Every connection Mouture makes
Mouture doesn't need a server to work. It contacts a few anyway. Here is every one of them, when it fires, why, and whether you can switch it off.
The list
Seven connections, ordered from least avoidable to most. The two at the top are the uncomfortable ones, so they go first rather than at the bottom.
| Host | When | Why | Avoidable |
|---|---|---|---|
api.revenuecat.com |
Every launch, for everyone — free users included. | Mouture asks whether this install has an active Pro subscription. RevenueCat receives a pseudonymous app-user identifier, not an account of yours. | No |
firebaseremoteconfig.googleapis.comfirebaseinstallations.googleapis.com |
When you tap Download for the assistant's model — not at launch. | Checks the model catalogue (current URL, version, size, checksum) so a model can be corrected without shipping an app update. Firebase attaches an installation identifier. | No (but only Pro users ever reach it) |
huggingface.co |
Once, when you tap Download. ~557 MB. | Fetches the assistant's model file. It's a plain file download; the checksum is verified locally afterwards. Nothing about you is sent beyond the usual request metadata. | Yes — don't upgrade, or upgrade and never download |
Your mail serverimap.gmail.com, outlook.office365.com, or whatever you type in |
Every 30 minutes, once you've connected an account. | Fetches your mail over IMAP. Credentials are stored on the device, encrypted with the Android Keystore. This traffic goes to your provider — never through anything of ours. | Yes — email is off until you add an account |
api.open-meteo.com |
Weather refresh, only with the weather widget placed and coarse location granted. | Turns an approximate location into a forecast. No API key, no account, no precise GPS. | Yes — deny location or drop the widget |
| Google Play Billing | Purchase and restore only. | Runs the transaction. Handled by Google Play, as for any paid Android app. | Yes — don't buy anything |
| Firebase Analytics Firebase Crashlytics |
Never, unless you turn it on. Off by default, and never active in debug builds. | Anonymous usage counts and crash stacks, to find out what breaks. Turning it off also discards whatever was queued locally. | Yes — opt-in, and revocable at any time |
That's the whole list. If you capture Mouture's traffic and see a host that isn't on this page, that's a bug and we want to hear about it — tell us and we'll either fix it or add the row.
And one from this website
The table above is about the app. This site is separate, and it makes exactly one request that isn't a font or a screenshot: if you submit the alpha form on the home page, the browser posts your address to firestore.googleapis.com — our own Firebase project, not a mailing-list provider. Nothing is sent unless you submit it. There is no analytics script, no cookie and no tracking pixel on any page here; the fonts are self-hosted precisely so that loading the site contacts nobody. What happens to that address afterwards is in the privacy policy.
What never appears in any of that traffic
- The contents of your notes, or their titles.
- Your messages, your contacts, or your calendar events.
- The list of apps you have installed, or when you open them.
- Anything you type to the assistant, and anything it replies.
- Your patterns, routines, reminders or home screen layout.
None of that is a policy promise about deleting data on a server. There is no server: those things are read, computed and stored on the device, and the code has nowhere to send them.
Verify it yourself
The point of the list above is that you don't have to believe it. Two checks, in increasing order of effort.
1. Airplane mode, two minutes
Turn the network off completely, then use the app.
- Still works: the home screen, the drawer and its suggestions, folders, search, notes, calendar, contacts, digital wellbeing, reminders — and, once the model is installed, the whole assistant: chat, semantic search, notes actions, the wellbeing narration.
- Stops working: the weather widget (it needs a forecast), fetching new mail, buying or restoring Pro, and downloading the model if you haven't yet.
If an on-device assistant were quietly calling an API, this is where it would fall over. It doesn't.
2. Watch the packets
Airplane mode proves things work offline. It doesn't prove what happens when you're online — for that you need to look at the traffic. PCAPdroid is free, open source, and needs no root: it runs as a local VPN and logs every connection per app.
- Install PCAPdroid, set the target app to Mouture, and start the capture.
- Use Mouture normally for a while — open apps, write a note, search, run the assistant.
- Read the connection list and compare it against the table above.
On a fresh install with no email account, no weather widget and analytics left off, a normal session should show api.revenuecat.com and nothing else. Add the model download and you'll see huggingface.co and the two Firebase hosts, once. Nothing on this page requires you to trust us: it's all observable from outside the app.
What we don't claim
Being straight about the ceiling matters more than one extra adjective.
- Mouture is not open source. You can't read the code, and the Terms of Use don't grant you the right to decompile it.
- The builds are not reproducible. You can't rebuild the APK from source and check it matches the one on Google Play.
- There has been no third-party audit. No external firm has reviewed the privacy claims on this site.
So we don't describe Mouture as auditable — for this audience that word means something specific, and we haven't earned it. What we offer instead is this page, kept accurate, and a packet capture that anyone can run in ten minutes and publish if it disagrees with us. That's a weaker guarantee than open source. It's a stronger one than a marketing adjective.