Privacy

What muxr can see

The hosted service sees account, machine and device identifiers, entitlement state, routing headers, connection timing, ciphertext sizes, and storage usage needed to run the service.

It must not see terminal text, prompts, responses, keystrokes, file contents, attachment plaintext, machine data keys, QR secrets, or your OpenAI API key. Hosted endpoints reject cleartext and unknown encryption framing once a machine is paired.

What OpenAI can see

Live Voice connects the phone directly to OpenAI. OpenAI receives audio or transcripts, the voice system prompt, tool names and arguments, and tool outputs sent to continue the conversation. Tool output can include terminal excerpts you request. Your OpenAI project retention and data controls apply.

Analytics

The website has no analytics, third-party scripts, service worker, or client-side secret. Pairing fallback pages never read the URL fragment.

Deletion

Account deletion requires a fresh email OTP. It cancels the Stripe subscription, revokes hosted credentials, machines, devices, tickets and key grants, and removes hosted entitlement. Local herdr data remains on your computer.