WHAT WE HOLD
Plain English. If anything below contradicts what you actually experience, the experience is the bug — please email me at jimmy.kaian.ji@gmail.com.
If you don’t make an account, Mull stores nothing about you on our servers. The quiz runs entirely in your browser and we don’t see your answers.
If you make an account, we hold:
- Your email address (used only to sign you in and to send you the email reminders you’ve opted into).
- The dimensional positions, archetypes, and dilemma responses you save — i.e. the actual content of your engagement with Mull.
- Optional public-profile fields you fill in (handle, display name, what’s shown on your public page) — these you control directly.
- Subscription state (free vs Mull+) once subscriptions are live.
- The IP address you connected from, hashed with a salt — kept for 24 hours, only to enforce rate limits. We don’t store raw IPs.
We don’t collect: location data, contacts, browsing history, fingerprints, or anything from third-party trackers. Mull has no analytics SDK that records what you click. The only telemetry is Vercel’s privacy-respecting page-view counter, which doesn’t set cookies.
Three places use AI: the dilemma analyzer, the philosopher debate generator, and (for Mull+ subscribers, when that feature ships) the year-end retrospective. In each case, the text you wrote is sent to Anthropic’s Claude API, processed, and the result is stored on your account. We don’t train any model on your data. Anthropic’s data policy applies to the in-flight API call; we don’t retain anything beyond what’s necessary for you to see it again on your account.
Full technical detail — exact prompts, exact data flows — is on the methodology page.
- No ads. Ever. No display ads, no sponsored content, no affiliate links sneaked into archetype pages.
- No selling your data. Your reflections are between you and the model. We have no business relationship that would make selling them attractive even if we wanted to.
- No tracking pixels in emails.Email reminders are plain HTML/text. We don’t know if you opened them.
- No third-party advertising cookies.Mull sets only what’s required to keep you signed in.
We set: a Supabase session cookie (so you stay signed in), a small locale cookie (so the site remembers your language), and a one-time onboarding-dismissed cookie (so we don’t repeat the welcome overlay). That’s it. No analytics, no advertising, no tracking.
By default, your account is private. Your archetype, your map, your dilemma responses — only you see them. The public profile settings let you opt in to making any combination of these visible at mull.world/u/<handle>. Default is everything off; you choose individually what to share.
Maintainer (me, Jimmy) can technically see anything stored in our Supabase database. I look at this only to investigate bugs and abuse. I don’t read user diaries, dilemmas, or chats for fun. The infrastructure is hosted on Vercel and Supabase; their staff have access to the underlying systems under their respective security policies.
Three kinds of email may go out, all opt-in:
- Daily dilemma reminder, at the local hour you choose.
- Sunday weekly digest of your past 7 days.
- One-time courtesy email if a streak of 3+ days breaks.
Plus a single welcome email when you first sign up. Turn any of these off in account settings.
You can:
- Download everything we have on you as a single JSON file from account settings.
- Delete your account outright. Same place. We wipe every user-scoped row across all our tables and remove your sign-in record. Anonymous feedback you submitted is kept (the words remain; your identifier disappears).
- Object to anything specificby emailing me. I’ll respond.
Children.Mull is not designed for users under 13. If you’re under 13, please don’t make an account.
Changes.If this policy changes materially, signed-in users will get an email. The page is dated at the top so you can always check what’s current.
Contact. Email jimmy.kaian.ji@gmail.com. I read every message.
Last updated: May 10, 2026. ← Back to Mull