Last updated: July 17, 2026
muffl. is a small, independently-built tool, and this policy is written to actually explain what happens to your information — not to bury it. If anything here is unclear, email us and ask; the contact is at the bottom.
This policy applies to mufflcard.com and the muffl. app — the tool for sending short, no-pressure "quiet updates" to people in your professional life.
Account information. When you sign up, we collect your email address and password. Your password is handled entirely by our authentication provider (Supabase) — we never see or store it in plain text.
Card content. When you compose a muffl., we store the salutation, message, sign-off, cover text, and cover design you write, along with the sender name/email and recipient email you enter, and timestamps for when the card was logged, marked as sent, and (if the recipient opens their card link) seen.
Nothing else, on purpose. We don't run ad trackers, third-party analytics scripts, or fingerprinting on this site today.
We do not sell your information, and we do not share it with advertisers. The only "sharing" that happens is the intended kind: the content of a card you send becomes visible to its recipient (via the card's public link) and, if they sign up with the matching email, in their Received dashboard.
We rely on a small number of infrastructure providers to run muffl.:
Access to your sent and received cards is restricted at the database level, so only you can see the muffls you've sent, and only an account matching the exact recipient email can see cards addressed to it. No system is perfectly secure, but we've built this with real access controls, not just app-level checks.
We keep your account and card data for as long as your account is active. We haven't yet built a self-serve "delete my account" button — if you'd like your account and data removed, email us and we'll take care of it by hand.
You can ask us, at any time, to tell you what information we have about you, correct it, or delete it. We'll respond as quickly as we can — this is currently a very small team.
muffl. isn't directed at children, and we don't knowingly collect information from anyone under 13. If you believe a child has created an account, email us and we'll remove it.
As muffl. changes — new features, new infrastructure, a real paid tier — this policy will change with it. We'll update the date at the top whenever that happens. Meaningful changes (like a new way we use your data) will be called out here in plain language, not buried in a diff.
Questions, requests, or concerns about your data: rgidado2021@gmail.com.