Your data, quietly.

HelloAgent (“HelloAgent”, “we”, “us”) is operated as a sole-proprietor service. This policy explains what we collect, why, where it lives, and the controls you have. If something here is unclear, write to privacy@helloagent.cc and we’ll answer in plain English.

1. What we collect

We collect only what we need to run the service.

• Account. Email, a chosen handle, and (if you sign in via Apple or Google) the OAuth identifier those providers return. Passwords, when used, are stored hashed by our identity provider (Supabase).
• Profile. Display name and short bio you choose to add. Optional.
• Conversation content. The messages you send to agents and the replies they send back. Stored in a Postgres database we operate so the inbox keeps working across devices and offline periods.
• Agents you create. Agent metadata (name, handle, description, capabilities) and the API tokens you generate. Tokens are stored hashed.
• Device + diagnostics. A device identifier when you opt into push notifications, plus crash and error logs from the iOS app. Diagnostic logs do not include message content.

We do notcollect contact lists, photos, location, microphone or camera input, advertising identifiers, browsing history outside the app, or anything we’d call surveillance telemetry.

2. How we use it

• To authenticate you and keep your session alive.
• To deliver messages between you and the agents you talk to, including offline catch-up replay.
• To operate, debug, and improve the service.
• To contact you about your account, security incidents, and material changes to this policy.

We do not sell your data. We do not use your messages to train models. We do not run third-party advertising or analytics SDKs in the iOS app.

3. Where it lives

Account data and message history live in a managed Postgres database operated by Supabase. The relay that ferries messages runs on our servers. Both are hosted in U.S. regions. Some traffic is routed through Vercel’s edge network for the marketing site and web client.

When you sign in with a third-party provider (Apple, Google), that provider’s own privacy policy governs the data they hold about you. We only receive the identity claims they choose to return.

4. Sharing

We share your data only with the providers required to run the service:

• Supabase — auth and database hosting.
• Vercel — web client and marketing-site hosting.
• Apple, Google — only if you choose those sign-in options, and only the identity tokens needed to authenticate.
• Agents you talk to— when you send a message to an agent, the agent (and the human or organization who runs it) receives that message. That’s the entire point of the service. Choose carefully who you converse with.

We will disclose data to law enforcement only when compelled by a valid legal request and we will, when permitted, notify you first.

5. Retention & deletion

You can delete your account at any time from Settings → Danger zone → Delete account in either the iOS app or the web client, or by emailing privacy@helloagent.cc. Account deletion removes your profile, agents you own, and your conversation history within 30 days. Diagnostic logs roll off within 60 days regardless of account status.

6. Security

Traffic between the iOS app and our relay uses TLS. Passwords are hashed at rest. Agent tokens are hashed at rest. We follow standard industry practice for vulnerability response and incident notification, but no service can guarantee perfect security — please use a strong, unique password.

7. Children

HelloAgent is not directed at children under 13, and we don’t knowingly collect personal data from them. If you believe a child has used the service, write to us and we’ll remove the account.

8. Your rights

Depending on where you live (EU/UK GDPR, California CCPA, etc.) you have the right to access, correct, port, or delete the data we hold about you. Email privacy@helloagent.cc and we’ll respond within 30 days.

9. Changes

We’ll update the “Last updated” date at the top of this page when we change anything material, and email accountholders when the change is significant.

10. Contact

Privacy questions: privacy@helloagent.cc
General support: help@helloagent.cc