Privacy Policy

1. Information We Collect

To deliver personalized Socratic tutoring, spatial chalkboard visualization, and continuous learning memory, Muna collects the following categories of data:

• Account Identifiers: Authenticated email addresses and user identifiers via Firebase Auth.
• Study Materials & Course Documents: User-uploaded textbooks, lecture slides, and notes (PDF, DOCX, PPTX) ingested into private study spaces.
• Spatial Board State: Card node text (KaTeX LaTeX formulas, derivations), Cornell study notes, vector chalk strokes, and SVG diagrams.
• Voice & Dialogue Transcripts: Real-time WebRTC audio streams, speech-to-text transcriptions, and chronological Socratic tutoring messages.
• Cognitive Learning Traces: Mastered concepts, struggle areas, confidence ratings, and pedagogical analogies preserved in your private profile.

2. Third-Party Sub-Processors & Infrastructure

We partner with enterprise cloud providers under strict data protection protocols:

• AI Inference & Speech Processing APIs: High-performance developer API endpoints used to process Socratic prompts, speech-to-text transcription, and audio synthesis.
• Cloud Infrastructure & Database Storage: Enterprise cloud databases (PostgreSQL with pgvector) and encrypted object storage (S3) protected by AES-256 encryption at rest and TLS 1.3 in transit.
• Merchant of Record & Payments (Dodo Payments): PCI-DSS Level 1 compliant merchant of record. Muna never accesses, stores, or processes raw credit card numbers.
• Authentication (Firebase Auth): Secure session authentication and credential protection.

3. AI Processing, Zero Model Training & Transient Logging

We believe your study materials and coursework belong exclusively to you:

4. Data Retention & Dormant Accounts

We retain your study spaces, Cornell notes, and chalkboard drawings while your account remains active to ensure continuous academic progress. If you cancel your subscription, your study spaces are preserved in the free scratchpad state.

For free or cancelled accounts with zero login activity for twelve (12) consecutive months, Muna reserves the right to archive or permanently purge inactive spaces following thirty (30) days' advance notice sent to the registered email address.

5. Your Privacy Rights (GDPR, CCPA & Universal Portability)

Regardless of your location, Muna grants comprehensive data control:

• Right to Portability (1-Click Data Export): You can download a complete multi-file archive (.zip) containing your account profile, cognitive memory, document indexes, chat transcripts, and spatial board graphs at any time in Account Settings.
• Right to Erasure (1-Click Account Deletion): You can permanently delete your account at any time in Account Settings. Deletion irreversibly purges your personal data, study spaces, and indexed documents from our active databases.
• Right to Rectification: You may edit or correct your account details and learning preferences at any time.

6. Student Privacy & Minors (COPPA & GDPR-K)

Muna is intended for students aged 13 and older (or 16 and older in jurisdictions where required by law). We do not knowingly collect personal information from children under 13 without verified parental or guardian consent. Accounts identified as created by children under 13 without required authorization are subject to prompt termination and data erasure.

7. Contact & Privacy Inquiries

For any privacy inquiries, data subject requests, or questions regarding our data practices, you can contact us directly at hello@muna.study.