Privacy

How Muna handles your data.

Plain language. Only what is true today.

Last updated · 17 May 2026

1. What this notice covers

This notice covers the Muna landing site at muna.smalausnir.com and the early-access waitlist that you can join from it. The Muna mobile app is not yet released. When it launches, this notice will be extended to cover the app — and you will be told what changed before the new version takes effect.

2. Who is responsible

Smalausnir ehf.
Reykjavik, Iceland
Contact: muna@smalausnir.com

Smalausnir ehf. is the data controller for personal data processed through Muna. We process personal data in accordance with the EU General Data Protection Regulation (2016/679, “GDPR”) and the Icelandic Act No. 90/2018 on Data Protection and the Processing of Personal Data.

3. What we collect, and only that

When you submit the waitlist form, we receive and store:

Independently, our hosting provider Cloudflare logs technical request data (your IP address, user-agent, request path) for security and abuse-prevention purposes. We do not have access to those logs beyond aggregate analytics; Cloudflare’s retention is described in their privacy policy.

We do not use advertising trackers, analytics cookies, fingerprinting scripts, or any third-party widgets on this page. The page sets no cookies.

4. Why we process it, and on what legal basis

We process your email address to add you to the Muna early-access list and to email you once — at most a small handful of times — about the launch. Legal basis: your consent (Article 6(1)(a) GDPR), given by submitting the form. You can withdraw consent at any time (see §7).

5. Who else sees it

Your email address is stored on our behalf by Resend (Resend Inc., USA), an email-sending platform that we use to manage the waitlist. Resend is the only third party that receives the data you submit. Resend acts as our data processor under a data-processing agreement and complies with the EU-U.S. Data Privacy Framework. Their privacy policy is at resend.com/legal/privacy-policy.

We do not sell, rent, or share your data with anyone else. We do not pass it to advertisers, data brokers, or social media platforms.

6. International transfers

Because Resend is established in the United States, your email address is transferred outside the European Economic Area when it is stored with them. This transfer is protected by Resend’s certification under the EU-U.S. Data Privacy Framework as well as by standard contractual clauses.

7. How long we keep it

We keep your email on the waitlist until one of the following happens, whichever is sooner:

8. Your rights under GDPR

You have the right to:

To exercise any of these rights, email muna@smalausnir.com. We will respond within 30 days as required by GDPR. There is no charge.

9. The supervisory authority

The relevant data protection authority is Persónuvernd (the Icelandic Data Protection Authority), Rauðarárstígur 10, 105 Reykjavík, Iceland. Website: personuvernd.is. You have the right to lodge a complaint there if you believe your data protection rights have been violated.

10. Children

Muna is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child has submitted their email to our waitlist, please contact us and we will delete it.

11. Changes to this notice

If we materially change how Muna handles your data — for example when the mobile app launches with cloud sync — we will update this page and email everyone on the waitlist before the change takes effect. The “Last updated” date at the top will always reflect the current version.