Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Sonder ("Sonder", "we", "us" or "our"), a sole operator based in Australia, collects, uses and protects your information when you use Mute (the "Service"), a web app for capturing thoughts and tasks and organising them on a spatial board. If you have any questions, contact us at tim@sondersites.com.

1. What we collect

• Account information. Your email address, and a securely hashed version of your password (handled by our authentication provider, Supabase Auth). We do not store your password in plain text.
• Your content. The thoughts, tasks, notes and board layout you create and type into Mute. This is stored per-user so it is available to you across sessions.
• Billing information. If and when paid plans are enabled, payment details are collected and processed by Stripe. We receive limited information such as your subscription status and the last few digits of your card, we do not store full card numbers.
• Technical and usage data. Basic information such as session identifiers and limited log data needed to operate, secure and improve the Service.

2. How we use your information

We use the information described above to:

• provide, maintain and improve the Service;
• authenticate you and keep your account and content secure;
• store and sync the content you create so it is there when you return;
• process payments and manage subscriptions (if you choose a paid plan);
• respond to your requests and communicate with you about the Service;
• meet our legal and security obligations.

We do not use the content you type into your board for advertising, and we do not sell your personal data to anyone.

3. Third-party processors

We rely on a small number of trusted providers to run the Service. They process data only on our behalf and under their own security and privacy commitments:

• Supabase, database, authentication and storage of your account and board data.
• Stripe, payment processing, used only if and when paid plans are enabled.
• Vercel, hosting and delivery of the application.
• PostHog, privacy-focused product analytics (EU-hosted), used to understand how the Service is used so we can improve it. We never send the content of your thoughts or boards to analytics.

These providers may process and store data on infrastructure located outside Australia. We take reasonable steps to ensure your information is handled securely wherever it is processed.

4. Cookies and sessions

We use cookies and similar local storage strictly to keep you signed in and to operate the Service (for example, session and authentication tokens). We do not use third-party advertising or tracking cookies.

5. Data retention

We keep your account information and board content for as long as your account is active, or as needed to provide the Service. If you delete your account, we delete or de-identify your personal data within a reasonable period, unless we are required to retain certain records to comply with legal, tax or security obligations.

6. Your rights

You have the right to access, correct, export or delete your personal information. Depending on where you live, you may have additional rights under laws such as the EU/UK GDPR or the California Consumer Privacy Act (CCPA), including the right to know what we hold about you, to request its deletion, and to object to certain processing. We honour equivalent requests from all users regardless of location.

To request an export of your data or deletion of your account, email us at tim@sondersites.com and we will action your request within a reasonable time. We may need to verify your identity before doing so.

7. Security

We take reasonable technical and organisational measures to protect your information, including encrypted connections and access controls through our providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any issues.

8. Children

Mute is not directed to children under the age of 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

10. Contact

For any privacy questions or requests, contact us at tim@sondersites.com.

This document is a general template provided for convenience. It is not legal advice and should be reviewed by a qualified professional before you rely on it commercially.