1. What we collect on our servers
Account data: your email address, an optional display name, and the public part of your passkey credentials. Passkeys never give us your biometrics; your face or fingerprint stays on your device and we could not read it if we wanted to.
Usage records: when the Service generates audio for you we record how many seconds and characters were generated, which voice and provider spoke it, and when. This metering is the basis of your allowance and our billing, so it is kept accurately.
Mindset data you choose to save: if you use the Mindset Guide, the map you approve (emotional needs, life domains, goals, and tasks) is stored so your sessions can be personalized from it. You can re-run modules to replace it.
Plan data: family and team plans store who owns the plan, who holds seats, and pending invitations.
Payments: handled by our payment provider (Stripe). We receive subscription status, never your card number.
2. What never leaves your device
Camera and microphone: nod detection at session checkpoints and optional hum confirmation run entirely in your browser using on-device models. No video or audio from your camera or microphone is recorded, stored, or transmitted, to us or to anyone.
Your Anthropic API key, if you add one, lives in your browser's local storage and is sent only with your own requests. It is never stored on our servers.
Your session library, practice statistics, streaks, preferences, and cached audio live in your browser's storage.
3. How we use data
To provide the Service: composing and narrating sessions, personalizing them from your mindset map, metering your allowance, and operating plans and billing. That is the list. We do not sell your data, we do not share it with data brokers, and we show no advertising.
4. Who processes data on our behalf
Speech synthesis: the text of a session is sent to our speech provider to be turned into audio. The text does not carry your name or account identifiers.
AI features: when you use conversational features, the content of that conversation is processed by Anthropic under your own API key and Anthropic's terms.
Payments: Stripe processes subscription payments.
Infrastructure: our application and database run on reputable cloud providers under standard data-processing terms.
5. Retention and deletion
We keep your data while your account is active. Delete your account, or write to us, and we remove your personal data; billing records are retained only as long as tax and accounting law requires. Data stored in your browser is yours to clear at any time.
6. Security
Passkeys replace passwords entirely, so there is no password of yours to leak. Data moves over encrypted connections, and we collect the minimum needed to run the Service.
7. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Whatever the law where you live, our policy is the same: write to us and we will honor these requests for every user.
8. Children
The Service is for adults. It is not directed at children and we do not knowingly collect data from anyone under 18.
9. Changes and contact
If this policy changes materially we will notify you before the change takes effect. Questions, requests, or concerns: support@hypno.chat.