Privacy Policy

Information we collect

What we do collect

• Email address and name (for account creation and communication)
• Payment information (processed securely by Lemon Squeezy; we do not store card details)
• Recipe metadata (transformation steps only, zero user data included)
• Usage analytics (page views and feature usage patterns)

What we do not collect

• Your data files
• CSV contents or any data being cleaned
• Personally identifiable information from your files
• Any data that passes through Mungr's processing engine in your browser

How we use your information

We use the information we collect to:

• Provide and maintain the Mungr service
• Process subscription payments
• Improve our product and develop new features
• Send product updates and important service notifications

Data storage

Account data (email, name, subscription status, and recipe metadata) is stored in a secure database with encryption at rest and in transit. Your data files are never transmitted to or stored on our servers.

Third-party services

We work with the following third-party services:

• Lemon Squeezy: Payment processing. Your payment details are handled directly by Lemon Squeezy and are subject to their privacy policy.
• Umami: Privacy-friendly, self-hosted analytics. Umami does not use cookies and does not collect personal data.

Data retention

• Account data is kept until you request deletion
• Recipes are kept until you delete them or close your account
• Analytics data is aggregated and cannot be tied to individual users

Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your account data

To exercise any of these rights, contact us at hello@getmungr.com.

Cookies

• Session cookie: Necessary for authentication. This cookie is required for the service to function.
• Affiliate cookie: Set when you arrive via an affiliate link (?aff=...) so a purchase can be attributed to the affiliate who referred you. It is non-essential and only stored when an affiliate reference is present.

We do not use advertising or analytics cookies. Our analytics provider, Umami, is self-hosted on our own infrastructure, so analytics data stays on our servers and never leaves our system or reaches a third party. Umami is fully cookieless and collects no personal data, so no consent banner is required.

HIPAA notice

Mungr is not a covered entity under HIPAA. However, Mungr helps users maintain HIPAA compliance by keeping all data processing local to your browser. No Protected Health Information (PHI) is ever transmitted to, received by, or stored on any Mungr server.

GDPR compliance

We are committed to compliance with the General Data Protection Regulation (GDPR). We collect only the minimum data necessary to provide our service, we obtain explicit consent before processing, and we provide clear mechanisms for data access, correction, and deletion. Our analytics provider (Umami) is self-hosted and fully GDPR compliant.

Changes to this policy

We will notify you of any material changes to this privacy policy at least 30 days in advance via email. Continued use of the service after the effective date constitutes acceptance of the updated policy.

Contact

If you have questions or concerns about this privacy policy, contact us at hello@getmungr.com.