Privacy Policy — Hypercue

This Privacy Policy describes how Hypercue ("we," "us," or "our") collects, uses, stores, and shares information when you use Hypercue, our macOS application, together with its companion services at hypercue.ai (collectively, the "Service").

We designed Hypercue so that your work stays with you. Your documents live on your device, your microphone audio is not sent to our servers, and we send content to our servers only when you use features that need them. This policy explains exactly what leaves your device, why, and what happens to it.

If you do not agree with this policy, please do not use the Service. Questions and requests: privacy@hypercue.ai.

1. Scope

This policy covers the Hypercue macOS application, the Hypercue backend services the application communicates with, and the hypercue.ai website. It does not cover third-party services that you use alongside Hypercue (for example, your operating system, your browser, or services you sign in with), which are governed by their own policies.

2. Information We Collect

A. Account information

When you create an account or sign in, we collect:

Email address, used as your account identifier;
Name, if provided by your sign-in method;
Authentication data — session tokens issued by our authentication provider. Tokens are stored on your device in the macOS Keychain.

You may sign in with a one-time email code or with Google. See Section 3 for what we receive from Google.

B. Content you provide

"Content" means the material you create, import, or capture in Hypercue: scripts and other documents, materials you import to support your presentations, questions captured during sessions, generated answers and suggestions, session transcripts, custom vocabulary entries, and an optional profile photo.

Your Content is stored locally on your device by default. It is transmitted to our servers only when a feature requires processing we cannot perform on your device — for example, generating synthesized narration from a script, preparing a script for a session, or generating answers and suggestions grounded in your materials. In those cases, the relevant text is sent to our servers and to the service providers described in Section 6, processed to provide the feature, and returned to your device.

C. Microphone audio and speech recognition

Hypercue listens to your speech during sessions to follow your position in a script and to capture questions. This audio is processed using Apple's speech frameworks on your Mac. Where your system supports it, recognition runs entirely on-device; otherwise, audio may be processed by Apple's speech services under Apple's terms and privacy policy.

Hypercue does not transmit your microphone audio to Hypercue's servers. Text transcribed from speech (for example, a question asked during a session) may be sent to our servers when you use features that respond to it, as described above.

D. Technical and usage information

When the application communicates with our servers, we receive the technical information ordinarily included in such requests: IP address, request timestamps, and request metadata (such as the feature invoked and response status). We use this information to operate, secure, and troubleshoot the Service. The application checks for software updates against a public hosting service, which receives your IP address as part of the request.

The Hypercue application does not include third-party advertising or analytics SDKs.

E. Website

The hypercue.ai website may use cookies or similar technologies necessary for it to function and standard server logs. We do not use cross-site behavioral advertising trackers on the Service. Because no consistent industry standard has been adopted, the Service does not currently respond to "Do Not Track" browser signals.

3. Google User Data

If you choose to sign in with Google, we request only Google's basic identity scopes (OpenID, email address, and basic profile). Specifically:

What we access: your Google account email address, name, and basic profile information.
How we use it: solely to create your Hypercue account, sign you in, display your identity within the application, and communicate with you about the Service.
How we store it: your email and name are stored with your account by our authentication provider; session tokens are stored on your device in the macOS Keychain.
How we share it: with the service providers that operate our authentication and backend infrastructure (see Section 6), and otherwise only as described in Section 7. We do not sell Google user data, do not use it for advertising, and do not use it to develop, improve, or train generalized artificial intelligence or machine learning models.

Hypercue's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Hypercue's access at any time in your Google account security settings, and you may request deletion of the associated account data as described in Section 9.

4. How We Use Information

We use the information described above to:

Provide, operate, and maintain the Service, including processing your Content to deliver the features you invoke;
Create and authenticate your account;
Communicate with you about the Service, including service announcements and responses to your requests;
Secure the Service, prevent fraud and abuse, and enforce usage limits;
Debug, troubleshoot, and improve the Service;
Comply with legal obligations.

We do not sell your personal information. We do not use your personal information for third-party advertising.

Model training. We do not use your Content to train our own artificial intelligence models, and we do not permit the third-party model providers described in Section 6 to use your Content to train their generalized models. If we ever offer a program that uses Content to improve models, it will be described in this policy and subject to your choice before your Content is included.

5. AI Features

Some Hypercue features use large language models and speech synthesis models to generate suggestions, answers, narration, and other output from your Content. Generated output is produced automatically and may contain errors, omissions, or inaccuracies; it is provided to assist your own speaking and judgment, and you should review it before relying on it. We do not use AI to make automated decisions about you that produce legal or similarly significant effects.

6. Service Providers (Subprocessors)

We share information with service providers only as needed for them to perform services for us, and they are not permitted to use it for their own purposes. Our providers fall into the following categories:

Authentication and backend infrastructure providers — account email, name, and authentication data;
Large language model providers — the text sent when you invoke generation features, such as script excerpts, questions, and grounding materials;
Speech synthesis providers — the text to be synthesized for narration features;
Cloud hosting providers that run our backend services.

Content sent to model providers through our backend is used by them to provide the requested processing, is not used to train their generalized models, and is generally deleted by them within a limited period, subject to each provider's applicable retention practices and legal obligations. We may change specific providers over time; this policy is updated when the categories of processing change materially.

7. Other Disclosures

We may also disclose information:

To comply with law, regulation, legal process, or an enforceable governmental request;
To protect the rights, property, safety, or security of Hypercue, our users, or the public;
In connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case we will use reasonable efforts to ensure the successor honors this policy or you are provided notice;
In aggregated or de-identified form that cannot reasonably be used to identify you. We will not attempt to re-identify such data.

8. Data Retention

Content stored on your device remains under your control; you can delete documents in the application, and removing the application's data or uninstalling removes locally stored Content.
Content processed by our servers is processed to deliver the requested feature and is not retained longer than necessary for that purpose and for the operation, security, and troubleshooting of the Service.
Account information is retained while your account is active and for as long as necessary afterward for legitimate business purposes (such as security, dispute resolution, and legal compliance).
Authentication tokens on your device are removed when you sign out.
Server logs are retained for a limited period for security and operations.

Where exact periods are not stated, we retain information only as long as necessary for the purposes set out in this policy.

9. Your Rights and Choices

You may, subject to applicable law:

Access the personal information we hold about you;
Correct inaccurate personal information;
Delete your account and associated personal information;
Export a copy of your personal information in a structured, commonly used format;
Object to or restrict certain processing;
Withdraw consent where processing is based on consent (without affecting prior processing).

To exercise these rights, contact privacy@hypercue.ai from the email address associated with your account. We respond within the time required by applicable law. We may need to verify your identity before acting on a request, and we may retain information we are legally required or permitted to keep. If you decline to provide certain information, some features may be unavailable.

European Economic Area, United Kingdom, and Switzerland. Where GDPR or equivalent law applies, our legal bases are: performance of our contract with you; our legitimate interests (such as securing and improving the Service), except where your rights override those interests; your consent; and compliance with legal obligations. You also have the right to lodge a complaint with your supervisory authority.

California. California residents have the rights described above under the CCPA/CPRA, including the right to know, delete, correct, and port, and the right not to receive discriminatory treatment for exercising rights. We do not sell or share personal information as those terms are defined in California law, and we do not use or disclose sensitive personal information for purposes requiring a right to limit.

10. International Transfers

We are a United States company, and information is processed in the United States and in other countries where our service providers operate. These countries may have data-protection laws different from those of your jurisdiction. Where required, we rely on appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (HTTPS) for communications with our servers and the macOS Keychain for credentials on your device. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your sign-in credentials and your device secure.

12. Children

The Service is not directed to children. It is not intended for anyone under 13 years of age (or under 16 where you reside outside the United States, or the higher minimum age your jurisdiction's law provides). We do not knowingly collect personal information from children below these ages; if you believe a child has provided us personal information, contact privacy@hypercue.ai and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. We will post the updated policy with a new effective date, and if a change meaningfully reduces your rights, we will provide additional notice (such as email or an in-application notice) before it takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact Us

Hypercue Team
Email: privacy@hypercue.ai
Website: https://hypercue.ai

If you have an unresolved privacy concern that we have not addressed satisfactorily, you may contact your local data protection authority.