How your data is kept
Muster holds facts about real homes and people. Here is how it keeps them safe. This is what Muster does today.
Signing in
There is no password to forget or steal. To sign in, you get a short code by email. The code stops working after 15 minutes.
Who sees what
Each person has a role, such as leader, captain or member. The role decides what they can see and change. A home’s details are seen by its zone captain, the leaders above them, and the home itself. Everyone else sees only the counts.
What stays on a phone
The saved copy on a phone or laptop holds the map, the plan and the counts. It does not hold the list of homes or members. Signing out erases it. When net control works offline, their unsent notes stay on the device only until they are sent.
Practice is kept apart
A practice drill is marked Practice on every screen. Its check-ins are kept apart from real events.
Every field is listed
We keep a list of every piece of data Muster stores: why we keep it, who can see it and when it is deleted. For example, a removed home is deleted after 30 days, and check-ins are deleted two years after the event.