Local-first · macOS On-device brain Star on GitHub

Your meetings get a brain — and you control where it runs.

Murmur records your calls and transcribes them on-device. Run AI locally, or explicitly opt into redacted cloud AI; your meeting archive stays on your Mac.

Signed & notarized · macOS 13.4+ · Apple Silicon & Intel · your notes stay Markdown you own

On-device transcription
Touch ID lock at rest
No cloud required
Plain Markdown you own
How it works

Record → understand → ask. Local-first by design.

One local-first pipeline turns a live call into searchable memory. Transcription stays on your Mac; AI can run locally or, with explicit consent, use redacted cloud processing.

01 · Record

Hears the whole call

Your mic and the other side's system audio, captured and transcribed separately, then merged into a clean Me / Others transcript by on-device Whisper.

02 · Understand

An on-device brain

A reasoning model runs locally over a semantic index of everything you've recorded — writing a structured note and keeping the memory searchable forever.

03 · Ask

Answers, live & cited

Say a wake phrase mid-meeting and get a grounded answer with sources — or ask across months of calls afterward. The recording never stops.

Security & Privacy

Privacy isn't a setting. It's the architecture.

Murmur is designed so transcription, search, and local AI can run without a network at all. If you choose cloud AI, consent and a redaction firewall sit in front of that egress.

Nothing leaves the device

With the bundled on-device model or Ollama, your audio and transcripts never touch a network. The reasoning happens on your Mac.

Two encryption layers at rest

The whole database is SQLCipher-encrypted. On top, a per-folder AES-256-GCM lock adds content keys wrapped by a master key released only by Touch ID.

Every read is gated

A sealed, locked folder leaks nothing — across the app, search, the graph, MCP, even the audio path. Locked meetings simply show as 🔒 Locked.

Seals verify-before-destroy

Murmur proves the ciphertext decrypts back before it ever blanks the plaintext — content is never lost, and locking is fully reversible.

Screen-share aware

A watcher can auto-relock sealed folders and wipe the cached key the moment screen sharing is detected — so a shared screen can't spill private notes.

Redaction firewall

If you ever opt into a cloud summarizer, emails, phone and card-like numbers are scrubbed first — and cloud egress is fail-closed behind a one-time consent.

Brain / providerWhere it runsDoes meeting text leave your Mac?
On-device brain (Bielik / Qwen)Fully localNo
OllamaFully localNo
Claude Code (default summarizer)Local CLI → cloudOnly after consent; redaction firewall applied
Codex (OpenAI's CLI, run tool-free)Local CLI → cloudOnly after consent; redaction firewall applied
Anthropic API (bring your own key)Direct HTTPSOnly after consent; redaction firewall applied
AI Gateway (any OpenAI-compatible endpoint — LiteLLM, Kong, Portkey, vLLM…)Direct HTTPSOnly after consent; redaction firewall applied
Murmur's privacy settings, stating in plain language what is removed before any text leaves, which providers are cloud, and that cloud processing is off until you allow it once
Murmur tells you, in plain language, exactly what leaves your Mac — and defaults to keeping it all on-device. One model picker is used across every AI surface, and it always accepts a model id you type yourself — so a model released after this build still works.
What you get

A meeting tool that actually remembers.

One encrypted store, three ways to use it — the app, a local MCP server, and your exported Markdown files.

Structure

One hierarchy. Boards over it. And a door in.

2.0 rebuilt the shell around a single tree, added composable boards on top of it, and opened an offline import path for the notes you already have somewhere else.

Workspaces

One tree for everything

The separate Meetings and Notes folder trees are gone. There's now a single tree — Workspaces › folders › your recordings and notes — in one sidebar that collapses to a rail when you want the room. Lock a workspace and everything inside it is sealed with it.

  • Recordings, notes, tasks and boards file into the same place
  • A sealed workspace shows its name and nothing else — no counts, no contents
  • Ask the Brain to file a stray recording for you
  • Deleted by mistake? Trash keeps it for 30 days
The Workspaces sidebar: one tree of workspaces and folders holding recordings, notes and boards, with a locked workspace at the bottom
Dashboards

Boards you compose

Pull notes, recordings, documents, people, promise ledgers and reminders onto a board, then read it through Brief / Overview / Commitments / Sources / People lenses. Pin a living answer — a question the app keeps up to date, and withholds the moment its sources stop being readable. You can ask a board directly, grounded only in what's on it.

  • Ten kinds of tile, including drift, numbers and activity pulse
  • Five lenses over the same tiles — no second copy of anything
  • A board states its own boundary: what it can read, and what it derived
A board in its Brief lens: a pinned living answer, what needs attention, and the recent evidence behind it
Imports

Bring your existing notes

Settings → Imports pulls in a Notion export, an Obsidian vault, or Apple Notes. Entirely offline — no account, no key, no network call. Every import is a dry run first, so you see what it would write before it writes anything. (Apple Notes asks macOS for permission the first time.)

  • Three sources: a Notion export, an Obsidian vault, Apple Notes
  • Dry run first — nothing is written until you say so
  • Imported notes land in their own named container, and join the same Brain
Settings → Imports: Notion, Obsidian and Apple Notes, with the note that everything happens on this Mac and nothing is uploaded
The brain

Talk to your AI — during the meeting.

This is the part most note-takers don't have. Trigger it by wake phrase or a single tap; it answers out of your meeting memory, live, with citations you can open — and the recording never stops.

  • On-device reasoner (Bielik-11B, Qwen) via Metal
  • Grounded, not hallucinated — retrieved from your own transcripts
  • Optional consent-gated web — off by default
  • Conversations are remembered — vault, note and meeting threads persist, with a history browser on each surface. A conversation disappears the instant any folder it drew on stops being readable.
Asking across months of meetings and getting one answer, with the meetings it was drawn from listed underneath
Capture & transcribe

It hears both sides of the call.

Dual-stream recording captures your mic and the other side's system audio, transcribes each independently on-device, and merges them by wall-clock into a clean Me / Others transcript with live captions as you speak.

  • On-device Whisper — tiny through large-v3, including the faster turbo build, plus quantized variants
  • Two-stream attribution: you and everyone else, plus voice-activity detection
  • A floating recorder bar — record from anywhere (⌘⇧R)
The merged Me / Others transcript, time-indexed, beside the speaker and topic timeline
Notes & memory

Structured notes and a graph that builds itself.

Every call becomes a clean note — summary, decisions, action items, quotes. Recordings and notes live side by side in the same workspace. People and projects are extracted automatically into a knowledge graph, and sealed Spaces stay hidden from it.

  • Ask across every meeting with hybrid semantic search
  • Entity dossiers, related meetings, weekly digests
  • Action items can push to Apple Reminders
  • Feed it PDFs, Office docs, web pages & images — chunked into the same brain, on-device
The full brain graph — meetings, notes, documents and people as one map, with typed links between them
Receipts

Every claim traces back to the tape.

Murmur's notes don't ask you to trust them. Each line that's grounded in what was actually said carries a receipt — click it to jump straight to that second of audio, with the speaker and confidence. Paraphrased or unsupported lines get none, so you can see at a glance what's verified.

  • Click a claim, hear exactly where it came from
  • Speaker + ASR-confidence on every receipt
  • Sealed folders leak no timing or speaker, ever
A generated note's receipts: one row per grounded claim, each carrying the speaker and the second of audio it came from
Yours to keep

Plain Markdown. No lock-in.

Every note is also exported as atomic Markdown — YAML front-matter, [[wikilinks]], block deep-links, and a canvas board option. They're just plain files you own, openable in any editor.

  • An encrypted SQLite DB is the single source of truth
  • A read-only local MCP server for Claude Desktop / Code
  • Plain Markdown exports you can open in any editor
A structured note — summary, decisions, action items and quotes — beside the recordings and notes it links to
Notes

Not just meeting notes. All your notes.

A full Markdown editor with tags and properties, filed in the same workspaces as your recordings — for anything you write, not just what Murmur transcribes. Select any passage and a command menu appears: refine, shorten, change tone, translate, fact-check, or just type what you want done.

  • Nineteen Brain actions, one keystroke away
  • Grounded in your own meetings & notes, not the model's guesses
  • Paste screenshots into notes; they stay local and follow the workspace's lock
The standalone note editor with a text selection and the Brain command menu open, showing Refine, Shorten, Change tone and more actions
Shared Brain

Work as a team, still end-to-end encrypted.

Publish a note or meeting summary into your org's Shared Brain and it stays in sync for every member as you edit. Everything is sealed on your Mac before it ever leaves — the server only ever stores ciphertext, wrapped keys, and public keys.

  • AES-256-GCM sealed under an org content key before upload
  • Verify-before-publish — the same discipline as locking a folder
  • Per-document permissions — the author sets View only or Can edit on each shared document
  • Belong to more than one org — each gets its own encrypted feed
  • Shared Tasks — assignees, due dates, subtasks and the same permissions. Tasks live inside an org, so they need a signed-in account.
The Shared Brains view: meetings and notes your organizations have shared with you, each with its author and organization
Pricing

Free during early access.

Local recording, transcription, notes, and Markdown exports need no account or payment. Pricing and availability beyond early access will be announced separately.

Coming soon

Pro

Planned

Pricing and availability to be announced.

  • Everything in Free
  • End-to-end encrypted sync across your Macs & iPhone
  • Zero-knowledge encrypted cloud backup
  • Optional low-latency managed brain (redacted)
  • Custom recipes & automations
Follow on GitHub
Coming soon

Team

Planned

Pricing and availability to be announced.

  • Everything in Pro
  • SSO & SCIM provisioning
  • Security policy, retention & audit log
  • Priority support & SLA
Talk to us

Pricing and availability beyond early access will be announced separately.

Give your meetings a brain — keep control on your Mac.

Local-first for macOS. Keep AI local, or explicitly opt into redacted cloud AI when you choose.