Legal
Privacy Policy
Last updated 6 November 2026
Muster is a coordination app for disaster response, relief and volunteer organizations. It is published by Tolytech LLC, an Ohio limited liability company ("Tolytech", "we", "us"). This policy explains what information Muster holds, how it is used and shared, and the choices you have. It covers the Muster apps for iOS and Android, the Muster web dashboard, and this website.
How Muster works
Organizations ("customers") license Muster for their members. Each organization has its own separate database. The organization decides who joins, what roles they have, and what forms and records it keeps. Its administrators can see and change the information in their organization, remove people from it, and export submitted forms.
For the information members put into Muster, the organization is in charge of it, and Tolytech handles it on the organization's behalf as its service provider. We use it only to run Muster for that organization, as set out in our agreement with them. If you are a member, your organization's own privacy notice may also apply. Questions about how your organization uses your information are best sent to its administrators.
You cannot sign yourself up to Muster. An administrator or office user of your organization adds you (your organization's first administrator is invited by us by email), and you then sign in with your email address and password.
What we collect
| Information | Why |
|---|---|
| Your profile: name, email address, phone number, job title, callsign, team, role and, if one is added, a profile photo | To identify you to the other members of your organization, put you on teams and tasks, and let members contact each other. |
| Your sign-in: email address and password | To let you sign in. Passwords are stored only as a secure hash by our sign-in provider, and Tolytech cannot see them. The temporary password you are first given is known to whoever added you until you change it with "Forgot password?". |
| Work you and others record: events, tasks and the addresses entered for them, reports, comments, board posts, chat messages, schedules and shifts, whether you are looking for work, and personal notes | This is the work Muster exists to coordinate. Personal notes are visible only to you. |
| Forms: the answers you give on your organization's forms, including signatures and photos | Your organization designs its own forms, so it decides what they ask. A form may ask for information about other people, such as the people your organization is helping. |
| Your location, only when you tap "Use my location" on a form question that asks where you are | To record where you were when you filled in that form. Muster takes your position once, at that moment, with your phone's permission. It does not track you. |
| Photos attached to tasks, events and forms | So members of your organization can see them. When a photo is uploaded, Muster removes the location (GPS) and other camera details saved inside it, such as the camera model and the time it was taken, before saving it on our servers. Photos uploaded before 6 November 2026 were stored as they were sent. |
| A push notification token for each device you sign in on, and whether it is an iPhone or Android phone | To deliver notifications about your tasks, mentions and messages. |
| Technical records: IP address, the time and kind of each request to our servers, and error details | To keep Muster secure and working, limit abuse, and fix problems. |
| Customer contacts: the names, email addresses and phone numbers of the people who license Muster for their organization, and invoicing details | To set up the organization, support it, and invoice it. |
What we don't collect. Muster does not track your location or read your contacts, calendar or microphone. Apart from the form questions above, locations are addresses that people type in, and since 6 November 2026 the location a phone saves inside a photo is removed when the photo is uploaded, before it is saved on our servers. The camera and photo library are used only when you choose to attach a photo. Muster has no advertising, no third-party analytics or tracking, and this website sets no tracking cookies.
On your device. So that Muster keeps working with a weak or no connection, the app keeps a copy of some of your organization's information on your phone, along with forms, photos and signatures you have recorded but not yet sent. It is kept in the app's own storage, separately for each person and organization, so someone else signing in on the same phone cannot see it. Deleting the app removes it.
How we use it
- To provide Muster: sign-in, showing each member what their role allows, sending notifications and keeping data in step between devices.
- To keep Muster secure, prevent abuse, and investigate and fix problems.
- To give support when the organization or you ask for it.
- To tell organizations about their license, invoices and changes to Muster.
- To meet legal obligations.
We do not sell personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles.
Who can see it
- Members of your organization, according to their role (administrator, office, team lead or member). Information never crosses from one organization to another.
- Tolytech staff, only as needed to run and secure Muster, give support, or meet a legal obligation.
- Our service providers, listed below, only to provide their service to us.
- Others when the law requires it, or to protect someone's safety, or as part of a merger or sale of our business. In a sale, this policy keeps applying to the information.
Service providers
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, sign-in, sign-in emails and file storage | The region chosen for each organization. The United States unless the organization asks otherwise. |
| Railway | Runs Muster's servers | United States |
| Apple | Push notifications to iPhones | Apple's global network |
| Google (Firebase Cloud Messaging) | Push notifications to Android phones | Google's global network |
Each provider handles the information under its own terms and its agreement with us. We will update this list when we add or change a provider.
Security
Traffic between the apps and our servers is encrypted (HTTPS). Every request is checked on the server against the person's role, and each organization's data is kept in a database of its own. Photos and signatures are kept in private storage, not on the open web. The app or dashboard is given a link to a photo or signature only when the person may see it, and the link stops working within an hour, so a copied or forwarded link does not keep working. No method of storing or sending information is completely secure. If a breach affects your organization's information, we will tell the organization promptly so it can tell the people affected, as the law requires.
Retention
- Your organization's information is kept while it licenses Muster. If it stops, the information is kept for a while so the organization can come back or take a copy, then deleted, as our agreement with the organization sets out. Deleted information can stay in backups for a short time until they expire.
- Your account is kept while you are a member. You can delete it yourself at any time in the app (Profile → Delete my account), or an administrator of your organization can remove you; see how to delete your account. When an account is deleted, its sign-in is deleted and the profile's name, email, phone, job title, callsign and photo are cleared at once, along with push tokens, notifications, personal notes, upcoming shifts and unsent forms. Tasks, reports, comments, posts, messages, sent forms and their photos are part of your organization's records, so they are kept, shown as written by "Former member" instead of your name.
- An administrator can also deactivate an account instead of deleting it. Nothing is deleted: the person cannot sign in until an administrator reactivates them.
- Technical records are kept for a short time, usually a few weeks.
Your rights and choices
You can see and correct most of your profile in the app. You can ask to see the personal information Muster holds about you, to have it corrected or deleted, or to receive a copy. Because your organization is in charge of its members' information, we may pass your request to its administrators and help them answer it.
Depending on where you live, privacy laws (for example the California Consumer Privacy Act as amended by the California Privacy Rights Act, and similar laws in other states) may give you further rights, such as to know what categories of information are collected and why, and to appeal if we turn a request down. You may use an authorized agent. We will not treat you differently for using any of these rights. To make a request, email us at the address below. We may need to confirm your identity first.
You can turn off Muster's push notifications at any time in your phone's settings.
Children
Muster is meant for adults working with response and volunteer organizations. It is not directed to children under 13, and we do not knowingly collect their personal information. Organizations that include volunteers under 18 are responsible for any consent their members' parents or guardians need to give. If you believe a child under 13 has given us information, contact us and we will delete it.
If you are outside the United States
Muster is run from the United States. Unless your organization's information is kept in another region, it is stored and processed in the United States.
Changes to this policy
When this policy changes, we will post the new version here with a new date. If a change is significant, we will also tell the organizations that use Muster before it takes effect.
Contact
Tolytech LLC, Ohio, United States
Email: hello@muster-volunteer.com
See also the Terms of Service.