Hermes iOS Companion Privacy Policy

Summary

Hermes iOS Companion does not provide a developer-hosted account, analytics service, advertising system, or tracking service. You connect the app to a Hermes Gateway that you select and control. Apart from Apple platform services such as push notifications, the app sends content only to that Gateway as needed to perform actions you request.

Information stored on your device

Depending on the features you use, the app may store the following information in its app container, the shared App Group container used by the app and its extensions, or the iOS Keychain:

• Gateway profile names, addresses, preferences, language, and connection state.
• Gateway credentials in the iOS Keychain.
• Message drafts, selected session state, run and activity state, approval state, and notification routing state.
• Attachments and preview caches.
• Recordings, audio-inbox items, transcripts, analysis records, and related processing state.
• Share Extension outbox items waiting to be sent.
• Local diagnostics and operational logs.

The app does not use this local information for advertising or cross-app tracking.

Information sent to your Gateway

When you use connected features, the app may send the following information to the Gateway you selected:

• Messages, prompts, session and project actions, approval decisions, and tool-related requests.
• Attachments, shared text, links, images, audio, and recording uploads.
• Transcription and audio-processing requests.
• A push-notification device token, device name, and app language when you enable notifications.
• Technical request information needed for authentication, reliability, and delivery.

The Gateway, its operator, and any AI or storage providers configured behind it determine how remotely processed information is retained and used. Review the policies and configuration of your Gateway and its providers. The developer of this app does not control user-selected Gateways.

Apple services and permissions

• Apple Push Notification service transports notifications. The app registers a device token with your selected Gateway so that Gateway can request notification delivery.
• Microphone access is used only when you start a recording or voice-input feature.
• Camera access is used when you choose to scan a connection QR code.
• Face ID or device authentication may protect app access and sensitive actions.
• Background audio is used only while an explicit recording is active or being finalized as allowed by iOS.

Apple processes information under Apple’s own terms and privacy policies.

Developer access

The developer does not operate a general-purpose Gateway, message relay, analytics backend, or content storage service for ordinary users of the app. The developer cannot access content stored on your device or on a Gateway you select merely because you use the app.

If you voluntarily contact support, the developer may receive the information you choose to submit, such as your contact details, device or app information, diagnostics you attach, and your message. That information is used only to respond to the request and maintain the app.

A temporary, isolated environment may be supplied to Apple solely for App Review. It is not available to ordinary users and is removed after the review process.

Analytics, tracking, advertising, and sale

The app contains no third-party analytics or advertising SDK, does not track you across apps or websites, and does not sell personal data. If these practices change, this policy and the App Store privacy information will be updated before the changed behavior is released.

Retention and deletion

Local information remains until you delete the relevant item, remove a Gateway profile, clear data through an available app control, or remove the app. Removing a Gateway profile deletes its stored connection credential. Individual recordings, audio items, drafts, and other local records may have their own delete controls.

Removing the app normally removes its app-container and App Group data. iOS may retain Keychain items according to platform behavior, so remove Gateway profiles before uninstalling if you want the app to request deletion of their credentials.

Information stored or processed by your Gateway remains subject to that Gateway’s configuration and retention rules. Use the Gateway’s own controls to delete remote sessions, uploads, transcripts, or other remote resources.

Accounts

The app does not create or host a developer-controlled user account. A Gateway profile is a local connection configuration, not an account with the app developer.

Children and sensitive content

The app is not designed for children. It can display and submit content from a user-controlled Gateway and its configured AI providers. Users are responsible for meeting the age and content requirements of their Gateway, AI providers, organization, and local law.

Security

Gateway credentials are stored in the iOS Keychain. Network requests use the address you configure; use HTTPS or a trusted private network such as Tailscale. No method of storage or transmission is completely secure, and you are responsible for securing the Gateway you connect.

Changes

Material changes will be reflected in this policy and, where required, in the App Store privacy information. The effective date above identifies the current version.

Contact

For privacy or support questions, use the contact page.