MusterHub
Let’s talk

Privacy Policy

Last updated: 3 October 2026

MusterHub is a personnel management platform for emergency services, operated by MusterHub LTD. This policy covers what data we collect through musterhub.app and how we handle it. ICO registration: ZC185703. For privacy enquiries, use the contact details below.

How MusterHub works

MusterHub supports self-managed and managed hosting. Operational data, including staff records, messages, wellbeing and training records, is stored in your service’s dedicated instance. With self-managed hosting, your organisation operates that environment. With managed hosting, MusterHub operates it on your organisation’s behalf. See the data processing page for responsibilities and authorised support access.

Our central service (musterhub.app) plays a narrow role: when a team member opens the app and enters their email address and service code, our central service identifies which server their organisation uses and redirects the app to it. From that point, all communication is directly between the app and the service's own server.

What we collect through musterhub.app

During app setup (routing only)

When a user enters their email address and service code to set up the app, we use those details to look up the correct server address for their service and redirect the app accordingly. We do not retain the email address or service code after the redirect has been completed. No account is created on our central service and no personal profile is stored there.

Website enquiries and contact form

If you contact us through the website, we collect your name, email address, organisation, optional service type and message. The enquiry is sent to our mailbox using our configured email provider so we can respond and discuss your requirements. We do not add you to a marketing mailing list. Enquiry correspondence is retained while handling the enquiry and any resulting customer relationship; you can contact us about access or deletion.

Email delivery records can include the enquiry subject, name and organisation. Failed-delivery logs can include the contact email address. These records help us investigate delivery and service problems.

Capability worksheets

If you receive a capability worksheet link, we store the answers you save, including any name, organisation and role you enter, and the time of your last save. MusterHub administrators can review these answers to discuss your requirements. Anyone with the worksheet link can read and change the answers, so keep the link private and leave out sensitive staff or incident information.

Answers remain available at that link until the worksheet is removed. Contact us to request a copy or removal. Closing your browser does not delete saved answers.

Website visitors

We do not use analytics tools, tracking cookies, advertising trackers, or third-party scripts on this website. We do not build profiles of website visitors.

Our contact form uses strictly necessary cookies to protect against cross-site request forgery attacks and to show a confirmation after an enquiry is sent. These cookies are not used for tracking. The enquiry confirmation is temporary. Roadmap pages also remember your chosen colour theme in your browser’s local storage; this setting is not sent to us.

Mobile app crash reporting

The MusterHub mobile app uses Sentry (sentry.io) for crash and error reporting. When the app encounters an unexpected error, a report is sent to Sentry's EU servers containing technical information about the error, such as the type of exception, a stack trace, the app version, device OS version, and device type. This information is used solely to diagnose and fix software defects.

Sentry does not receive operational data such as messages, staff names, wellbeing responses, or incident records. No personally identifiable information is included in crash reports unless it appears incidentally in an error message from the app itself, which we take steps to avoid.

Crash reporting is strictly necessary for the reliable and secure operation of the app. It does not require consent under PECR. Data sent to Sentry is governed by Sentry's Privacy Policy and their EU data processing terms.

Your service’s operational data

The following operational data is held in your service’s instance. MusterHub operates that instance when you choose managed hosting:

  • Staff names, ranks, roles, and personnel numbers
  • Messages and chat conversations
  • Wellbeing check-in responses
  • Training records and qualifications
  • Turnout and incident response records
  • Rota and availability data
  • Documents and SOPs
  • Push notification tokens
  • Device information

Your service is the data controller for all of the above. Questions about that data should be directed to your service's data protection officer or administrator.

Lawful basis for processing

Where we process personal data (the email address used during app setup), our lawful basis is legitimate interests: routing the app to the correct server. This processing is minimal, temporary, and necessary to provide the service.

Enquiry and worksheet information is used for our legitimate interests in responding to your request and discussing the service you are considering.

Sub-processors

We use the following third-party providers in connection with musterhub.app and the MusterHub mobile app:

  • Microsoft Azure (UK): hosting for the central routing service, governed by Microsoft's Data Processing Addendum.
  • Sentry (EU, sentry.io): crash and error reporting for the mobile app. Receives technical diagnostic data only (error type, stack trace, app and OS version, device type). Governed by Sentry's Privacy Policy and EU data processing terms.

Our configured email provider delivers website enquiries. We do not use analytics providers or advertising networks on the marketing site.

The providers and responsibilities for your operational instance depend on your hosting option. See our Data Processing page for guidance on what to include.

Data security

All communication with musterhub.app is encrypted in transit via HTTPS. Website enquiries and saved capability worksheets are handled as described above, separately from your service’s operational instance.

Your rights

Under UK GDPR you have the right to access, correct, or request deletion of personal data we hold about you. Because we hold minimal data centrally, the most relevant right is likely to request deletion of any contact form enquiry we have received from you.

For data held on your service's own server, contact your service administrator or data protection officer.

To exercise your rights regarding data held by us, email privacy@musterhub.app.

Children

MusterHub is designed for emergency service personnel. We do not knowingly collect data from anyone under the age of 18.

Changes to this policy

If we make material changes to this policy we will update the date at the top of this page. For significant changes we will notify active service contacts by email.

Contact

For any questions about this privacy policy, email privacy@musterhub.app.