MU SphereYour data in MU Sphere
What the app keeps, why, who can see it, and how to delete it. MU Sphere is made and run by Fuyad Hassan for Metropolitan University students.
Last updated 7 October 2026
In short
- We keep what the app needs to work: your account, your profile, what you post, and your class routine.
- Your location never leaves your phone.
- MU AI's answers are written by Google Gemini, which receives what you type to MU AI. Don't type personal details there.
- No ads. We don't sell or share your data for marketing.
- You can delete your account any time, from Settings.
What we keep, and why
Your account
Your university email and your password, so you can sign in. The password is stored only in a scrambled form (a hash) that nobody can read back, us included. If you turn on two-step sign-in, the key your authenticator app uses is stored too.
Your profile
Your name, student ID, major, department and CGPA, whichever you fill in. Only you can see your profile. Your name and department appear next to your posts and comments in the feed.
The feed
Your posts, comments, likes and reports. Signed-in students can see posts and comments. Admins see what's reported so they can review it.
Your class routine
The courses, rooms, days and times you add, so the app can remind you before a class.
Feedback you send
Your message, the contact you give (if any), your account if you're signed in, and the app's random device number (see below). Only admins read feedback.
Usage counts
The app makes a random number when it is first opened on a device and keeps it there. With it, we count how many devices open the app each day and which parts they open. It isn't linked to your name or account. These counts are what you see on mubus.live/stats.
Notifications
If you allow notifications, the address your browser gives us for sending them. They're delivered through your browser's own push service (Google, Mozilla or Apple, depending on the browser).
MU AI limits
To keep MU AI free, each network gets a number of questions a day. We count them against a scrambled form (a hash) of your internet address, never the address itself. We don't keep your MU AI conversations on our servers.
What we don't collect
- Your location. The bus tracker can use it to show how far each bus is from you, but that happens on your phone and it is never sent anywhere.
- Anything for advertising. No ads, no ad trackers, and no tracking you across other websites.
MU AI and Google Gemini
When you ask MU AI something, your message and the conversation so far go to Google Gemini, which writes the answer. MU AI also gives Gemini what it looks up to answer you: notices, events, past papers, bus times and names from the contacts list. Staff phone numbers and emails are not sent to Gemini; the app fills them into the answer afterwards.
MU AI's answers can be wrong. Check anything important, such as exam dates or bus changes, against the notice it came from. MU AI is for people aged 18 and over.
Services MU Sphere uses
These companies run parts of the app for us, and each one handles some of your data under its own privacy policy.
| Service | What it does |
|---|---|
| Supabase | Database, sign-in and file storage. Servers in Mumbai, India. |
| Vercel | Hosts the website and the web app. |
| Google Gemini | Writes MU AI's answers, as described above. |
| Resend | Sends the app's emails, such as confirming your email or resetting your password. |
| OpenStreetMap | The map in the bus tracker. Your device loads the map images from OpenStreetMap, which sees your internet address. |
| Google Fonts | The website's fonts. Your browser loads them from Google, which sees your internet address. |
| Microsoft Azure AI Content Safety | When switched on: checks feed posts and comments for harmful content so admins can review them, and checks MU AI questions for attempts to misuse it. |
Live bus positions come from the bus drivers' phones. Everyone can see each bus's position and its driver's name.
Who can see what
- You: everything in your account and profile.
- Other students: your name and department on your feed posts and comments, and the posts and comments themselves.
- Admins: feedback, reported posts and comments, and the usage counts. Admin accounts must use two-step sign-in.
- Nobody else. We don't sell your data or share it for advertising. We'd only hand data over if the law required it.
Deleting your account
Go to Settings → Delete account in the app (mubus.live/settings). That removes your account, profile, posts, comments, likes, reports, class routine and notification addresses, straight away. Feedback you sent stays, without your account or contact attached.
Papers you saved for offline use, and your settings, stay on your device until you clear the app's data or uninstall it.
How long we keep things
Your account data stays until you delete your account. Usage counts are kept as daily totals, with no link to you.
Changes and questions
If this page changes, the date at the top changes too. Questions, or a request about your data: use Settings → Send feedback in the app, and leave a way to reach you.