Privacy Policy

Last updated: November 9, 2026

The short version

Mojn keeps as little about you as it can. An account is an email address, a name and, if you add one, a picture. Calls are encrypted end to end and never recorded. Our servers are in the European Union. This website and the app have no tracking, no analytics and no advertising. Paying for Mojn happens at Paddle, our merchant of record, which is the only place your address and payment details are kept.

Who we are

Mojn is made by overmorrow GmbH, Turmstr. 28, 40789 Monheim am Rhein, Germany (“overmorrow”, “we”), the controller under the GDPR. For anything privacy-related, write to email address — JavaScript required. Our full details are in the Legal Notice.

This website

mojn.co is a static site. It sets no cookies, runs no analytics, and loads its fonts and images from our own domain, never from third parties. It is delivered through Cloudflare, which processes the technical data every website visit involves (IP address, time, requested page, browser) to serve the page and protect it from attacks. We don't use this data to identify you, and Cloudflare deletes its logs after a short time.

Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

One exception: the payment pages. /checkout/pay and /billing/payment load Paddle's script and payment form from Paddle's servers, which see what a visit to any site does, and may set the cookies the payment needs. Downloading an invoice, and the link to Paddle's billing portal, take you to Paddle too. Nothing of Paddle's loads on any other page of this site, and the other checkout and billing pages send what you type to our API, which passes it on to Paddle.

Your Mojn account

What we store

Your email address and name. The name defaults to your Mac's user name, and you can change it.
A profile picture and a company logo, if you add them. Others in your calls and companies see them.
Sign-in sessions: for each Mac you sign in on, its device name and when the session was last used. The session token itself is stored only as a one-way hash.
A random install ID per Mac, so the same person on two Macs can be in one call.
Companies and rooms you create or are added to: their names, who belongs to them and with which role. An admin can add you to a company by your email address before you have an account.
Calls you start: the call's code and when it expires.

Signing in

Mojn has no passwords. To sign in, we email you a short code and a sign-in link through Resend. The code expires after 10 minutes and is stored only as a hash.

Legal basis: providing the service you signed up for (Art. 6(1)(b) GDPR).

Paying for Mojn

Paddle sells Mojn to companies as our merchant of record: it charges you, handles tax, issues invoices and answers payment questions. For that, Paddle decides what it needs and is a controller of that data in its own right, under its own Privacy Policy. Your billing email, company name, address, VAT ID and payment details go to Paddle, and all but the email stay only there. We pass on the first four when an admin enters them at checkout or when updating billing details, along with the admin's name, and we never see card details. If the admin on the billing email leaves or stops being an admin, we give Paddle another admin's email and name in their place, so that someone in the company still gets the receipts.

What we keep: Paddle's IDs for your company's customer, address, business and subscription; its status, period, seat count and dates; the billing email, for our emails about seats, and which admin's address it is, if any; and that your account has used its trial. To show you your details, we read them from Paddle as you open the page, and don't keep them. We tell Paddle how many seats a company has, not who has them, apart from the billing email above.

Legal basis: providing what you bought (Art. 6(1)(b) GDPR), and for moving the billing email, our legitimate interest in getting receipts to the right person (Art. 6(1)(f) GDPR).

Calls

Voice, video and the windows you share travel through our media server, a LiveKit server we run ourselves on Hetzner in the European Union. Mojn captures only the windows or the screen you pick, and nothing of a call is ever recorded or stored.

Calls are encrypted end to end. For a call started with an invite link, the key is part of the link itself, after the #, which browsers and Mojn never send to any server: only the people holding the link can decrypt the call, not our media server and not us. For a company room, Mojn's server issues the room's key to the room's members and guests; the media server still can't read the call, but our server could provide the key.

Pointers, drawings and the clicks and keystrokes of someone you let control a window pass through the media server encrypted in transit, and are never stored.

Guests need no account: the name a guest types is shown to the others in the call and is not stored.

Presence: to show who is in which company room, our server keeps a list of the people currently in each room in memory. It isn't written to disk and is gone when they leave.

Features that reach other services

GIFs and clips: the Reactions popover asks KLIPY directly from your Mac for what's trending and for what you search, so KLIPY sees your IP address, your search and your Mac's region. We send it no ID of yours.
Song recognition: while you share an app's sound with Recognize Shared Music on, your Mac sends Apple an audio fingerprint of it through ShazamKit to name the song, never the sound itself. You can turn it off in Settings → Calls. Covers load from Apple.
Link previews: when someone sends a link in a call's chat, each Mac in the call fetches that page to show a preview, so the site sees that Mac's IP address.
Feedback: what you send through Give Feedback reaches us by email through Resend, with your email address, so we can answer.

Logs and security

Our API logs requests with your user ID, never your email address, codes or tokens. To stop abuse, it briefly counts requests per IP address in memory. Our media servers' logs hold the IP addresses of the people in calls for 7 days. Logs are deleted routinely.

Legal basis: our legitimate interest in a secure service (Art. 6(1)(f) GDPR).

Who processes data for us

We run Mojn with a few service providers, each bound by a data processing agreement:

Hetzner Online GmbH, Germany: the servers for calls, in the EU.
Railway Corporation, USA: hosts our API and its database in its EU region.
Resend, Inc., USA: sends sign-in emails, the email telling you you've been added to a company, the email telling a company's billing email its seats changed, with the names of who has one, and feedback to us.
Cloudflare, Inc., USA: DNS, encrypted connections and protection for this website and our API.

Paddle isn't on this list because it isn't our processor: see Paying for Mojn above.

Our data is stored in the EU. Where a provider based in the USA could access it, the transfer is covered by the EU–U.S. Data Privacy Framework where the provider is certified under it, and otherwise by the EU Standard Contractual Clauses.

How long we keep it

Account data: until you delete your account.
Sign-in sessions: until you sign out, or a while after their last use.
Sign-in codes: deleted once they're expired or used.
Calls: deleted shortly after they expire.
Companies whose trial or subscription ended: up to 12 months, with an email to their admins about a month before. Paddle keeps its own records for as long as tax law asks.

You can delete your account in the app, in Settings → Account. That removes your account, your sessions and your company memberships right away. A company where you're the only person is deleted with it; rooms you owned in other companies stay with them.

Your rights

Under the GDPR you can ask us for access to your personal data, and have it corrected, deleted, restricted or handed to you in a portable format. You can object to processing based on our legitimate interests. Write to email address — JavaScript required.

You can also complain to a data protection authority. Ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (ldi.nrw.de).

Changes

If Mojn changes what data it handles, we'll update this policy before the change ships, with the date above.