muretabi

Privacy Policy

Effective date: 9th August, 2026

Operator: Pranav Upadhyay

Contact: hello@muretabi.com

muretabi is a real-time "trip map" for groups travelling together: members of a trip share their live location with each other, talk by push-to-talk, and see distance/ETA to a shared destination. Location sharing is the core function of the app, so please read this policy carefully.

What we collect and why

Data What Why Shared with
Account Your name, email, and profile picture from Google Sign-In, or your name and email from Sign in with Apple — which may be a private relay address you can turn off at any time To sign you in and show your name/avatar to your trip group Stored in our backend (Supabase)
Precise location GPS latitude/longitude, heading, speed, accuracy The core feature — shown live to the other members of your trip; used for distance/ETA Other members of the same trip; map/routing providers (see below)
Microphone / voice Live push-to-talk audio Real-time voice to your trip group Streamed live to trip members via LiveKit; not recorded or stored
Trip data Trips you create/join, membership, leaderboard snapshots To run the trip and show the dashboard Members of the relevant trip
Usage analytics App events (screens viewed, actions), device/app info; website page views on muretabi.com To understand usage and improve the app and website PostHog (app analytics); Google Analytics (website analytics, via Google Tag Manager)
Diagnostics Crash reports, error logs, device/app info To find and fix bugs Sentry (crash-reporting processor)
Feedback Any feedback / bug report you submit (text, app version, platform) To respond and improve Stored in our backend

We do not sell your personal data.

How your location is used and shared

Data retention

Third-party processors

We use the following services to operate muretabi:

Cookies and on-device storage

This section is about muretabi.com, the website. The app does not use cookies.

The rule that matters here is about storing anything on your device — not just cookies. A browser’s local storage counts the same way, so both are listed below.

What Type Purpose Needs your consent
mtb_consent Local storage Remembers the choice you made below, including if that choice was “reject”, so we stop asking No — strictly necessary
mtb_vid Local storage A random visitor id, so a repeat visit is recognised as the same person. It carries no name or email. If you join the waitlist it is stored next to your email so we can tell which visit led to a signup Yes
_ga, _ga_* Cookie (Google Analytics) Measures how many people visit, where they arrive from, and which parts of the page they use Yes

Until you accept, nothing in the “yes” rows is written. Analytics still count the visit, but without a cookie and without an identifier kept on your device, so we cannot tell one visit from another. Google Analytics calls this consent mode; the effect is that we see totals, not people.

Changing your mind. Use the Cookie settings link in the website footer at any time. Choosing reject after having accepted deletes the visitor id from your browser. You can also clear site data in your browser, which removes everything above, including the record of your choice — so you will be asked again.

We do not use cookies for advertising or share them with ad networks. Google Analytics is configured through Google Tag Manager; see Third-party processors for who receives what.

Security

Data is encrypted in transit (HTTPS/TLS). Access to trip data is restricted by server-side row-level security so only members of a trip can read its data. No system is perfectly secure, but we take reasonable measures to protect your information.

Your rights

You can request access to, correction of, or deletion of your personal data.

Deleting your account: open the app → tap your profile picture → Edit profile → Delete account. This immediately and permanently erases your account and data (see Data retention for what is kept).

Full instructions, including how to request deletion if you can't access the app, are on our account-deletion page. You can also email hello@muretabi.com.

Depending on your region (e.g. EEA/UK, California), you may have additional rights under GDPR/CCPA.

Indian residents: under the Digital Personal Data Protection Act, 2023 (DPDP Act) you have the right to access information about your personal data, correct inaccurate data, erase your data, and nominate a person to exercise your rights in case of death or incapacity. Contact our Grievance Officer to exercise these rights.

Children

muretabi is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If we become aware that a child below this age has provided personal data, we will delete it promptly.

Advertising

muretabi contains no advertising and no ad SDK. Nothing in the app collects a device advertising identifier. If that ever changes we will say so here, and update the app's store data-safety declarations, before any ad ships.

Changes to this policy

We may update this policy as the app evolves. We will post the updated version here and change the effective date above; significant changes will be highlighted in-app.

Grievance Officer

As required under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023:

Name: Pranav Upadhyay

Email: hello@muretabi.com

Response time: within 30 days of receipt of the complaint.

Contact

Questions or requests: hello@muretabi.com