Hi wingerlang, sorry about that, it should have said web app on the homepage - I've updated it now! I've tried to say web app all the time in the app but forgot on the homepage, where it's arguably most important :(

Mobile session capture is technically possible using the approach we're using i.e. not screen recording but just tracking events and DOM changes and they rebuilding that. We looked into it but it was out of scope for now as we're just a two person team. Fullstory already solve for mobile, as do a few other competitors, perhaps you can find out a little from googling their approach?

In terms of privacy, for the web we can mask form inputs by default, and otherwise you can just add tags to elements you don't want to track and then the script ignores them client-side.