Privacy Policy
Last updated: 2026-05-20
This policy explains what data Mull handles and why. Mull collects very little, and we've tried to be honest about exactly where your audio goes — including the parts that do leave your Mac.
Mull is made by SERGEI KARASEV IE, an individual entrepreneur registered in the Republic of Armenia, based in Yerevan. For privacy questions, contact hello@usemull.com. For these purposes, we are the data controller.
The short version
- To transcribe your speech, Mull sends audio over the internet to our backend and on to a speech-to-text provider. We do this for speed and quality — it is not a privacy-first, fully-local product.
- We don't keep your audio after it has been transcribed.
- Your transcripts, recordings, and dictation history are stored locally on your own Mac — not on our servers.
- We store your email address and your usage minutes to run your account.
- We don't sell your data and we don't use it for advertising.
What stays on your Mac
The following are stored locally, in a database in your macOS Application Support folder, and are not uploaded to us:
- Your transcripts.
- Your meeting recordings and audio files.
- Your dictation history.
- App settings, hotkeys, and preferences.
If you delete the app or this local data, it's gone. We have no copy.
What gets sent off your Mac, and to whom
Dictation
When you dictate, your microphone audio is streamed to our backend and then to Deepgram, our speech-to-text provider. Deepgram transcribes the audio and the resulting text is returned to the app. The transcribed text is stored on your Mac.
Meeting and file transcription
When you transcribe a meeting recording or an audio file, the file is uploaded to our backend and staged in object storage (provided by Tigris) so that Deepgram can transcribe it. The staged audio is deleted once transcription is complete, and in any case within 24 hours. We do not retain meeting or file audio on our backend beyond that.
Summaries
If a written summary is generated, the transcript text is sent through our backend to OpenAI (the gpt-4o-mini model), which produces the summary. The summary is returned to the app and stored on your Mac.
Your account
To run your account, our backend stores:
- Your email address (and a securely hashed password).
- Your usage minutes (how much transcription you've used, so we can apply limits).
That's the personal data on our servers. We don't store your transcripts or recordings there.
Sub-processors
We rely on these third-party services to operate Mull. Each handles data only to provide its part of the service:
| Sub-processor | Role | What it handles |
|---|---|---|
| Deepgram | Speech-to-text | Audio sent for transcription |
| OpenAI | AI summaries | Transcript text sent for summarization |
| Fly.io | Backend hosting | Hosts our backend; data passes through it |
| Tigris | Temporary audio staging | Briefly stores meeting/file audio during transcription, then it's deleted |
| Resend | Transactional email | Sends account emails (verification, password reset); handles your email address |
These providers operate their own infrastructure, including in the United States. Where your data is processed outside your country, that transfer is part of using the service.
Why we send audio to the cloud
We want to be straight about this: Mull is not a "your audio never leaves your Mac" product. Cloud transcription is a deliberate choice — it gives the low latency that makes dictation feel instant, and the speaker separation that makes meeting transcripts useful. We minimize what we keep (no audio retained after transcription, transcripts kept only on your device), but the audio does pass through our backend and the providers above while it is being transcribed.
Website analytics
The website at usemull.com uses Cloudflare Web Analytics — a cookie-free, privacy-friendly tool. It counts aggregate page views and referrers, does not use cookies, does not build personal profiles, does not track you across sites, and is not Google Analytics.
Payments
Purchases are processed by Lemon Squeezy, our Merchant of Record. When you pay, Lemon Squeezy collects the information needed to process the payment and comply with tax law — for example name, billing address, payment method, and country. We do not see or store your full payment details. We receive only receipt-level information (such as your email, country, and subscription status). Lemon Squeezy's own privacy policy governs the data it collects.
How long we keep things
- Account data (email, usage minutes): kept while your account exists. Deleted on account closure, or sooner on request.
- Staged meeting/file audio: deleted after transcription, within 24 hours at most.
- Dictation audio: streamed for transcription, not stored on our backend.
- Transcripts and recordings: kept on your Mac for as long as you keep them — under your control, not ours.
Your choices and rights
If you're in a jurisdiction with data-protection laws (such as the EU/UK GDPR or California's CCPA), you have the right to access, correct, export, or delete the personal data we hold about you, and to object to certain processing. Because the data we hold is essentially your email and your usage minutes, these requests are simple.
Email hello@usemull.com and we'll handle it, normally within 30 days. You can also ask us to delete your account and the associated data at any time.
Security
We use reasonable measures to protect the data we handle, including encrypted connections for data in transit and hashed passwords. No system is perfectly secure, but we keep the data we hold deliberately minimal to limit risk.
Children
Mull is not directed at children under 16, and we don't knowingly collect their data.
Changes
We'll update the "Last updated" date if this policy changes, and we'll email existing users about material changes.
Contact
hello@usemull.com — for any privacy question, including access or deletion requests.