Effective Date: February 1, 2026 · Last Updated: August 6, 2026
Questions? Email us at support@mutinyapp.gg
Overview
Mutiny is a private group communication platform. We built it because we believe your conversations belong to you — not to advertisers, not to data brokers, and not to us. This Privacy Policy explains clearly and plainly what we collect, why we collect it, and what we never do.
What We Collect
Mutiny processes information needed to operate and support the service, including:
- Email address — used to create and verify your account, and to contact you about your account if necessary.
- Username — your chosen display name on the platform.
- Password credential — stored as a salted hash rather than plaintext.
- Server and channel metadata — names and structure of the servers you create or join, required for the app to function.
- Messages and uploaded files — content you choose to send or store through the service.
- Support and bug reports — information you send through support email or the public bug-report form.
- Basic connection data — IP address and device type, retained briefly for security and abuse prevention, not linked to ad profiles.
What We Never Collect
- We do not scan or analyze the content of your messages.
- We do not build advertising profiles or sell data to any third party.
- We do not track your activity outside of Mutiny.
- We do not run ads of any kind on the platform.
How We Use Your Data
- To operate, maintain, and improve Mutiny.
- To authenticate you when you log in.
- To contact you about your account (e.g., password reset, security alerts).
- To enforce our Terms of Service and prevent abuse.
We use your data only for these purposes. Nothing else.
Data Security
All data is encrypted in transit via TLS. Passwords are hashed and salted using industry-standard algorithms before storage. We do not store plaintext credentials. We review and update our security practices regularly.
Third-Party Services
We use a small number of third-party services to operate Mutiny. Each receives only the data required for their specific function:
- LiveKit — real-time voice and video infrastructure.
- Cloudflare — CDN, DDoS protection, and DNS.
- GitHub — hosting of desktop app release files.
These providers process information for their stated service functions and operate under their own applicable terms and privacy commitments.
Website Analytics and Cookies
Mutiny uses a self-hosted Plausible Analytics service to measure aggregate page visits and selected interactions, such as clicks that open the web app. Analytics may include the visited page, referrer, campaign parameters, and general browser, device, and location categories. We do not intentionally send account credentials, message contents, email addresses, files, or voice/video content to analytics.
Plausible does not use cookies. The authenticated Mutiny app uses essential cookies only to keep you logged in. We do not use advertising cookies, third-party tracking pixels, or analytics to build advertising profiles.
Your Rights
- Access: You can request a copy of the personal data we hold about you.
- Correction: You may ask us to correct inaccurate personal data.
- Deletion: You may request deletion of your account and associated personal data, subject to applicable legal and operational retention requirements.
- Portability: Where applicable, you may request a copy of your data in a portable format.
To exercise any of these rights, email us at support@mutinyapp.gg. We will respond as required by applicable law.
How to Delete Your Account
Use the account-deletion control available in Mutiny's account settings. If the control is unavailable or you cannot access the account, email support@mutinyapp.gg.
Deletion is irreversible once completed. Limited residual copies may remain temporarily in backups, security records, or records retained to meet legal obligations.
Data Retention
We retain personal data while it is needed to provide the service, investigate security or support issues, and meet applicable legal obligations. Aggregate analytics that cannot reasonably be linked to an individual may be retained separately.
Children's Privacy
Mutiny is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has created an account, we will delete that account immediately. If you believe a child's account exists, contact us at support@mutinyapp.gg.
International Users
Mutiny and its service providers may process data in countries other than your own. International transfers are handled subject to applicable data-protection requirements.
Depending on your location, applicable law may give you additional access, correction, deletion, objection, restriction, or portability rights.
Data Breach Notification
If a security incident requires notice, we will notify affected users and relevant authorities in the manner and timeframe required by applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and — for significant changes — notify you via email or in-app notification. Your continued use of Mutiny after changes take effect constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or want to exercise your data rights, please reach out:
Email: support@mutinyapp.gg