Effective: 5 October 2026
Mugula works without creating a Mugula account. Editing happens on your device. Normal Mugula delivery encrypts your media before upload. We use limited referral analytics to understand how people discover Mugula through messages from friends. Mugula does not show ads, sell referral data, or share it with advertisers.
Mugula uses your camera and photo library only so you can capture or choose a photo or video to edit. All editing (drawing, stickers, captions, and filters) happens entirely on your device.
Some Mugula camera effects (face filters and face-warp effects) need to know where a face is on screen in order to place a sticker or distortion correctly.
VNDetectFaceLandmarksRequest) to compute the on-screen positions of
facial landmarks (the outlines of eyes, nose, and mouth) for the current camera frame or
the photo you are editing.Mugula creates a random, app-specific identifier on your device. The sending device's identifier is included in each Mugula message. When a newly observed recipient successfully opens a received photo or video, Mugula can send the sending and receiving devices' identifiers, the first-view time, the reporting week and month, and the referral format version to Apple CloudKit. We use this to measure how Mugula spreads and avoid counting the same recipient repeatedly. These records measure first views, not verified downloads or verified people.
These identifiers are pseudonymous, not anonymous. They contain no name, phone number, email address, advertising identifier, or hardware address. Mugula does not read your address book, message text, or location. A referral record links a sending and receiving device. CloudKit also stores normal record timestamps and an app-scoped creator reference. Referral records are separate from the encrypted media and its decryption keys.
The identifier and credited referral are stored on your device, including in Keychain when available, and may survive reinstallation. Referral records are retained for historical reporting until removed by the developer. They have no automatic deletion schedule and are not subject to photo or video expiry timers.
We do not combine this information with data from other companies for targeted advertising or advertising measurement, and do not share it with data brokers.
CloudKit stores the encrypted file, a random media identifier, whether it is a photo or video, creation time, and CloudKit's record metadata. Where screenshot or screen-recording detection is available, Mugula may store the event type and time linked to the media identifier so the sender can be told. This does not upload the screenshot or recording. Detection cannot prevent someone from making a separate copy of your media.
CloudKit is provided by Apple. Apple processes service and account information under its own privacy terms. We do not receive your Apple Account email address or password.
Saved filters, drafts and selected Face Swap photographs are stored locally. Camera landmarks and Face Swap correspondence stay on the device. Saved sculpt filters store the warp settings you create, not a biometric identity. Filter files leave your device only when you choose to share them. Edited photos and videos include the visible result when you choose to save or send them.
Encrypted media stored in iCloud (CloudKit) is pruned at its availability expiry (default 48 hours). View timers remove the local copies; they do not immediately delete the shared encrypted CloudKit file. Cleanup runs when participating devices use Mugula; deletion can be delayed while devices are offline or the app is not running. Local cached copies on your device are removed on the same per-send expiry; any local file without a recorded expiry is cleared after a 14-day fallback limit at the latest. You can shorten this or clear the cache at any time from the Mugula app's Storage settings.
You can delete local drafts and saved filters from their galleries and clear media caches from Storage settings. This does not remove copies that recipients saved or standard attachments sent with Compatibility mode. To request removal of referral records, email ddilanchian@gmail.com with the Mugula ID shown in Storage and Privacy settings. Do not send us your private media or decryption keys.
Mugula is not directed at children under 13 and does not knowingly collect personal information from them.
If this policy changes, the updated version will appear on this page with a new effective date.
Questions? Email ddilanchian@gmail.com.