← Back to Mudroom

Privacy

Your family’s information stays yours.

Last updated November 2026. Questions: john@mudroom.team

We never sell your data. Not to advertisers, not to data brokers, not to anyone.

No ads and no third-party trackers. Mudroom has no advertising, and no Google Analytics, Facebook pixels or similar tools.

You decide what Mudroom reads. It only reads messages, screenshots and emails you choose to send it. Changes suggested from messages need an adult in your family’s approval. Calendars you connect can update automatically when their providers publish changes.

You can delete your family. Email us and we’ll delete your family’s account and everything it added to Mudroom. Below is the little we keep.

What we collect

  • Your account: your email address, used to send sign-in codes. There are no passwords.
  • What you add: your family’s name and town, the names and ages of the people you add, calendar links you connect, notes on events, and ride helpers’ names and phone numbers if you add them.
  • Google Calendar, if you connect it: read-only. You choose each calendar that comes in and who it belongs to. Calendars assigned to adults start as busy times only, and you can choose to show them in full. Someone else’s personal Google calendar shared with you can only come in as busy times. For busy times, Mudroom asks Google only whether you’re free, so it never sees what those events are. For calendars you choose to show in full, Mudroom keeps event names, times and places, never descriptions, guests or links, and private events stay “Busy”. Mudroom also keeps your Google account’s email address, your calendars’ names and colors so you can choose, and a locked key that lets it keep them up to date. Mudroom looks about two months ahead for busy times and about four months ahead for calendars shown in full. Removing a calendar removes it from your family calendar. Records of earlier changes can remain in Changes. Your Google account stays connected until you disconnect it. Everyone in your family sees what you bring in. If you ask a ride helper about an event, they see its name, time and place. If your family uses calendar links or Send to Google Calendar, your events show there too, and busy times show as “Busy”. Mudroom never changes your own Google calendars. If your family uses Send to Google Calendar, Mudroom adds its own calendar for each person, with names, times, places and who’s driving, and changes only those. Mudroom’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: it’s used only to run these features for your family, never sold, never used for advertising and never used to train AI models. No one at Mudroom reads it unless you give us permission to read the specific information needed to help you, it’s needed to keep Mudroom secure, or the law requires it.
  • Ride helpers who choose to share busy times: If a ride helper chose to share busy times, Mudroom sees when they’re busy on their main Google calendar, for the next two months. Mudroom never receives their event names, places, other calendars or email address. Only your family sees it, and the helper can stop any time from the same link, which deletes it.
  • What you share with Mudroom: messages, screenshots and photos, PDFs, chat exports and forwarded emails (with their PDF attachments). AI reads each one, together with your family’s calendar, to suggest updates. We keep the original for 7 days so you can check it, then delete it. What Mudroom made from it stays after that: a short summary, short quotes used as evidence, its suggestions (including ones you didn’t approve) and your answers. Every adult in your family can see all of this; ride helpers can’t. Deleting a message in Messages removes it, its summary, quotes and suggestions, and the decisions made from it. Events it added come off your calendar, changes and cancellations it made are undone, and its to-dos and recorded answers are removed. Trips you added from it stay in Trips. While the original is still kept (7 days), you can delete only the original instead. That keeps your decisions but doesn’t free one of your family’s 100 message spaces. Archiving a message instead keeps everything decided from it and frees its space. Archived messages stay under Archived in Messages, and you can move them back. Mudroom keeps up to 100 messages per family, plus up to 400 archived.
  • Simple usage counts: how many people visit and how long pages are open, using a random number stored in your browser. No cookies, no IP addresses, no third parties. If your browser sends Do Not Track or Global Privacy Control, you aren’t counted.
  • Error reports: when Mudroom shows you an error, we record its wording and the page so we can fix it. We don’t record what you typed.
  • Feedback you send: what you write in Send feedback, with the page you were on, so the pilot host can read it and reply. It’s deleted with your family.
  • Notifications, if you turn them on: your phone or browser gives Mudroom an address to send them to. Mudroom keeps it until you turn notifications off.

How we use it

  • To run Mudroom for your family: your calendar, suggestions from messages, sign-in and email you ask for.
  • To keep it working and improve it, using the counts and error reports above.
  • To contact you about your account, and occasionally about the pilot. We don’t send marketing on behalf of anyone else.

Who helps us run Mudroom

  • Cloudflare hosts the site, stores your family’s data and sends our email.
  • Anthropic (Claude) reads the messages you choose to share so Mudroom can suggest calendar updates. With it, Mudroom sends the details needed to match it: your family members’ names, your calendars’ names and their events from the past month onward (names, times and places), including Google calendars you chose to show in full but never busy-only calendars, trips, rules you’ve set and the titles and dates of earlier suggestions. Under its commercial terms it does not train its models on this data; it may keep it for a limited time under those terms.
  • Google provides calendar access only when you or a helper connect it. Mudroom reads what’s described above and doesn’t send your family’s data to Google, except the calendars you choose to show there.
  • Stripe handles payments if you subscribe. Your card details go to Stripe, never to us.
  • Apple, Google, Microsoft or Mozilla deliver notifications to your phone or browser if you turn them on. Notification contents are encrypted, so they can’t read what a notification says.
  • When you tap Directions, the event’s place is sent to Apple Maps or Google Maps to open directions.
  • We share information only with these services, to run Mudroom, or when the law requires it.

Children

  • Mudroom is for parents and caregivers. Children don’t have accounts or sign in. A parent adds a child’s first name, age and activities to organize the family’s schedule.

Keeping it safe

  • Everything travels over encrypted connections. Sign-in codes and session tokens are stored only in scrambled (hashed) form.
  • Only adults in your family can see your family’s calendar and messages in Mudroom. The pilot host sees account details, simple counts and whether each connected calendar is updating (its provider and, if it isn’t, why), not your calendar or messages. The host can ask a calendar to refresh without seeing what’s in it. Ride helpers see only the ride they’re asked about. Google sign-in details are stored encrypted. Stopping or disconnecting removes them from use at once. If Google doesn’t confirm right away that Mudroom’s access is removed, we keep a sealed copy only to retry removing Google access for up to seven days. We delete it at the next scheduled cleanup, normally within 15 minutes after that.

Your choices

  • Remove people, calendars and rules any time in Crew. Disconnect phones you’ve connected. Disconnect Google in Calendars; Mudroom stops using its stored Google sign-in and removes its access in your Google Account, unless another Mudroom connection still uses that Google account. Calendars you brought in stop updating, and you can remove them. You can also remove Mudroom’s access in your Google Account’s security settings.
  • To delete your family’s account, email john@mudroom.team from your account’s email address. We delete your family’s calendar, messages, saved emails, photos and PDFs, rides, Crew and sign-ins, and ask Google to remove Mudroom’s access to any Google account only your family uses. Afterward we keep a record that the deletion happened (counts, no names) and anonymous usage counts. If you connected Google, we keep a sealed copy only to retry removing Google access for up to seven days. We delete it at the next scheduled cleanup, normally within 15 minutes after that. You can also remove Mudroom yourself in your Google Account. Cloudflare keeps up to 30 days of database recovery history. We delete exported recovery copies within 30 days of their capture date. A few copies aren’t deleted with your family: emails in our own mailbox (error alerts and join requests can name your family), Anthropic’s and Cloudflare’s own logs for as long as they keep them, and that recovery history, which can also hold the sealed Google sign-in.
  • If we change this policy in a way that matters, we’ll email you first.