Mushin

Privacy Policy

Last updated: 10 October 2026

This policy covers every project run by Seonso under the Seonso movement and Mushin, including the AI familiars that live in Telegram (for example Pap0), and the websites at mushin.space. In this policy, “we” means Seonso, the operator. “You” means the person using a project.

Contact: privacy@mushin.space

1. The short version

• We use your data only to do what you ask a project to do.
• We do not sell your data. We do not show ads. We do not use your data to train AI models.
• You can ask us to delete your data at any time.
• When you connect Google, we follow Google’s rules for user data, including the Limited Use requirements (section 5).

2. What we collect

When you talk to a familiar on Telegram:

• Your Telegram user ID and display name.
• Your messages, and the replies.
• Your voice messages. They are turned into text on our own server. We keep the text, not the audio.
• What you ask the familiar to keep: notes, reminders, timers, routines, your time zone, and choices you make with buttons.
• A diary of abilities you asked for that do not exist yet, written in general terms, so we can build them.

When you connect your Google account (only if you choose to):

• Google Calendar: your events, so the familiar can tell you about your day and add, move or cancel events when you ask.
• Gmail: your email messages, so the familiar can read and summarise them, prepare drafts, and send emails when you confirm.

On our websites: we do not use cookies or analytics. Our web host may keep standard technical logs (such as IP address and time of visit) for security.

3. How we use it

Only to provide the features you use: answering you, keeping your notes and reminders, telling you about your calendar, and handling your email when you ask. We also use error logs to find and fix problems. Error alerts sent to the operator describe what went wrong, not what you said.

4. Who processes it for us

We share data only with the services that run the projects, and only what each one needs:

Service	What for
Telegram	Delivering messages between you and the familiar.
Anthropic (Claude API)	Understanding your messages and writing replies. Content is sent to Anthropic for processing under Anthropic’s commercial terms.
Google	Calendar and Gmail, only if you connect them.
Contabo (Germany, EU)	The server where the familiar runs and stores its memory.
GitHub	Private storage for your notes, and for backups. Backups are encrypted, and the server itself cannot read them.
Cloudflare	Domain name and website delivery for mushin.space.

We do not sell, rent or trade your data, and we do not share it with anyone else, unless the law requires it.

5. Google user data

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google data only to provide the features you can see and ask for in the familiar.
• We do not use Google data for advertising, and we do not sell it.
• We do not use Google data to train AI models.
• We transfer Google data only to the processors listed above as needed to provide the features you use, for security, or to comply with the law.
• No human reads your Google data unless you ask us to, it is needed for security or to investigate abuse, or the law requires it.

You can disconnect Google at any time at myaccount.google.com/permissions.

6. Who can see your data

The familiar sees your data to help you. Seonso, as the operator, can technically access the server and the private storage. Seonso does so only to run, repair or secure the service, or when you ask. Notes a familiar keeps for you are stored as a private notebook that the operator can open to maintain it.

7. How long we keep it

• Conversations, notes, reminders and settings: until you ask us to delete them, or until you stop using the project.
• Backups: 14 days, then deleted automatically.
• Google data: we keep only what is needed to do what you asked (for example, an email you asked to save as a note). Disconnecting Google stops all further access.

8. Security

Connections are encrypted. The server accepts only key-based logins. Backups are encrypted with a key that is not stored on the server. Access to Google is limited to the permissions shown when you connect.

9. Your rights

You can ask to see, correct, export or delete your data, or to stop processing. Write to privacy@mushin.space, or ask your familiar. If you are in the EU or UK, you can also complain to your data protection authority.

10. Children

These projects are not meant for children under 16.

11. Changes

If this policy changes in a way that affects you, we will tell you (for example, through your familiar) before the change applies to your data.