Effective date: 21 October 2026
App: Mu (Android package mu.cryptdox.com) and the website https://mu.cryptdox.com
Developer: Cryptdox, Dhaka, Bangladesh
Contact: cryptdox.ethos@gmail.com
Mu (“we”) is a messaging and social app for providers and the people they serve, operated by Cryptdox. This policy explains what we collect, why, and the choices you have. It applies to the Mu website (mu.cryptdox.com) and the Mu Android app.
Privacy policy
This Privacy Policy explains how Cryptdox ("we", "us", "our") collects, uses, stores, shares and protects information when you use Mu (the "App" or "Service"). By using Mu you agree to this policy. If you do not agree, please do not use the App.
1. Information we collect
Account information (required): your name, email address and password. Your password is handled by the Cryptdox sign-in, and we never see it in plain text.
Profile information: display name and @handle (required); category, bio, website, and profile and cover photos (optional).
Content you create (optional): chat messages, posts, comments, reactions, photos (up to 1 MB each), live-stream titles and live chat.
Connections (optional): profiles you connect with, follow or block.
Reports (optional): content or profiles you report, and the reason.
Device identifier and type: a random ID created by the App, plus the device type (for example "Chrome on Android"). Used to show your signed-in devices, to limit an account to 3 devices, and for security.
Call and live metadata: participants, start and end time, duration, and whether it was audio or video. Used for call history, missed-call notices and running the service.
Online status and last-seen time: shown to your chats and connections.
IP address, request logs and error logs: used for security, abuse prevention and troubleshooting.
We do not collect your precise or approximate location, contacts, SMS or call logs, financial or payment information, health data, or your browsing history. We do not use advertising IDs.
2. Device permissions
Camera: for video calls and live streaming. Asked only when you start or join a video call or go live.
Microphone: for voice and video calls and live streaming. Asked only when you start or join a call or go live.
Modify audio settings: to switch call audio between the earpiece, speaker and headset during a call.
Wake lock: to turn the screen off when the phone is at your ear during a call, and to keep it on during calls.
Internet: to connect to Mu services.
Notifications and full-screen notifications: to show new messages and ring for incoming calls, including on the lock screen, when the app is closed. Asked once after you sign in.
Vibrate: to vibrate for incoming calls.
Internet: to connect to Mu services.
You can deny or revoke the camera and microphone permissions at any time in your phone's settings. The rest of the App keeps working, but calls and lives can't send your video or voice.
Calls and live streams are never recorded. Audio and video are sent in real time between participants through our media servers and are not stored.
3. How we use your information
To create and manage your account and profiles.
To provide messaging, posts, comments, reactions, voice and video calls, and live streaming.
To show your content only to the audience you choose: Public, Connections, or Only me.
To send in-app notifications, for example new messages, connection requests, comments and lives.
To keep Mu safe: rate limiting, spam and abuse prevention, handling reports, and suspending profiles that break the rules.
To fix bugs and improve the Service.
To comply with legal obligations.
We do not sell your personal data. We do not show ads, and we do not use your data for advertising or profiling.
4. How your information is shared
We share information only as described here:
With other users, as you choose. Your profile, posts and lives are visible according to the audience you select. Chats are visible to their members. Your name, handle and photo are visible to people you interact with.
With service providers who process data for us under their own security and privacy terms:
Supabase: database and photo storage.
Render: hosting for the Mu backend and sign-in services.
Netlify: hosting for the Mu web app.
Cloudflare Turnstile: bot protection on sign-up and sign-in.
Google Fonts: delivering the App's font.
Firebase Cloud Messaging (Google): delivering call and message notifications to your phone. It receives a push token for your device, the sender's or caller's name, and a short preview of new messages.
MU RTC (operated by Cryptdox): real-time audio and video for calls and lives.
For legal reasons. We may disclose information if required by law, or to protect the rights, safety and property of our users or others.
On a business transfer. If Cryptdox is involved in a merger or acquisition, information may be transferred, and this policy will continue to apply.
Photos: uploaded photos are stored as files with random, hard-to-guess links. Anyone who has a photo's link can open it, so share links with care.
5. Data retention
Account, profile and content data are kept while your account exists.
When you delete content, it is removed from the Service immediately.
When you delete your account, your Mu data is deleted immediately (see section 7). Backups are replaced within 30 days.
Security logs are kept for a limited time, normally up to 90 days.
6. Data security
All data is encrypted in transit with HTTPS/TLS.
Access to systems and databases is restricted to authorised staff.
Sign-in uses short-lived access tokens, and passwords are stored only in hashed form.
No method of transmission or storage is 100% secure, but we work to protect your information and to fix problems quickly.
7. Your rights and choices
Access and correct: view and edit your profile at any time in the App.
Control visibility: choose Public, Connections or Only me for each post and live.
Block and report: block profiles and report content or profiles.
Manage devices: see and sign out your devices in Settings → Devices.
Delete your account: go to Settings → Delete my Mu account, or follow the steps at https://mu.cryptdox.com/account-deletion. This deletes every profile you own, with its posts, comments, reactions, messages, photos, lives and connections, plus your signed-in devices.
Request by email: email cryptdox.ethos@gmail.com from your account's email address. We respond within 30 days.
Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California), you may have extra rights, such as data portability or objecting to processing. Contact us to use them.
8. Children's privacy
Mu is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.
9. International data transfers
Our service providers may store and process data in countries other than your own, for example in Japan, Singapore, the United States or the EU. We take steps so your data stays protected as described in this policy.
10. Changes to this policy
We may update this policy from time to time. We will post the new version at https://mu.cryptdox.com/privacy and update the effective date. For significant changes, we will also notify you in the App.
12. Advertising ID
None