Last updated 25 September 2026

Privacy

Muster has no server, no account and no analytics. This page says what it stores, where, and what it puts on a network, in enough detail that you can check it against what the apps do.

Who we are

Muster is made by Jogen Information and Tech Private Limited, F-23, Road No. 5, Andrews Ganj, New Delhi 110049, India (“we”). For anything in this policy, write to hello@auteurhq.com. That address also reaches our grievance officer for the purposes of India’s Digital Personal Data Protection Act, 2023.

What we collect

Nothing, through the apps. There is no Muster backend to collect it with. The apps contain no analytics, crash-reporting or attribution SDK of any kind. There is no Firebase, no Sentry, no PostHog and no advertising identifier. We do not know that you installed Muster, and we cannot.

If you email us, we keep your message and address so we can reply, and delete them when you ask.

This website

This site sets no cookies and uses no local storage, analytics, advertising or tracking pixels. Its fonts and scripts are served from this domain, so your browser makes no requests to font or script hosts on our behalf.

Like every website, it is delivered by a hosting provider that processes standard request logs (IP address, browser, the page requested and the time) to deliver pages and protect the site from abuse. We do not use those logs to identify or profile you.

What stays on your Mac

The Mac helper watches the coding agents you connect and keeps their events on the machine: the tool being run, its arguments, the file paths, the diff, the project name and what you answered. That record lives in the app’s own container and in your login Keychain, and is deleted with the app.

What reaches your iPhone and Apple Watch

A sentence, a project name, a verdict and a list of choices. Commands, arguments, file paths, diffs and note bodies are removed where the message is built, before it is sent, so no route can forget to strip them.

What crosses a network

At your desk, your iPhone talks to your Mac directly over your own network, and nothing leaves it.

Away from your desk, your Mac seals each message with AES-GCM under a 256-bit key that only your paired devices hold, and posts it to a random 160-bit topic on public notification relays operated by third parties (ntfy.sh, ntfy.envs.net and ntfy.adminforge.de). Those operators see encrypted traffic and the connection details any server sees, such as IP addresses and times. They cannot read the messages, and neither can we. The relays may be located outside your country. You can switch the relay off in Settings, and Muster then works only on your own network.

Services you connect yourself

If you connect Notion, Todoist, Things or Apple Reminders, the Mac helper talks to those services directly using the access you gave it, with tokens stored in your Keychain. Nothing passes through us. Disconnecting one deletes its token. If you ask Muster to hand work to Claude, it runs Claude Code on your Mac under your own login, and that exchange is governed by your agreement with Anthropic.

The ask link

The link you can send someone so they can ask you something carries its secret in the part of the address that browsers never send to a server. When someone uses it, their browser seals the question and posts it to the same encrypted relays. The link can ask, but never answer or read. Rotating it in Settings stops every copy immediately.

Apple

You download Muster from the App Store, which Apple operates under its own privacy policy. If you choose to share analytics with app developers in your device settings, Apple may give us aggregated, non-identifying crash and usage figures. We receive nothing else from Apple about you.

Children

Muster is a tool for people who run AI agents. It is not directed at children, and we do not knowingly collect anything from anyone under 18.

Your rights

Wherever you live, including under the EU and UK GDPR, California law and India’s Digital Personal Data Protection Act, 2023, you can ask what we hold about you, have it corrected or deleted, and withdraw consent. Because there is no account and no server, the only thing we could hold is an email you sent us. Write to us and we will act within 30 days. You can also complain to your local data-protection authority.

We rely on your consent, and on our legitimate interest in answering you, for the one thing we keep: your emails.

Changes

If this policy changes in a way that affects what leaves your machine, the app will say so before it happens, and this page will show the new date at the top.