Your records stay on your device.

What stays on your device

Everything you enter stays in the app's storage on your phone, tablet or computer. That includes animals, plants, colonies, cohorts, feedings, health records, photos, notes, schedules, settings and your PIN. We have no copy and cannot see it.

Your device's storage is the only copy unless you make another, so please make backups. A backup is a file the app creates and you choose where to save. It never goes anywhere by itself. Calendar files and spreadsheet exports work the same way: a file you save or share.

Reminders in the App Store and Google Play apps are scheduled on your device by the device itself. No server sends them.

Usage counts, with nothing attached

If you say yes to counting (the same question as install counting below), each app sends small tallies so we know which parts of Murphy get used, at most about once an hour. If you say no, or have not answered yet, none of these are sent.

• how many times it was opened (counted at most once an hour), and whether from the Home Screen or a browser tab;
• which screens were visited, by name (for example "account" or "gear");
• which kinds of action happened, by name (for example "feeding", "backup" or "sync"), never what was in them;
• one count when a device first picks up a new version of Murphy.

The only count sent before you answer is a single one when a device first installs Murphy. It carries nothing but the version number.

Each tally is only a word and a number. It has no install number, no device details, no names, species, records, notes or values. Our server adds it to that day's totals for that app and keeps nothing else, so one person's use cannot be picked out of it.

Anonymous install counting, only if you say yes

When you first open a Murphy app, it asks whether it may count your install. It shows you exactly what it would send. Nothing is sent before you answer, and nothing is sent if you say no. You can change your answer later in settings.

If you say yes, the app sends this at most once a day:

• a random install number made on your device (not linked to your name, email or device);
• the app version;
• which Murphy app it is;
• a size band for your collection (for example "6-25"), never an exact count;
• the number of days since you installed.

That is the whole message. It never includes names, species, records, notes, locations or contact details. Our server keeps only those fields, one row per install, and discards anything else. We use it to know how many people use Murphy and whether they come back.

Sync, optional, with a Keep It Safe plan

Sync is off unless you create an account and sign in. If you do:

• Your account: your email address. You can sign in with a password, an emailed link, or Google.
• Your records: a copy of your records is kept in our database so it can reach your other devices. The exact location of a site or collection is never synced.
• Photos: with a Keep It Safe plan, a full-size copy of each animal photo you add is stored for your account with Cloudflare, so it survives a lost phone. The app re-saves the photo first, which removes the camera's hidden details, including where it was taken. Only you can reach your photos. Small preview images stay on the device.
• Where it is stored: our database is hosted by Supabase, and full-size photos by Cloudflare. Data travels encrypted (HTTPS).
• Payment: handled by Stripe on our website. We never receive your card number. We keep only the plan you are on.

You can clear the cloud copy of your records at any time from the app's settings. You can also delete your account and everything stored with it: in the app, open the gear, then Account, then Delete my account. Or ask us at murphy@atommal.com. See how account deletion works.

Other services the apps talk to

• Species lookup: when you search for a species name, the text you type is sent to iNaturalist to suggest matches.
• Our website host (Vercel) serves the apps and the website. Like every web host, it processes your IP address to deliver pages. We do not add it to install counting or sync.
• Nothing else. The typefaces and the sync library ship inside the app and are served from our own domain, so no other service sees a request from your device.

What we do not do

We do not show ads. We do not use advertising or analytics SDKs, and we do not use cookies. We do not track you across other apps or websites. We do not sell, rent or share your information. We do not use your records to train anything.

Children

Murphy is made for animal and plant keepers. It is not directed at children under 13, and we do not knowingly collect information from them.

Your choices

• Say no to counting, or switch it off later. That stops install counting and usage counts alike.
• Never sign in, and Murphy stays entirely on your device.
• Export or back up your records at any time, in files you control.
• Clear your cloud copy, or delete your account, whenever you like.
• Deleting the app deletes the records on that device. Back up first.

Changes

If this policy changes, we will update this page and its date. If a change affects what leaves your device, the app will ask you again before sending anything new.

Contact

Atommal LLC · murphy@atommal.com