Your parents’ stories are yours to keep

Don’t trust us. Test us

Mulam is small and new, so the fair question is “why should I believe any of this?” You don’t have to. Each step below takes a few minutes, costs nothing, and needs nothing private from you.

1. Sign up with Google. Choose “Continue with Google” and Mulam never sees or stores a password for you. Google passes us your name, email address and profile picture, and nothing else.
2. Add one memory that doesn’t matter. A photo of your tea, a ten-second voice note. Nothing precious yet.
3. Download it. In Settings, then Account & Data, choose “Download your family’s memories”. Open the ZIP file and check that what you put in is what comes out.
4. Delete the account. It is on the same screen. Sign in again afterwards and you start from nothing.
5. Run an outside scan. Mozilla, the maker of Firefox, runs a free security check that anyone can point at any website. Run it on mulamroots.com. On 13 November 2026 it gave us a B+, 80 out of 100. It marks us down for one thing, which is listed under “not finished yet” below.

If all of it works the way this page says, invite your parents. If any of it doesn’t, write to support@mulamroots.com and tell us what you saw.

Who builds Mulam

Mulam is made by an independent founder in Hyderabad, India, for families like theirs, spread across countries and time zones. There is no big company behind it, which is why this page exists. The postal address and phone number are on the privacy policy. You can write to the founder directly at support@mulamroots.com, and a person reads it.

Who can see what

• Your family only. You choose who joins, and only a parent in the family (or the person who created it) can send invitations. Other families cannot read your memories, even if they know a memory’s ID, because the database checks family membership on every request.
• Parents can see everything in the family. A parent in your family can see everything shared in the family, including memories marked private. Marking a memory private hides it from the other family members, not from the parents.
• Private messages are private. A one-to-one message, and anything attached to it, can be opened only by the two people in the conversation.
• If someone is removed, they lose access to the family’s memories.
• Nobody can promote themselves. A member cannot make themselves a parent or move into another family. Those settings are locked on the server, not just hidden in the app.

Where your files live

Photos, voice notes and videos you add to a memory are kept in private cloud storage, and the links the app uses to open them are temporary and expire. A private memory’s files can be opened only by its author and the family’s parents. Your account, memories and login run on Supabase, your files on Cloudflare, and the website on Vercel. Payments are handled by Stripe or Dodo Payments, so your card details never reach Mulam. Everything travels over encrypted connections (HTTPS).

Mulam is small. The companies that hold your data are not. Supabase, Cloudflare and Vercel each publish reports from outside auditors on how they protect what they store (the standard is called SOC 2), and Stripe is certified at the card industry’s highest level. That covers their buildings, their staff and their servers. It does not cover the code Mulam wrote on top of them, which is why the outside test listed under “not finished yet” matters.

One exception: profile pictures load from a public address, so they can appear on the sign-in screen and in feeds. Anyone who has a picture’s address can open it, so choose a picture you are happy to share that widely.

How the AI works with your memories

Mulam is an AI memory app. The AI is what turns a spoken answer into text, writes the short summaries, and builds the questions and games from your family’s own stories. To do that it reads the memory it is working on, and that work runs on one AI service: Google’s Gemini. It is not passed to any other AI company.

• What it reads: the memory as your family wrote or recorded it (the text, and the recording or photo when it has to be understood). Mulam adds only the first names and roles of family members so names come out right, never the family name or surnames.
• What it is never used for: we do not train any AI of our own on your memories, we do not sell them, and we do not use them for advertising.
• Google’s side: how long Google keeps what it receives is set by its Gemini API terms. We are getting those terms confirmed in writing for our account and will publish the answer here.

One game is different: Naam Jaap listens to the chant on the device itself, and no audio is sent anywhere.

Ads and tracking

Mulam never shows ads. The public website uses ad and analytics tools (Meta, Google and Microsoft) to understand which pages and ads work. They are on by default, and you can turn them off at any time on the privacy page. Microsoft Clarity, which records how visitors use a page, runs only on the public home page for signed-out visitors, never inside the family app. We switch all of these tools off whenever a private sign-in link is on screen, so a link that signs someone in is never passed to an ad network. We do not send them the text of a story, a photo or a recording.

Taking your memories, and deleting them

• Download everything: in the app, open Settings, then Account & Data, then “Download your family’s memories”. You get one ZIP file with every story, photo, video and voice note you can see, and a page that opens offline in any browser. A parent can download the whole family; everyone else can download what they wrote or took part in. It is free on every plan, and it never needs the AI.
• Delete: you can delete your account from inside the app. That removes your data and your files straight away, and copies in our database provider’s backups are gone within 30 days.
• If someone leaves a family that continues, their memories are deleted, but family-level summaries and prompts that were already written may still mention stories shared with the family. Deleting the whole family deletes those too.
• If the free period ends, nothing is deleted and nobody is locked out. The family can still open and replay everything that was saved.

If Mulam ever closes

A small app can shut down, and you should know what happens to your parents’ voices if this one does. Our promise: if Mulam ever closes, every family gets at least 90 days’ notice by email, and the free download keeps working for that whole period, so you can take every story, photo and recording with you. The ZIP file opens offline in any browser and does not need Mulam to exist.

You do not have to wait for that day. Download a copy whenever you like and keep it somewhere of your own.

Grandparent links, and what to do if one goes astray

A grandparent joins with a link, so they do not need a password. That link works like a key for 7 days: anyone who has it can open that grandparent’s profile. Send it only to them, directly, and not into a group chat.

Parents can see when a link is opened, and the first time a grandparent opens theirs, parents get a notification. If a link goes to the wrong person, or a phone is lost, a parent can reset every sign-in link in one tap: every link and every installed app stops working at once, and you send each grandparent a fresh one. It is in Settings, then Account & Data, then Security activity.

What is not finished yet

• Google’s written confirmation of how it handles what the AI is sent, for our account.
• An independent security test by an outside firm. So far Mulam has been reviewed internally, with the findings written down and fixed. It has not been independently audited.
• The website still allows scripts written directly into its own pages, which is what Mozilla’s scan marks us down for. Closing that takes a rebuild of how the public pages load, and it is on the list.
• Downloads larger than 4 GB cannot be saved as a single file yet. If your family is that large, write to us and we will get all of it to you.

When any of these changes, this page changes and the date at the top changes with it.

Found a problem?

If you think you have found a security or privacy problem, write to support@mulamroots.com with the subject “Security”. Please give us a chance to fix it before sharing it publicly. We will reply, and we will tell you what we changed. Our contact details are also in security.txt.

The legal terms are in the privacy policy and terms of service. This page is the plain-language version and does not replace them.