Privacy Policy

Data controller:

• Your voice is sent only while you dictate or take meeting notes, and your screen only when you ask a question, follow a guide or circle something to ask about. We do not keep either on our servers.
• What Hintora remembers about you is kept on your Mac, encrypted. Your library (dictation history, notes, dictionary, snippets and meeting notes) is kept in your account, encrypted, and you can delete it at any time.
• AI models run with the providers listed in Section 7. Where a provider offers it, we ask for zero data retention; Section 4 lists the requests where we can’t yet.
• Diagnostics, crash reports and product analytics never include your words, voice, screen or recordings, and each can be turned off.
• We do not sell your data and we do not use it for advertising.

A. Your account

When you sign up or sign in, with Google, with a code sent to your email address or with a password, we receive your name, email address, an account identifier and, if Google shares it, a profile picture. Your password and two-factor settings are held by WorkOS, never by us. We also keep the devices you are signed in on, so you can see and remove them, and which version of our Terms of Service you accepted and when.

B. Subscription and billing

If you buy a paid plan, our payment providers, Stripe (or Whop, if you subscribed there) process your payment and send us your plan, its status, renewal date and invoice details. We never see or store your full card number.

C. When you dictate

While you hold the dictation keys, or while hands-free dictation is on, your voice streams through our API to a speech-to-text provider, and the text comes back to your cursor. If you turn on “Hey Hintora”, listening for those words happens on your Mac, and nothing is sent until it hears them. Your dictionary, and the text before your cursor if context is on, help get names and words right. We do not store your voice on our servers. On your Mac, each dictation’s text stays until you delete it, and its recording is deleted after 14 days.

D. When you ask a question or follow a guide

We receive your question and, if screen context is on, a picture of every display connected to your Mac, leaving out only Hintora’s own windows, plus anything you attach. During a guide, every display is pictured again at each step. Whatever is visible is included — for example an open email, document or password manager — so close or hide anything you don’t want sent before you ask. When you circle something to ask about, a crop of it and a small picture of that whole screen are sent. These go to an AI model to answer you or show you the way. We do not store your screen pictures on our servers. Your question history is kept on your Mac, and you can turn it off. If you ask Hintora to act in an app you connected, a record of that action is kept for 90 days, so you can see what was done.

E. Meeting notes

When you take meeting notes, your Mac records the meeting in short pieces and uploads each piece, then deletes it. We turn each piece into text and drop the audio. The finished note — summary, decisions, transcript and attendees — is saved to your library.

F. Your library

Your dictation history, notes, dictionary, snippets and meeting notes sync to your account so they are on every Mac you use. They are encrypted with a key of their own for your account. You can turn sync off in Settings, which deletes the copy on our servers. Apps you connect to your library (for example over MCP) can read it until you disconnect them.

G. Memory on your Mac

Hintora remembers people, projects, apps, sites and your preferences, and which apps and sites you used when, so it can help with context. This memory is kept only on your Mac, in an encrypted file. To decide what is worth remembering, short pieces of text may be sent to an AI model; what is kept stays on your Mac. Passwords, card numbers and similar secrets are hidden before anything is kept or sent. You can pause memory, forget any part of it, or delete it in Settings.

H. Connected apps and calendars

If you connect an app such as Gmail, Notion or Linear, the sign-in for it is held by Composio or Pipedream, not by us, and Hintora acts in that app only when you ask. If you connect a Google or Microsoft calendar, we keep your events from 30 days ago to 14 days ahead, encrypted, for meeting reminders and notes. Connecting Slack helps Hintora spell names right when you dictate.

I. Diagnostics and crash reports

So we can find problems, the Mac app sends diagnostic events (whether signing in worked, when a dictation fails and why, your app and macOS versions) and crash reports (what went wrong and where in the app). They never include your words, voice or screen. Both are on by default and can be turned off on each Mac in Settings › Data and Privacy. Our servers also keep technical logs, with long text shortened and secrets hidden.

To install updates while you are away, the app checks on your Mac how long it has had no keyboard or mouse input and whether its screen is locked. This is used only to decide when to install, and is never stored or sent to us.

J. Product analytics

To understand which parts of Hintora help people, our API records a fixed list of product events, such as signing up, finishing a dictation or starting a plan, in PostHog’s EU cloud. Most are counted on our server from requests you already make. A few of the Mac’s diagnostic events (the app started or updated, a dictation or sign-in failed, a guide ended) and error reports from your account pages are also counted, as coarse labels, and only while diagnostics are on. You are identified only by a pseudonymous id made from a keyed hash of your account id — never your name, email or IP address. These events never include your words, voice, screen or recordings. Product analytics are on by default; you can turn them off with “Help improve Hintora” in Settings, which also deletes what was already sent to PostHog, and deleting your account deletes your analytics record. Our account pages at app.hintora.ai also count page views and the first sign-in steps in PostHog, without cookies or anything stored on your device. Before you sign in you are a random id that is forgotten when you leave the page; once signed in you are the same pseudonymous id as above, never your name or email. With “Help improve Hintora” turned off, your account pages send nothing.

Campaign links. When you create your Hintora account through one of our campaign links (a hintora.ai/start address), we note which link it was and connect it to your account, to the Mac you first install Hintora on and to when you ask your first question, under a random identifier. We do this on the basis of our legitimate interest in knowing which of our campaigns work (Art. 6(1)(f) GDPR). We don’t use your IP address or details of your device for this, we don’t set a cookie for it, and we don’t share it. You can object at any time by turning off Help improve Hintora in your account, which deletes the connection straight away, or by emailing hi@hintora.ai. If your browser sends Global Privacy Control or Do Not Track when you sign up, we don’t make the connection at all. We delete it 12 months after you sign up, or sooner if you delete your account.

Early access invitations. If we invite you by name to try Hintora early, we keep your name, email address, company and language with the invitation, and follow how it goes: whether our emails arrive, whether you open your personal link or the link to book an onboarding call, whether you create an account, install Hintora and use it, which version of Hintora your Mac runs, and whether you run into problems signing in or with your account. Our team sees this per person, so we can help where something gets stuck, and we send you a few short follow-up emails based on it. We do this on the basis of our legitimate interest in helping the people we invited get Hintora working (Art. 6(1)(f) GDPR). Every follow-up has an unsubscribe link, and replying “unsubscribe” works too. You can object to being followed at any time by turning off Help improve Hintora or by replying to any of our emails. When you reply to one of our emails, we send an automatic note that we received it and keep your reply with your account’s support conversations. We delete an invitation 12 months after it was made, or sooner if you delete your account.

K. Emails, help and feedback

When you send us a message from Help and feedback in the app or your account at app.hintora.ai, we receive your message and any files you attach. These details about your app always go with a message from the app: the app’s version, your macOS version, the app’s language, your plan, and the codes of the last few errors the app ran into (fixed labels, never anything you typed, said or had on screen). We email the message, files and details to our team’s mailbox through Resend, and keep them as a support conversation in our database, where the Hintora team reads and answers it. We email you a confirmation and our answers. In our database we keep a conversation for 24 months after its last message, and its files for 12 months after they were sent, and deleting your account deletes your conversations there. The email copy in our team’s Google Workspace mailbox is also deleted 24 months after it arrives. If you write to us by email instead, we keep your email address and message so we can reply.

If you ask for the student discount, we check your school email address, or the photo of your student ID you attach to your request. A student ID photo is kept only with your support conversation in our database, for the 12 months above or until you delete your account; it is never sent to our team’s mailbox. With your account we keep only that you may have the discount, how it was checked, when, and who approved it.

We also send the emails you ask for or need: the waitlist, team and referral invitations, security alerts such as two-factor changes, and billing emails such as the end of an introductory offer. Sign-in codes are sent by WorkOS.

L. This website

hintora.ai has no advertising or analytics cookies and stores nothing about you on your device. We count page views and a few clicks (opening the waitlist, the demo video or the booking calendar, and the answers you pick in the waitlist form, never what you type) anonymously in PostHog’s EU cloud: each visit is a random id that is forgotten when you leave the page, addresses are sent without their query, and your IP address is not kept or turned into a location. If you join the waitlist, we keep what you enter in the form — your name, email address, company, what you want to use Hintora for and your team’s size — with how you heard of us and which campaign brought you, if any, to tell you when you can start and to decide who to invite first. If you book a call through the calendar on our website, Calendly receives the name, email address and answers you give it. Visits to campaign links and downloads from them are counted as numbers per link and day, with nothing about you stored. Signing in uses a session cookie that is needed for your account to work.

M. When Hintora does a task for you

When you ask Hintora to do a task for you, such as sorting files you name in Desktop, Documents or Downloads, or adding to Notes and Reminders, the files and text the task needs are sent to an AI model, and what it produces is written back on your Mac. Hintora works only with what you point it to. We keep a record of each task — what you asked, the steps taken and the outcome — for 90 days, so you can see what was done.

N. Downloading and updating the app

The Mac app and its updates are downloaded from GitHub, which sees your IP address and the app version, as any download does. While memory is on, the Mac downloads once the model memory uses on your Mac, from our copy on GitHub or, failing that, from Hugging Face. No content of yours is sent with these downloads.

Hintora’s answers, guides, dictation clean-up and meeting summaries are made by AI models. Each request goes from our API through the Vercel AI Gateway to one of the model providers in Section 7. We send only what that request needs.

For requests that carry your screen, words, attachments or meetings, we ask for zero data retention wherever the provider offers it: the request is then sent only to a provider that has agreed not to keep it. These requests do not have zero data retention today, and the provider’s own terms apply to them:

• answers that may search the web, guide research, and the web searches themselves;
• writing search words from a part of the screen you circled (a crop of it goes to Gemini);
• tidying dictated text and rewriting text you selected (Qwen on Cerebras, or Gemini when Cerebras is busy);
• choosing what to remember from short pieces of text (Qwen on Cerebras);
• Gemini requests whose settings work only with Google AI Studio;
• speech to text and Hintora’s voice (Soniox and ElevenLabs are reached directly).

When an answer needs the web, a short search query is sent to Perplexity or Parallel through the same gateway.

• We do not sell personal data.
• We do not use your data for advertising or share it with advertisers.
• We do not store your voice or your screen pictures on our servers.
• We do not picture your screen unless you ask, follow a guide or circle something.

Where the GDPR applies, we rely on these legal bases:

• Performance of a contract — to run your account, your subscription and the Service: dictation, answers, guides, meeting notes, your library and connected apps;
• Legitimate interests — to keep the Service secure and working (diagnostics, crash reports, logs, abuse prevention) and to improve it (product analytics). You can object at any time with the switches in Settings or by emailing us;
• Legal obligation — to keep billing records and answer lawful requests;
• Consent — for anything optional you turn on, such as screen context or connecting an app, which you can turn off at any time.

These companies handle personal data for us, only to provide the Service. We may share data with professional advisers, with authorities where the law requires it, and with a buyer or successor if Hintora is merged or sold. We will update this list when it changes.

Our API and database run in the EU (Frankfurt), and crash reports and product analytics stay in the EU. Some providers in Section 7, including the AI model providers, process data in the United States or other countries. For these transfers we rely on the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework. To get a copy of the safeguards for a provider, email hi@hintora.ai.

We keep personal data only as long as we need it:

• your account, while it is open, and once closed, until you ask us to delete it, which we do within 30 days of your request (Section 11);
• what you entered to join the waitlist, until you ask us to delete it;
• your library, until you delete items, turn off sync or delete your account;
• your voice, meeting audio and screen pictures are never stored on our servers: meeting audio is turned into text as it arrives and dropped, and the text of a recording left unfinished is deleted after a day;
• records of actions in connected apps and of tasks Hintora ran for you (Section 3, H and M), 90 days;
• Help and feedback conversations in our database, 24 months after their last message, and their files, 12 months after they were sent, or until you delete your account; a student ID photo sent for the student discount is one of those files, and kept nowhere else;
• the email copies of those messages in our team’s Google Workspace mailbox, 24 months after they arrive;
• when you delete an account that paid for a plan or had a trial, a keyed one-way hash of its email address (never the address itself), 3 years, only so that a new account at the same address isn’t given a new-customer offer such as the $1 months or the student discount again;
• server logs and diagnostic events, at most 30 days;
• crash reports, at most 90 days;
• product analytics events, at most 12 months, and deleted with your account;
• billing records and a record of usage, as long as tax, accounting or other laws require, even after an account is deleted.

Your library and connected calendars are encrypted in our database, and memory is encrypted on your Mac with a key kept in your Mac’s Keychain. Data travels encrypted. No method of transmission or storage is completely secure, but we work to protect your data against unauthorized access, loss, misuse and alteration.

In the app, you can at any time:

• turn off screen context, question history, memory or library sync;
• turn off diagnostic events, crash reports and product analytics;
• export or delete your memory, and delete your library;
• disconnect apps and calendars;
• delete your account.

Deleting your account. When you delete your account, we close it at once and sign you out everywhere, and any paid plan stops renewing. Nothing else is deleted yet, so you can change your mind: sign in and restore your account, or write to us, and everything comes back as you left it. To have your data deleted, write to hi@hintora.ai from your account’s email address and we delete it within 30 days of your request: your name and email address, your library, memory, meeting notes, calendar connections and connected apps, and your billing details at Stripe, ending any plan still running (without a refund). We keep only the billing and usage records that tax and accounting law require, without your name or email address. If you pay through Whop and your membership still renews, cancel it at Whop first.

A copy of your data. Your memory can be exported from Settings on your Mac. For a copy of your data held in your account, write to hi@hintora.ai and we send it to you in a common, machine-readable format within one month.

Depending on where you live, you may also have the right to:

• access your personal data,
• correct inaccurate data,
• request deletion,
• restrict processing,
• object to processing,
• request portability of your data,
• withdraw consent where processing is based on consent,
• lodge a complaint with a supervisory authority: in Bulgaria, the Commission for Personal Data Protection (Комисия за защита на личните данни), cpdp.bg, or the authority where you live or work.

To exercise any of these rights, contact: hi@hintora.ai

The Service is not intended for children under 14, the age at which a person can consent to online services in Bulgaria, or under the higher age set where they live. We do not knowingly collect personal data from children below that age.

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above. Material changes may also be communicated through the Service or by email where appropriate.

For privacy questions, contact: