Privacy Policy

Effective 2026-10-23

MuMu Labs operates First Guest and handles personal data as described below.

1. What we collect and why

DataPurposeRetention
Google account email and identifierSign-in; adding you to a tester list (shared with that app’s developer)Until you delete your account
Nickname, 14+ confirmation, consent timeUsing the Service; age restrictionUntil account deletion
Check-in dates and notes, proof screenshots, feedback14-day participation record, feedback to developers, credit settlementUntil account deletion
SDK ping: pairing token, package name, app version, date receivedConfirming participation by app launchesUntil account deletion
HMAC of IP address and browser string (raw values are not stored)Preventing multi-account and self-testing abuse30 days
Credit ledger, notifications, reportsRunning the ServiceUntil account deletion

We do not collect device IDs, advertising IDs, location or contacts.

2. Sharing

3. Processors and international transfer

RecipientRoleLocation
Supabase Inc.Auth, database, file storageThe Supabase cloud region configured for the Service
Vercel Inc.Web hosting and server executionVercel regions including the US
Google LLCGoogle sign-inUnited States

4. Your rights

You can ask to access, correct, delete or stop processing your data at mumulabs7@gmail.com. On account deletion we erase the data above without delay, except where law requires retention.

5. Security

Encryption in transit, row-level access control, private storage for proof screenshots (shown only via short-lived links), and no storage of raw IPs.

6. Cookies

Only essential cookies to keep you signed in. No advertising or analytics cookies.

7. Contact

MuMu Labs · mumulabs7@gmail.com

8. Changes

We will post changes on the site 7 days before they take effect.