Privacy
We can’t sell what we can’t see
Privacy here isn’t a policy promise — it’s the architecture. There’s no account and no readable data on the server, so there’s nothing to mine, sell, or leak. Keeping seven kinds of thing in one app doesn’t change that, because the server never learns which module a space belongs to either.
What the server never sees
- Your data or any content
- Names of people or spaces
- Who belongs to a space
- Your recovery phrase or any key
- An email address or password (there are none)
Three exceptions, all off until you set them up
Everything here is device-to-device except three features that need somebody else to do part of the job — a transcription service, a clock, or an inbox. Each is off until you switch it on, and each gives away as little as the job allows.
- Voice Notes sends recordings to the service you choose. A notebook is set up with its own transcription and summary services — OpenAI, Anthropic, or one you run yourself. The audio goes from your device straight to that service, never through the sync server, and the service handles it under its own terms. What it sends back is encrypted before it is stored.
- Reminders tell the server when to wake you. It holds a time and an opaque id — never what the reminder is for — and the wake-up carries no content at all. Your device decrypts and writes the notification.
- Emailed calendar invites leave the encryption. An email can’t be end-to-end encrypted to someone who holds no key, so an invite is plaintext. It reaches only people a family has saved an address for, after that family has switched invites on.
Start using The Mycelium
No sign-up, no email, no password. Open it and go — your data is encrypted before it leaves your device.