← banshee.pro

Privacy Policy

Effective date: March 18, 2026

1. Introduction

This Privacy Policy describes how Banshee Technologies S.L. ("we", "us", or "our"), a company registered in Spain, handles information in connection with the Murmur — Your Voice, Your Emotions, Your Insights mobile application ("the App"), available on the Apple App Store.

We are committed to protecting your privacy. The App has been designed with a privacy-first approach: all audio processing, transcription, and emotional analysis happen locally on your device. We do not collect personal data.

2. Information We Collect

We do not collect any personal information. Specifically:

• No user accounts or registration are required
• No names, email addresses, or contact information are collected
• No analytics or tracking tools are used
• No cookies or similar technologies are used
• No advertising or ad-tracking is present
• No voice recordings, transcriptions, emotional analysis, or insights leave your device
• No crash reporting or telemetry data is collected

3. On-Device Processing

Murmur uses on-device AI models for speech-to-text transcription, emotional analysis, and intelligent insights. All processing occurs entirely on your device:

• Speech-to-Text: Voice recordings are transcribed locally using an on-device Whisper model. No audio data is ever sent to external servers.
• Emotional Analysis & Insights: Transcriptions are analyzed by a local large language model (LLM) to generate emotional tone analysis, diary summaries, key points, and personalized insights. This analysis is performed entirely on your device.

The AI model files are downloaded once from Hugging Face servers when you first use the App. These are standard, anonymous HTTP downloads — no user data, authentication, or identifiers are sent during this process.

4. Local Storage & Encryption

All diary entries and personal data are encrypted and stored exclusively on your device:

• Encryption: All diary entries (transcriptions, emotional analysis, and chat history) are encrypted using AES-256-GCM with keys derived via PBKDF2 (300,000 iterations, SHA-256).
• Key Storage: Encryption keys are protected by the iOS Keychain with WHEN_UNLOCKED_THIS_DEVICE_ONLY accessibility, meaning they cannot be extracted or backed up.
• Biometric Protection: The App supports Face ID and Touch ID to prevent unauthorized access to your personal diary.

Additionally, the App stores a small amount of non-personal preference data locally (e.g., language settings, daily usage counter). This data is never transmitted to any server.

5. Device Permissions

The App requests the following device permissions:

• Microphone: Required to record voice diary entries for transcription and emotional analysis. Audio is processed and stored locally only.
• Face ID / Touch ID: Used to protect your diary entries with biometric authentication. Biometric data is handled entirely by iOS and is never accessed by the App.

No other permissions (camera, photos, contacts, location, etc.) are requested or used.

6. Third-Party Services

The App integrates two third-party services, neither of which receives personal data:

a) RevenueCat

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat processes transactions through Apple's StoreKit framework and may receive an anonymous device identifier to manage subscription status. No personal data is shared with RevenueCat beyond what Apple provides through StoreKit.

RevenueCat's privacy policy: https://www.revenuecat.com/privacy

b) Hugging Face

The AI models (speech-to-text and language model) are downloaded from Hugging Face's servers on first use. These are one-time, anonymous downloads. No user data is sent to Hugging Face, and no authentication is required.

7. Data Sharing

We do not sell, trade, rent, or otherwise share any user data with third parties, because we do not collect any user data.

8. Data Retention

Since we do not collect personal data, there is no personal data to retain on our servers. All data stored on your device (diary entries, transcriptions, emotional analysis, preferences) remains there until you delete individual entries or remove the App. You are in full control of your data at all times.

9. Your Rights Under GDPR

As a company based in the European Union (Spain), we comply with the General Data Protection Regulation (GDPR). Although we do not collect personal data, you retain all rights granted under the GDPR, including the right to:

• Access — Request confirmation of whether personal data is being processed
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of personal data
• Restriction — Request restriction of data processing
• Portability — Request transfer of data in a machine-readable format
• Objection — Object to data processing

Since no personal data is collected or processed by us, these rights are inherently satisfied. If you have any questions or wish to exercise these rights, please contact us at the address below.

You also have the right to lodge a complaint with a supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) — www.aepd.es.

10. Data Security

We take security seriously. Because all data processing occurs locally on your device, your diary entries and emotional insights are protected by multiple layers of security:

• AES-256-GCM encryption for all diary data
• PBKDF2-derived encryption keys stored in the iOS Keychain
• Biometric authentication (Face ID / Touch ID)
• Exponential lockout on repeated failed authentication attempts
• Automatic cleanup of temporary audio files after processing

We have no remote access to any of your data.

11. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect information from children. If you believe a child has used the App inappropriately, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of the App after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: