mootmoot

Privacy

mootmoot is a small, invite-only app with one admin. This page says what it takes in, who handles it, who can see it and how long it’s kept. If anything here is unclear, ask the admin.

What mootmoot takes in

  • Gmail, once you connect it: every email that lands in your inbox or that you send, including the full text, who it’s from and to, and the names, types and sizes of attachments. When you connect, you can also have it scan recent mail. While writing a reply, or answering a question you ask in the chat, it may search your mailbox (including mail from before you connected) and Google Calendar for facts, and it creates calendar events you approve. Attachment files stay in Gmail and are fetched when needed; files you upload to a draft are kept until the draft is sent.
  • WhatsApp, once you link it: every message in every chat your account can see, group chats included, from the moment you link it (older messages are not imported). Photos, voice notes and other files in those chats are copied to private storage so you can open them from your tasks. Replies you write in mootmoot are sent from your account.
  • Other people in your chats. Linking WhatsApp or Telegram brings in what other people write to you and in your groups, and it goes to the AI like your own messages do. They aren’t told, so you may want to let the people closest to you know you use an assistant that reads your chats.
  • Telegram, once you sign in: every message in every chat your account can see, group chats and Saved Messages included, from the moment you sign in (older messages are not imported, though a question you ask in the chat can search your older Telegram messages: they aren’t imported, but the answer, with a short line from each message it used, is kept with your question; channels and secret chats are left alone). Photos, voice notes and other files in those chats are copied to private storage so you can open them from your tasks. Replies you write in mootmoot are sent from your account.
  • Web chat: what you type into the chat box in the app, including questions about your messages, which mootmoot answers by searching the emails and chat messages it holds.
  • What you add yourself: tasks, notes, feedback, bug reports, and any site logins you save (those are stored encrypted).

What happens to it

Emails and messages are sent to Anthropic’s AI model, Claude, to sort them, summarise them, turn them into tasks, answer your questions about them and write draft replies. PDFs attached to emails that may need something from you are sent to the AI too, and a short summary of what each one says is kept with the email (and deleted with it). Other files and photos are not sent to the AI, only their names and types. If you approve one of the assistant’s plans that uses a website, it opens that site in a browser run by Browserbase, may sign in with a site login you saved, and the AI reads the pages and makes any changes the plan you approved describes. Those browser sessions are not recorded. When a reply or a plan needs a public fact (a venue’s address, a company’s website), Claude may search the web for it. Those searches are about public things, never about you or the people you know.

The text of each task, and of the emails behind them (up to a few pages each), goes to Voyage AI, which turns it into numbers (embeddings) so mootmoot can spot duplicate tasks and find emails like ones you have dealt with before. Anthropic and Voyage AI don’t use what mootmoot sends them to train their models. Nothing is sold or used for advertising.

When something in mootmoot breaks, an error report goes to Sentry so the admin finds out: the kind of error, where in the code it happened, the address of the page it happened on (without anything after a “?”) and a short error message. It never says who you are, and email addresses are masked, but an error message can occasionally quote a few words of the text mootmoot was working on.

Each night mootmoot also learns facts about you, such as your work, the people and places in your life and your interests, so it can sort your mail and write replies with that in mind. It learns only from what you write yourself (email and messages you send, notes to yourself, notes you leave on tasks) and from mail you act on, and you can see where each fact came from on About me. It never keeps ID, account or card numbers, passwords or codes. Health, religion, politics, sexuality and ethnicity are kept only when you say them yourself, and those facts are never used in replies to other people.

Who can see it

  • You. Other users of mootmoot can’t see your data.
  • The admin console shows no content. It shows that an email arrived and when, and whether processing worked, but never subjects, email text, tasks or drafts.
  • The admin can’t sign in as you. Once you’re invited, the admin console can’t change the email address you sign in with or give your account a password.
  • The admin runs the server and the database, so they could technically read your data by going out of their way to, for example by querying the database directly. That includes the key that unlocks the site logins you save, and the keys that keep your WhatsApp and Telegram connected. They don’t look by default. If they need to see something to fix a problem, they’ll ask you.
  • Feedback you send goes to the admin. If you tick “Include this page”, it also carries the page you were on, the task you had open, your browser and screen size, and any recent errors on the page, and sending it is asking them to look at that task, including the messages it came from. Leave it unticked and only what you wrote is sent. Claude helps with feedback too: bug reports and ideas are given to it to start on a fix, and questions to draft a reply. Bug reports and ideas carry your first name so the admin can see whose report it is, and, if you ticked “Include this page”, the task you had open with short excerpts of the messages behind it. Your email address is never included.
  • Copies of what was sent to the AI and what came back are kept for 30 days so a bad result can be reported, then deleted. If you file a bug report about a task, the copies for that task are kept until the report is dealt with.

How long things are kept

  • Emails, WhatsApp and other messages, their photos and files, tasks and drafts: until you delete them or your account.
  • Copies of AI prompts and responses: 30 days. What each step decided (a category, a one-line summary, why a task was or wasn’t made) is kept with the email until you delete it, so mootmoot can show why a task exists.
  • Daily briefings: 30 days.
  • Cookies from websites the assistant signed in to for you: kept at Browserbase, so you stay signed in, until you delete your account.
  • Server logs record ids and timings, with email addresses masked. Deleted data can linger in the hosting provider’s database backups for a short time before they roll over.

Companies that handle your data

Anthropic
The AI model (Claude) that reads emails and messages to sort them and write drafts.
Voyage AI
Turns task and email text into numbers (embeddings) used to spot duplicate tasks and find similar emails. It doesn’t train on that text.
Google
Gmail and Google Calendar, which mootmoot reads and writes for you, and “Sign in with Google”.
WhatsApp (Meta)
mootmoot connects to your WhatsApp as a linked device, the way WhatsApp Web does, to read your chats and send the replies you write.
Telegram
mootmoot signs in to your Telegram as a session, the way Telegram Desktop does, to read your chats and send the replies you write.
Browserbase
Runs the web browser the assistant uses on a website when you approve a plan, and keeps that site’s cookies so you stay signed in. Recording is off.
Amazon Web Services
Stores the photos, voice notes and files from your WhatsApp and Telegram chats, in a private bucket (Amazon S3).
Sentry
Receives error reports when something breaks: what went wrong and where, with email addresses masked.
Heroku
Hosts the app, its Postgres database and Redis queue, and the programs that keep your WhatsApp and Telegram connected.

App notifications on your phone or browser pass through your browser maker’s push service (Apple, Google or Mozilla) encrypted, so they can’t read them.

Data from your Google account

mootmoot’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In practice, your Gmail and Google Calendar data is used only to provide mootmoot’s features to you. It is passed on only to the companies listed above, and only to provide those features. It is never sold, never used for advertising, and never used to develop, improve or train generalised AI or machine-learning models. People don’t read it except as described under “Who can see it”.

Google’s “unverified app” warning

mootmoot’s Google sign-in is published but not yet verified by Google, a review Google runs for apps that ask for Gmail access. Until then, Google shows a warning that the app isn’t verified when you connect Gmail. That’s expected.

WhatsApp’s terms

WhatsApp’s terms don’t allow unofficial apps like mootmoot to link to a personal account. WhatsApp could restrict or ban an account because of it, so only link WhatsApp if you accept that risk.

Your controls

  • Disconnect Gmail in Settings: removes mootmoot’s access at Google and stops new mail coming in. Mail already imported stays until you delete your account. You can also remove access from your Google account.
  • Disconnect WhatsApp in Settings: logs mootmoot out of your WhatsApp, so it disappears from Linked devices, and stops new messages coming in. Messages already imported stay until you delete your account. You can also remove it yourself under Linked devices in WhatsApp.
  • Disconnect Telegram in Settings: logs mootmoot out of your Telegram, so it disappears from Devices, and stops new messages coming in. Messages already imported stay until you delete your account. You can also end the session yourself under Settings → Devices in Telegram.
  • About me: see, correct and remove the facts and mail-handling rules mootmoot has learned. Anything you remove is kept out of what it learns from then on.
  • Delete your account in Settings: deletes everything above, including messages, photos and files, tasks, drafts, AI copies and bug reports, removes Gmail access at Google, logs mootmoot out of your WhatsApp and Telegram, and deletes saved website cookies at Browserbase.