Back to home

Legal

Privacy Notice

Last updated: July 13, 2026

This Privacy Notice explains how Ken Ove Ferbu ("we", "us", "our"), the operator of Muninn (the "Service"), collects, uses, and shares personal data. Ken Ove Ferbu is the data controller for personal data processed in connection with the Service.

1. Personal data we collect

  • Account data: name, email address, login credentials.
  • Content data: notes, collections, attachments, and other content you create in the Service.
  • Support data: messages you send to us and related metadata.
  • Usage and device data: product telemetry, feature usage, device identifiers, IP address, browser type, and log data.

2. Purposes and legal bases

  • Creating and administering your account (contract performance).
  • Providing and improving the Service (contract performance, legitimate interests).
  • Security, fraud prevention, and abuse detection (legitimate interests, legal obligation).
  • Customer support (contract performance, legitimate interests).
  • Sending service-related communications (contract performance).
  • Marketing communications, where permitted (consent or legitimate interests).

3. Sharing of personal data

We share personal data with the following categories of recipients:

  • Service providers and subprocessors providing hosting, database, and support tooling.
  • Merchant of Record (Paddle): Paddle.com Market Ltd. acts as the reseller and Merchant of Record for all sales, and processes personal data for subscription management, payments, tax compliance, invoicing, and refund handling.
  • Professional advisers such as legal and accounting advisers, where necessary.
  • Authorities where we are required to disclose data by law.

4. International transfers

Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep personal data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

6. Your rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. You may also have the right to lodge a complaint with a supervisory authority. We aim to respond to requests within one month.

7. Security

We implement appropriate technical and organisational measures, including encryption in transit, access controls, and monitoring, to protect personal data. No system is completely secure, but we work continuously to reduce risk.

8. Cookies and analytics

The Service uses only strictly necessary cookies required to operate it — for example, keeping you signed in (authentication session) and enabling secure checkout via Paddle on paddle.com. We do not set advertising cookies, and we do not use cross-site or third-party tracking.

Our hosting platform (Lovable) collects aggregate, first-party operational metrics — such as page views, referrer, coarse geographic region, user agent, and IP address in server logs — to operate, secure, and monitor the Service. These metrics are not used for advertising, are not sold, and are not combined into cross-site profiles. If we ever add non-essential analytics or marketing cookies, we will update this notice and ask for your consent where required.

9. AI features and automated processing

Muninn offers optional AI-assisted features via the Model Context Protocol (MCP), which lets you connect your own AI client (for example, Claude or ChatGPT) to your notes. When you use those features, you are knowingly interacting with an AI system, and the content you choose to expose is sent to the AI provider you have connected. You control when this happens and can disconnect at any time.

We do not use your content to train AI models. We do not carry out solely automated decision-making that produces legal or similarly significant effects on you (GDPR Article 22). In line with the EU AI Act transparency requirements (Article 50), we disclose here that AI-generated output produced via connected assistants should be reviewed by you before you rely on it.

10. Contact

To exercise your rights or ask questions about this notice, contact Ken Ove Ferbu at the support email listed in the Service. For payment-related privacy questions, you can also contact Paddle at paddle.com/legal/privacy.