Privacy Policy

Last updated: May 24, 2026

This policy describes how personal data is collected and processed in connection with the Mutal Toolkit application (iPhone and iPad) and the mutal.fr website.

1. Data Controller

Vivien Mergot, sole trader operating under the name Mutal
Business registration: 101 598 209 00019
Contact: support@mutal.fr

A postal address can be provided on written request to the email address above, as part of exercising your rights or for any official correspondence.

2. General principle

Mutal Toolkit is designed to operate mostly locally on your device. No user account is required to use the app.

An optional feature — RF project sharing between collaborators — transmits some data to our servers when you explicitly enable it by creating or joining a shared project (see §3bis). Apart from this feature, no personal data is transmitted to a remote server for commercial, advertising or analytics purposes.

3. Data processed by the application

The following data is processed exclusively on your device and are never transmitted to our servers or third parties, unless you explicitly enable RF project sharing (see §3bis):

  • Sound files and metadata created, imported or managed via the Script, Trig, Slice, Play, RF and Files modules.
  • Audio recordings when you use functions that require the microphone.
  • Photos taken for OCR (text recognition on scripts, frequency sheets, RF lists); images are processed locally and never leave your device.
  • Approximate GPS location (country only), used to pre-select the radio frequency regulation applicable to your area. Location is never stored or transmitted.

3bis. RF Project Sharing (optional)

This feature allows a user (the "project owner") to invite other people to view or modify the RF project of a shoot. It is disabled by default and enabled at the project owner's request.

Data transmitted to our servers (mutal.fr) when sharing is enabled:

  • Technical identifiers — anonymous device identifier (locally-generated UUID, not linked to your Apple ID or IDFA), room identifier (random token). Optionally, an APNs token if you enable notifications.
  • RF project content — project name, RF devices, assigned frequencies, shoot locations. Stored in compressed form on our servers.
  • Invited collaborators' contact details — first name, last name, email address and/or phone number, role. These details are entered by the project owner to generate the invitation link.

Purpose: enable collaborative synchronization of an RF project between the owner's and collaborators' devices.

Legal basis: contract performance (art. 6.1.b GDPR) for the project owner; legitimate interest (art. 6.1.f GDPR) for sending the invitation link to collaborators.

Retention:

  • As long as the shared project exists on the owner's device. When the owner deletes the project, all associated data (room, content, invitations, linked files) is automatically deleted from our servers.
  • Invitations that remain pending for more than 30 days are flagged as expired in the app and can be revoked at any time by the owner.

Security: access to a room's data relies on knowledge of a random invitation token (capability-based). Invitees' contact details are accessible only to the project owner and Mutal administrators for support and moderation purposes.

Rights of invited collaborators: if you receive an invitation to a Mutal Toolkit project, you may request the deletion of your contact details by writing to support@mutal.fr — request processed within one (1) month.

4. iOS permissions requested

The application requests certain system permissions in order to provide its features. You may deny or revoke any permission at any time from the iOS Settings; the corresponding features will then be disabled.

  • Microphone — for monitoring, triggering (Trig), audio playback (Play) and slicing (Slice) functions.
  • Camera — for optical character recognition (OCR) on production documents.
  • Location — to determine the radio frequency regulation applicable to your country. Accuracy: country only. Location is not stored.
  • Files and local storage — to read and write your documents via the Files module.
  • Local network — to discover compatible sound equipment on your Wi-Fi network (Bonjour/mDNS). No data leaves your local network.

5. Technical data collected by Apple

When you download or use the application from the App Store, Apple may collect anonymised usage statistics (App Analytics) and crash reports if you have enabled sharing of this data in your iOS Settings. This information is provided to us in aggregated and anonymous form via App Store Connect and does not allow us to identify you individually.

Apple's privacy policy: apple.com/legal/privacy.

6. Data collected through the mutal.fr website

The mutal.fr marketing site sets no advertising cookies or trackers. The following data is processed:

  • Support form: name, email address and message. This data is routed through the provider FormSubmit and received in our mailbox. It is used solely to reply to your request and kept for a maximum of twelve (12) months after the exchange is closed.
  • Public countries API: calls to /api/v1/public/countries require no personal data. Standard server logs (IP address, user-agent, timestamp) are kept for thirty (30) days for security and technical diagnostics.
  • RF project sharing API (/api/v1/sync/*) see 3bis.
  • Browser local storage (localStorage): used only to remember your display preference (iPhone or iPad) on the Tutorials page. No identifier, no tracking.

7. Legal basis and purposes

  • Performance of a contract (GDPR art. 6.1.b) — to provide the application features you use.
  • Legitimate interest (GDPR art. 6.1.f) — to ensure the security and proper operation of the website and the public API.
  • Consent (GDPR art. 6.1.a) — for sending a message through the support form.

8. Recipients and subprocessors

  • Apple Inc. — application distribution through the App Store, anonymous statistics, and delivery of push notifications (APNs) for RF project sharing.
  • FormSubmit — technical routing of the support form.
  • o2switch — hosting of the website and the public API (servers located in France).

No personal data is sold, rented or transferred for commercial purposes.

9. Transfers outside the European Union

Website data is hosted in France by o2switch. Technical data transmitted to Apple may transit to the United States as part of normal App Store operation; such transfers are governed by the mechanisms put in place by Apple (Standard Contractual Clauses, Data Privacy Framework).

10. Your rights

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights:

  • Right of access, rectification, erasure and portability;
  • Right to restrict processing;
  • Right to object;
  • Right to withdraw consent at any time;
  • Right to lodge a complaint with the CNIL (French supervisory authority).

To exercise these rights, write to support@mutal.fr. A response will be provided within a maximum of one (1) month.

11. Security

Reasonable technical and organisational measures are implemented to protect processed data against unauthorised access, alteration or destruction: HTTPS, regular updates, restricted server access.

12. Children

The application is not intended for children under the age of thirteen (13) and does not knowingly collect their data.

13. Changes

This policy may be updated. The date of the last update appears at the top of the page. Material changes will be notified in the application release notes.

14. Contact

For any question regarding this policy or the processing of your data: support@mutal.fr.