Murray AI Privacy Policy

Murray AI Privacy Policy

Effective date: July 27, 2026

Introduction

Murray AI LLC (“Murray,” “we,” “us,” or “our”) provides the Murray wearable, mobile applications, websites, and related services collectively referred to as the “Services.” This Privacy Policy explains what information we collect, how we use and disclose it, how long we retain it, and the choices available to you.

1. Information We Collect

Information You Provide. We may collect information that you provide directly, including: • Your name, email address, phone number, account credentials, and other account information. • Waitlist information, signup source, communication preferences, and interactions with our emails. • Voice commands, transcripts, structured notes, meeting content, translations, reminders, messages, and other content you submit. • Preferences, relationships, routines, recurring activities, or other information you ask Murray to remember. • Support requests, feedback, survey responses, and communications with Murray. • Transaction and order information if purchases become available. Payment-card information may be processed directly by a payment processor rather than stored by Murray. Information From Connected Services. If you choose to connect a third-party account, Murray may access information covered by the permissions you grant. Depending on the connected service and feature, this may include: • Calendar events and meeting information. • Email metadata or content needed to perform a feature you request. • Contacts and communication details. • Files, notes, tasks, reminders, and messages. • Account connection status and authorization tokens. • Financial account information when you intentionally connect a supported financial service. • Ride destinations, grocery selections, reservations, orders, or similar information needed for a requested feature. Supported or planned connections may include services from Google, Microsoft, Slack, Notion, Todoist, Linear, Jira, Asana, Spotify, Uber, Lyft, Plaid, and other providers. We use connected-service information to provide features you request, personalize Murray, create summaries, prepare suggested actions, and maintain authorized connections. You can disconnect supported accounts through Murray or through the third-party provider. Disconnecting an account stops new access but may not automatically delete information previously imported, summarized, or created. You may separately request deletion of that information. Audio, Transcripts, Notes, and Meetings. The Murray microphone is designed to activate when you intentionally initiate a voice interaction or recording feature. Audio may be transmitted to Murray and its service providers for: • Speech recognition. • Speaker identification or diarization. • Translation. • Summarization. • Structured-note generation. • Response generation. • Processing the action you requested. Murray may temporarily process raw audio. Depending on the feature, we may store transcripts, structured notes, timestamps, participant labels, summaries, action items, translations, and associated metadata. Meeting-recording features must be used only with appropriate notice and consent. A clearly identified recording participant or bot may join certain supported meetings. You are responsible for complying with applicable recording and consent laws and for obtaining permission from other participants when required. Device, Usage, and Technical Information. We may collect: • Device type and identifiers. • Application version and operating system. • Bluetooth connection information. • Language and time zone. • Approximate or precise location when you authorize location access. • Feature interactions. • Diagnostics and crash information. • Security and authentication events. • Request timing and performance information. • Battery, connectivity, button, microphone, and device-status events from the Murray wearable. Website and Waitlist Information. When you visit usemurray.com or join the waitlist, we may collect: • Your email address. • Signup timestamp and source. • Referring page or campaign. • Browser and device information. • Basic website-performance and form-submission information. • Interactions with Murray emails. Our website and communications providers may use cookies or similar technologies to operate forms, remember preferences, prevent abuse, measure performance, and understand campaign effectiveness.

2. How We Use Information

We may use information to: • Provide, operate, maintain, and secure the Services. • Process voice requests and generate responses. • Create transcripts, notes, summaries, translations, and action items. • Personalize responses and maintain user-directed memories. • Connect to third-party services. • Perform the reads, suggestions, prefills, or actions you request. • Process waitlist registrations, purchases, subscriptions, and support requests. • Send service messages and, where permitted, marketing communications. • Detect fraud, abuse, security incidents, and technical failures. • Diagnose problems and measure product performance. • Develop, test, and improve features. • Evaluate AI-system quality and safety. • Comply with applicable law. • Enforce our agreements and protect Murray, our users, and others. Murray is designed to request confirmation before consequential external actions. You should still review proposed actions and AI-generated information before approving or relying on them.

3. AI Processing and Memory

Murray uses artificial intelligence to interpret requests, produce responses, generate structured content, and recommend actions. When you state a preference or personal fact, Murray may identify it as a potential memory. Depending on the feature and your settings, the memory may be stored so Murray can provide more relevant responses later. Stored memories may include preferences, routines, relationships, frequent destinations, recurring meetings, and similar contextual information. You may be able to review, correct, remove, or ask Murray to forget stored memories. Deleting a memory does not necessarily remove the original content from a separate transcript or note unless that content is also deleted. AI-generated inferences may be inaccurate. You should review important information and correct stored information when necessary.

4. How We Disclose Information

Service Providers. We use service providers to host data, process audio, provide AI models, store user-directed memories, send communications, process payments, monitor performance, and support integrations. Providers used or contemplated for Murray features include: • Supabase. • OpenAI. • Anthropic. • Mem0. • Deepgram. • AssemblyAI. • Recall.ai. • Plaid. • Northfork. • Cloud-hosting providers. • Email and customer-communication providers. • Payment processors. • Analytics, security, and error-monitoring providers. • Apple and other application-platform providers. These providers may process information only as necessary to provide their services to Murray, subject to their agreements and applicable law. Connected Third-Party Services. We disclose information to connected services when you direct Murray to read from, prepare information for, open, or perform an action through those services. The third-party service’s terms and privacy policy apply to its handling of the information. Legal and Safety Disclosures. We may disclose information when reasonably necessary to: • Comply with applicable law or legal process. • Respond to lawful requests. • Investigate fraud, abuse, or security incidents. • Protect the rights, property, and safety of Murray, our users, or others. • Enforce our agreements. Business Transfers. Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable law.

5. Sale and Sharing of Personal Information

Murray does not sell personal information for money. We do not use personal information for cross-context behavioral advertising unless we provide the notice and choices required by applicable law. If our practices change in a way that creates a legal right to opt out of the sale or sharing of personal information, we will provide the required controls and update this Privacy Policy.

6. Data Retention

We retain information for as long as reasonably necessary to: • Provide the Services. • Maintain account and business records. • Protect the security and integrity of the Services. • Comply with legal obligations. • Resolve disputes. • Enforce our agreements. Retention periods vary by data type and feature. Raw audio may be retained temporarily for processing and reliability purposes. Transcripts, structured notes, memories, connected-account information, account records, and other user-created content may remain until: • You delete the information. • You delete your account. • You disconnect a feature where deletion is supported. • A feature-specific retention period expires. • The information is no longer reasonably necessary. Security and audit records may be retained for longer periods where necessary. Backup copies may remain for a limited period before being overwritten or deleted.

7. Your Choices and Privacy Rights

Depending on where you live, you may have the right to: • Request access to personal information. • Request correction of inaccurate personal information. • Request deletion of personal information. • Request a portable copy of your information. • Withdraw consent. • Object to or restrict certain processing. • Appeal a decision concerning a privacy request. • Opt out of legally defined sales or sharing. • Limit certain uses of sensitive personal information. • Exercise your rights without unlawful discrimination. California residents may have rights to know, delete, correct, limit certain uses of sensitive personal information, opt out of sale or sharing, and receive equal service when exercising their rights. You may also: • Manage microphone, location, notification, Bluetooth, and other permissions through your device settings. • Disconnect third-party integrations. • Unsubscribe from marketing emails using the link in the email. • Review or remove supported Murray memories. • Request an export of supported account data. • Request account deletion. Account deletion may include a 30-day recovery period before permanent deletion. We may verify your identity before completing a request and may retain information where legally permitted or required. To submit a privacy request, use the Contact link on usemurray.com or the privacy controls provided in the Murray application.

8. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include: • Encryption in transit. • Access controls. • Authentication requirements. • User-scoped data controls. • Security monitoring. • Audit logging. • Restricted access to production systems. • Protection of connected-account credentials and authorization tokens. No system is completely secure, and we cannot guarantee absolute security.

9. Children’s Privacy

The Services are not directed to children under 13, and Murray does not knowingly collect personal information from children under 13. If we learn that we collected such information, we will take reasonable steps to delete it. Users who are under the age of majority where they live should use the Services only with permission from a parent or legal guardian.

10. International Processing

Information may be processed in the United States and other countries where Murray or its service providers operate. Those countries may have data-protection laws that differ from the laws where you live. Where required, we use legally recognized safeguards for international transfers.

11. Third-Party Services

Third-party applications, websites, products, and services have their own terms and privacy practices. Murray is not responsible for those third-party practices. Review the third party’s policies before connecting an account or approving an action.

12. Changes to This Privacy Policy

We may update this Privacy Policy as Murray and its features evolve. We will post the updated version, revise the effective date, and provide additional notice or obtain consent when required by law.

13. Contact

Murray AI LLC. San Diego, California, United States. Website: https://usemurray.com. For privacy questions or requests, use the Contact link on our website.