Last updated: 2 July 2026
MusterHub is a personnel management platform for emergency services, operated by MusterHub LTD. This policy covers what data we collect through musterhub.app and how we handle it. Gavin Beard is registered with the Information Commissioner's Office as a data controller, registration number ZC185703.
MusterHub uses a self-hosted model. Each emergency service that subscribes to MusterHub operates their own dedicated server, hosted on infrastructure they control. Operational data (staff records, messages, wellbeing check-ins, training records, incident responses) is stored on that service's own server, not on ours.
Our central service (musterhub.app) plays a narrow role: when a crew member opens the app and enters their email address and service code, our central service identifies which server their organisation uses and redirects the app to it. From that point, all communication is directly between the app and the service's own server.
When a user enters their email address and service code to set up the app, we use those details to look up the correct server address for their service and redirect the app accordingly. We do not retain the email address or service code after the redirect has been completed. No account is created on our central service and no personal profile is stored there.
If you contact us through the website, we collect your name, email address, organisation name, and the content of your message. We use this information solely to respond to your enquiry. We do not add you to mailing lists or share this information with third parties.
We do not use analytics tools, tracking cookies, advertising trackers, or third-party scripts on this website. We do not build profiles of website visitors.
Our contact form uses a single strictly necessary security cookie (an antiforgery token) to protect against cross-site request forgery attacks. This cookie contains no personal data, is not used for tracking, and expires at the end of your browser session.
The MusterHub mobile app uses Sentry (sentry.io) for crash and error reporting. When the app encounters an unexpected error, a report is sent to Sentry's EU servers containing technical information about the error, such as the type of exception, a stack trace, the app version, device OS version, and device type. This information is used solely to diagnose and fix software defects.
Sentry does not receive operational data such as messages, staff names, wellbeing responses, or incident records. No personally identifiable information is included in crash reports unless it appears incidentally in an error message from the app itself, which we take steps to avoid.
Crash reporting is strictly necessary for the reliable and secure operation of the app. It does not require consent under PECR. Data sent to Sentry is governed by Sentry's Privacy Policy and their EU data processing terms.
The following data is held entirely on your service's own infrastructure, not by us:
Your service is the data controller for all of the above. Questions about that data should be directed to your service's data protection officer or administrator.
Where we process personal data (the email address used during app setup), our lawful basis is legitimate interests: routing the app to the correct server. This processing is minimal, temporary, and necessary to provide the service.
Contact form data is processed on the basis of consent and legitimate interests in responding to your enquiry.
We use the following third-party providers in connection with musterhub.app and the MusterHub mobile app:
We do not use analytics providers, advertising networks, or any other third-party services that process personal data.
Your operational data is held on your own server, not ours, so your service's sub-processor list is separate. See our Data Processing page for guidance on what to include.
All communication with musterhub.app is encrypted in transit via HTTPS. We do not store personal data on our central servers beyond the temporary routing lookup described above.
Under UK GDPR you have the right to access, correct, or request deletion of personal data we hold about you. Because we hold minimal data centrally, the most relevant right is likely to request deletion of any contact form enquiry we have received from you.
For data held on your service's own server, contact your service administrator or data protection officer.
To exercise your rights regarding data held by us, email privacy@musterhub.app.
MusterHub is designed for emergency service personnel. We do not knowingly collect data from anyone under the age of 18.
If we make material changes to this policy we will update the date at the top of this page. For significant changes we will notify active service contacts by email.
For any questions about this privacy policy, email privacy@musterhub.app.