Murlivo Privacy Policy

Effective date: 1 November 2026

Murlivo is a voice-capture app for Wear OS and Android phones. It records short memos or long dictations on your watch or phone, transcribes them on your own device, and writes them into a notes folder you choose. This policy explains what data the app handles and what leaves your devices.

The data controller is Odezio LTD, a company registered in Cyprus. For any question about this policy or your data, contact support@murlivo.com.

The short version

• Your recordings and their transcripts stay on your devices and in the notes folder you pick. Murlivo never uploads them to us.
• The app collects anonymous usage and crash analytics to find bugs and improve the product. This is on by default, based on our legitimate interest, and you can turn it off at any time on the About Murlivo screen. It never contains your audio, transcripts, or note text.
• There is no account and no sign-in. We do not know who you are.
• The murlivo.com website counts visits without cookies. It uses a cookie only if you press Accept in its cookie banner.

What stays on your device

Everything about the content of a capture is local:

• The audio recording.
• The transcript produced by the on-device speech model.
• The note title and the note written to your chosen notes folder.

Transcription runs entirely on your phone using a local speech-recognition model. Audio and transcripts are never sent to Odezio or to any transcription service.

Watch-to-phone transfer. When you record on the watch, the recording is sent to your paired phone over Google's Wear OS Data Layer so the phone can transcribe it. Normally this is a direct Bluetooth or local Wi-Fi link between your two devices. When your phone is only reachable through Google's cloud relay (for example, the phone's Bluetooth is off and the devices are on different networks), Google may relay the data - including the audio - between the watch and the phone as part of delivering it. This transfer is between your own devices; Odezio does not receive it. Google's handling of Wear OS data is governed by Google's own privacy policy.

What is sent off your device

Usage and crash analytics

Murlivo uses PostHog, a product-analytics service, to understand how the app is used and to catch crashes. This is the only app feature that sends data off your device to us. Analytics are hosted in the European Union (Frankfurt, Germany).

Analytics are on by default. You can turn them off at any time with the switch "Share anonymous usage data" on the About Murlivo screen (Settings > About Murlivo); turning them off stops all further collection and, on the watch, discards any events not yet sent.

Legal basis. We process analytics and crash reports on the basis of our legitimate interest (GDPR Art. 6(1)(f)): keeping the app working and deciding what to improve. Murlivo has no account and no cloud service, so these reports are the only way we learn that the app crashes or fails for someone. We limit them to what that purpose needs: event names, bucketed measures and pseudonymous identifiers, never your audio, transcripts or notes. See "Your right to object" below.

What is sent when analytics are on:

• Event names and properties. A fixed set of 21 named events describing what happened (for example, a capture started, a capture was transcribed, a capture failed). Properties are limited to enumerated values and to measures placed into coarse buckets (for example, a duration band rather than an exact length). No free text.
• Transcript language code. The two-letter code of the detected or chosen language (for example en, de) - never the transcript itself.
• A per-install identifier (distinct_id) generated on the device, used to connect events from the same installation. It is not linked to your identity. It is not reset when you turn analytics off and on again, so that turning the toggle does not make one person look like two.
• A capture pseudonym. Where an event refers to a specific capture, the capture's identifier is first replaced by a keyed one-way hash (HMAC) computed on your device. The real identifier - which also names the audio file in your notes folder - is never sent.
• Standard device and app fields collected by the analytics SDK: device manufacturer, model and device name, operating-system version, screen size and density, device locale, time zone, app version and build, network connection type, and mobile carrier name.
• A per-session identifier ($session_id) the SDK generates to group the events of one app session. Like distinct_id, it is not linked to your identity.
• Crash reports: the exception type, a general failure-reason category, and an obfuscated stack trace. The exception message is not sent, so a crash report cannot contain a file path, a folder name, your audio, transcript, or note content.
• Your IP address, which PostHog's servers see when receiving events, and an approximate location (typically city or region level) that can be derived from it. Discarding the client IP is switched on for the project, so your IP address is not stored with your analytics events.

Analytics data is retained for one year and then deleted.

One-time speech-model download

The speech-recognition model is not bundled in the app. On first use, the app downloads it once from a third-party model-hosting service. As with any download, that service's servers see your IP address and the request's user-agent string. The download is verified against a known checksum. No other information is sent, and no audio or transcript is involved.

App rating prompt

Murlivo may occasionally ask you to rate the app through Google Play's official in-app review feature. The prompt is handled entirely by Google Play; Murlivo does not see your rating or any review text.

What Murlivo never collects or sends

• Your audio recordings.
• Your transcripts, note titles, or note content.
• The path or name of your notes folder.
• The raw (unhashed) identifier of any capture.
• Any account identity, name, email address, or sign-in - there is no account.
• Your contacts.
• Your precise location.

Backups

Android's automatic cloud backup is turned off for Murlivo, so the app's local data is not copied to Google's backup service.

This website

The website murlivo.com also uses PostHog, in a project separate from the app's, hosted in the European Union (Frankfurt, Germany). It tells us which pages people read and how many of them go on to Google Play. There is no session recording, no advertising, and no tracking across other sites.

• What is counted: the pages you open, the page you came from, clicks on our Google Play links, the page language, your browser, operating system, device type and screen size.
• Without cookies (the default): every visit is counted without cookies, and nothing is stored on your device. PostHog's servers build an anonymous identifier from a hash of your IP address, your browser's user-agent string and a random value that changes every day and is then deleted. Your IP address is removed before the visit is stored, so no location is derived from it. Legal basis: our legitimate interest in knowing how the website is used (GDPR Art. 6(1)(f)).
• If you press Accept: from the next page you open, PostHog stores a random identifier in cookies and local storage whose names start with ph_, kept for up to one year, so we can see if you come back. PostHog also derives an approximate location (country or city) from your IP address, and the IP address is stored with these visits. Legal basis: your consent (GDPR Art. 6(1)(a)).
• Your choice: the website remembers Accept or Reject in your browser's local storage (murlivo_consent, with the value "granted" or "denied" and no identifier). You can change it at any time with "Cookie settings" at the bottom of every page. If you withdraw your consent, the PostHog cookie and local storage are deleted, and visits are counted without cookies again.
• Your right to object: to object to all counting on the website, turn on Global Privacy Control or Do Not Track in your browser; the website then sends nothing to PostHog and shows no banner. You can also object by writing to support@murlivo.com.

Website analytics data is retained for one year and then deleted.

Your right to object

You have the right to object at any time to the processing of your data for analytics and crash reports (GDPR Art. 21). In Murlivo, you exercise it with the switch "Share anonymous usage data" on the About Murlivo screen (Settings > About Murlivo): turn it off and collection stops immediately, with no need to contact us and no effect on any other feature. You can also object by writing to support@murlivo.com.

Your choices

• Turn analytics off on the About Murlivo screen at any time. Collection stops immediately.
• Uninstall the app to remove its local data from the device.
• To request deletion of analytics data already collected, contact support@murlivo.com with a description of your device; because there is no account, we use the per-install identifier to locate it.
• You also have the rights of access, rectification, erasure and restriction under the GDPR.

Supervisory authority

If you believe we handle your data unlawfully, you can complain to a data protection authority. Our lead supervisory authority is the Commissioner for Personal Data Protection (Cyprus), https://www.dataprotection.gov.cy. You can also complain to the authority in the EU country where you live or work.

Children

Murlivo is meant for people aged 13 and over. It is not directed to children under 13 and does not knowingly collect data from children under the age required by local law. Usage analytics are the same for every user, contain no audio, transcript or note content, and can be turned off in Settings > About Murlivo.

Changes to this policy

If this policy changes materially, we will update it at https://murlivo.com/privacy/ and change the effective date above. Continued use of the app after a change means you accept the updated policy.

Contact

Odezio LTD - support@murlivo.com