Privacy
Invited beta · 22 September 2026
Mushy is operated by Jose Sabater. Contact jose@mundito.app about your account or personal data.
What we store
Google provides your account identifier, name, email and profile image. We store login sessions, your chats, uploaded photographs, saved finds and any locations you choose to save. Location access is optional. We also store invitation/waitlist details, feedback, request usage and limited operational logs.
How it is used
We use this information to provide your account and notebook, respond to your AI requests, manage beta invitations, prevent abuse and improve reliability. Account data is used to deliver the service you request; security and beta administration support our legitimate interest in operating it. Optional browser permissions remain under your control.
Services involved
Railway hosts the application and PostgreSQL database. Cloudflare provides domain services and R2 storage. Mushy’s R2 buckets use EU jurisdiction. Google handles sign-in. When you use real AI chat, relevant messages and photographs are sent through Opper to the configured model provider. Their processing may occur outside the EU; EU R2 storage is not a promise that all processing occurs in the EU.
Map tiles load only after you choose to enable the map provider. Tile requests disclose your IP address and viewed map area to that provider. Your saved coordinates and private photos are not published on a public map.
Cookies and retention
We use essential login/security cookies and local interface preferences. We do not add advertising trackers. Saved content remains until you delete it or close your account. We remove waitlist requests on request. Backups can retain deleted material temporarily; contact us for the current backup retention schedule.
Your choices
You can delete individual chats and finds in the app. Use Account to export your data and photos or delete your account. Contact us for corrections or removal of a waitlist request. You may also raise a privacy concern with your local data protection authority. We will update this notice when processing changes.