Privacy Policy

This policy explains what happens to your data when you visit this website and use the app. The short version: this website sets no cookies and uses only privacy-friendly, cookieless analytics. Møt calls are peer-to-peer by default, with an encrypted TURN relay fallback when a direct connection is unavailable. Nothing is recorded unless everyone in the call agrees.

1. Who is responsible

The controller is Nico Hülscher, Boverstraße 19C, 45473 Mülheim an der Ruhr, Germany — [email protected] (see also the Impressum).

2. This website

The site is a static website and sets no cookies. It does not track you across sites or build any profile of you, and the brand fonts are self-hosted, so your browser makes no request to Google Fonts or any external font service.

For aggregate, privacy-friendly usage statistics we use Cloudflare Web Analytics, configured to exclude visitors from the EU — if you visit from the EU, you are not measured at all. It is cookieless and stores nothing on your device; for non-EU visitors it records only anonymous, aggregate metrics (such as page views, referrer, country and device type) without cross-site tracking or advertising identifiers. Where it applies, the legal basis is our legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR).

The site is hosted by Cloudflare Pages. When you load a page, the host automatically processes technical connection data (your IP address, browser/user-agent, requested URL, timestamp) in server logs, which is necessary to deliver the site securely (Art. 6(1)(f) GDPR). Cloudflare, Inc. is based in the USA, so hosting (and, for non-EU visitors, analytics) may involve a transfer of personal data to the United States, safeguarded by the EU–U.S. Data Privacy Framework (to which Cloudflare is certified) and/or the EU Standard Contractual Clauses; you can request a copy of these safeguards from us. See cloudflare.com/privacypolicy.

3. The Møt app

Møt is a small meeting room for macOS (up to five people). Audio and video flow directly between participants' Macs over a peer-to-peer mesh by default. If a direct connection fails, an encrypted TURN relay may forward the media; it handles encrypted packets and cannot decrypt the meeting audio or video. If the relay is used, turn.kveik.studio processes only the network metadata needed to route the encrypted relay traffic, including IP addresses and connection timing/traffic volume.

Nothing is recorded by default. Møt only starts on-device self-transcription when every participant explicitly agrees; the resulting transcript is kept locally on the host's Mac. If you choose optional cloud AI, Møt sends the selected meeting and canvas context to that provider for the requested feature.

Signaling is not meeting media. To establish a connection, signal.kveik.studio exchanges operational metadata such as participant identifiers, SDP/ICE candidates and IP addresses. The browser call flow also contacts Google's public STUN service at stun.l.google.com:19302 during ICE gathering, so Google receives IP-level connection metadata; see Google's privacy policy. Meeting audio and video travel over the direct or encrypted TURN media path instead. Processing the connection data is necessary to provide the service (Art. 6(1)(f) GDPR).

4. Software updates and licensing

The app checks for updates so it can keep itself signed, notarized and current. When it checks, it contacts the update feed (updates.usemot.app, hosted on Cloudflare) via the Sparkle update framework, which necessarily sees your IP address and app/OS version. This is used only to serve the correct update and is based on our legitimate interest in shipping secure software (Art. 6(1)(f) GDPR). You can disable automatic update checks in the app. License validation contacts the first-party service at license.kveik.studio, operated by kveik, and exchanges the license and app/device status needed to verify access. Update, licensing and signaling services receive operational metadata only, not meeting media.

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on legitimate interests. You also have the right to lodge a complaint with a supervisory authority. To exercise any of these, contact [email protected].

6. Changes to this policy

We may update this policy as the product or our providers change. The current version always lives at this URL, with the “last updated” date above.