Privacy Policy

Effective July 6, 2026

MUST is built to need as little of your data as possible. No account is required to use the app, we show no ads, and we do not sell or share personal data with data brokers.

What stays on your device

• Your saved places and events, plans, chosen city, onboarding preferences (local/visitor mode, vibes) are stored locally on your device.
• If you add an event to your calendar, that happens through Apple's Calendar with your permission; we never read your calendar.
• If you grant location permission, your position is used on-device to show you on the map, show distances, and sort what's near you. We do not store your location.

What leaves your device

• Content requests. The app fetches places, events, deals, weather, transit status, and news for the city you're viewing. These requests carry standard technical metadata (IP address, app version) and the city — nothing identifying you personally.
• Concierge messages. When you ask the concierge a question, your message and chosen preferences are sent to our server and processed by Anthropic's Claude API to generate an answer. If you've allowed location access, your approximate coordinates are included so “near me” questions work; they're used only for that answer and never stored. Messages are not used to train models and are not linked to an identity. Don't include sensitive personal information in concierge chats.
• Purchases. If you subscribe to MUST Pro, the purchase is handled by Apple and RevenueCat. We receive a pseudonymous subscription status, never your payment details.

Services we rely on

• Supabase (EU region) — hosts our places, events and deals catalog.
• Anthropic — powers concierge answers.
• Open-Meteo, US National Weather Service, USGS, MTA — weather, alerts and transit status.
• Ticketmaster / Biletix — event listings and ticket links; tapping Tickets opens their pages under their terms.
• OpenFreeMap / OpenStreetMap (incl. Overpass), Overture Maps — map tiles, place data, and nearby essentials like pharmacies, ATMs and hospitals.
• Local news publishers (RSS) — city headlines that link out to the original articles.
• RevenueCat — subscription management (only if you purchase).

Requests to these services are governed by their own privacy policies; we send them the minimum needed to fulfill your request.

Analytics

The app currently includes no third-party analytics or advertising SDKs.

Data retention & deletion

Because your saves and plans live on your device, deleting the app deletes them. Server logs are short-lived and used only for reliability. To ask about or request deletion of anything, email us.

Children

MUST is not directed at children under 13 and we do not knowingly collect personal information from them.

Changes

If this policy changes materially, we'll update this page and the effective date above.

Contact

Questions or requests: aysegultutumlu2025@gmail.com