — deletes all saved agent chats.
• Delete all data — wipes every pairing key, API key, sudo password, agent history, and preference from the phone immediately.

If you enable Agent mode, the LLM provider you choose (Anthropic, OpenAI, or Google) processes the prompts and command output the app sends on your behalf, under their own privacy policy. murmur does not add any tracking, analytics, or advertising SDKs of its own.

murmur is open source. Questions or concerns: github.com/nekonihq/murmur/issues