Privacy policy

A short read in plain language. The TL;DR: we keep your data minimal, encrypted, and yours.

Last updated · 9 May 2026

This privacy policy explains how HRMNYS APP LTD (“hrmnys”, “we”, “us”) handles personal data when you use the hrmnys mobile app or this website at hrmnys.com.

Who we are (data controller)

The data controller responsible for your personal data under the UK GDPR and EU GDPR is:

HRMNYS APP LTD
Flat 5 Chelsea House, 9-11 White Hart Lane
London SW13 0PX, England
Company No. 17208756 (registered in England & Wales)
Email: info@hrmnys.com

What we collect

Account data

When you sign up we store your email address, an optional display name, and a unique account identifier. If you sign in with Apple or Google, their OAuth provider gives us the email associated with that login.

Conversation content

Your chat messages, voice transcriptions, and any insights derived from them are stored on our servers in the European Union. They are tied to your account and are not shared with other users — including a connected partner — except where you explicitly opt into shared insights.

Partner connection

When you and a partner pair accounts, we store the link between your two account IDs. We never share private chat content across this link. Only insights you both opt into are surfaced to the other partner.

Device and diagnostic data

We log timezone, app version, and high-level error events so we can fix bugs. We do not collect advertising identifiers, precise location, or contact lists.

Push notification token

If you enable notifications, your device push token is stored so we can deliver gentle reminders you’ve asked for. You can revoke this at any time in iOS Settings or in the app.

Legal bases for processing (GDPR)

  • Contract — to provide the Service you signed up for (running the chat companion, surfacing insights, partner pairing).
  • Legitimate interests — to keep the Service secure, investigate abuse, and improve product reliability.
  • Consent — for push notifications and any future features that explicitly ask for it. You can withdraw consent at any time.
  • Legal obligation — to retain limited records (for example, billing) where the law requires.

How we use your data

  • To run the chat companion and surface insights to you.
  • To pair you with a partner when you both opt in.
  • To send notifications you’ve enabled.
  • To fix bugs, monitor performance, and prevent abuse.

We do not use your conversations to train public AI models, sell or share them with advertisers, or look at them except when narrowly required to investigate abuse or security incidents.

Third parties (sub-processors)

  • Supabase — authentication and primary database (hosted in the EU).
  • Vercel — application hosting and edge delivery for this website and the API.
  • OpenAI / Anthropic — large language model inference for the chat companion. Conversations sent to these providers are governed by their data policies and are not used to train their public models.
  • Apple Push Notification service / Google Sign-In — delivery of notifications and OAuth login when you choose those methods.

International transfers

Some of the third parties above are based outside the UK and EEA. Where personal data is transferred internationally, we rely on European Commission adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses with appropriate safeguards.

Retention

Account and conversation data is retained while your account is active. When you delete your account, live data is removed immediately and encrypted backups are purged within 30 days as part of normal rotation. Limited records (such as billing entries) are kept where required by law and then deleted.

Your rights

Under the UK and EU GDPR you have the right to access, rectify, delete, restrict, and port your personal data, and to object to certain processing. The fastest paths to exercise these rights:

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk, or with the data protection regulator in your country of residence.

Children

Hrmnys is not directed to children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a minor has created an account, contact info@hrmnys.com and we will remove it.

Changes to this policy

We may update this policy when product features change or laws shift. Material changes will be announced inside the app and dated above.

Contact

Questions? Reach us at info@hrmnys.com or by post at HRMNYS APP LTD, Flat 5 Chelsea House, 9-11 White Hart Lane, London SW13 0PX, England.