Privacy Policy
Information you provide
HiveMind stores account and authentication details; notes, folders, memories, prompts, transcripts, searches, model choices, and saved places; profile information, posts, replies, reactions, reshares, bookmarks, connections, blocks, reports, direct and group messages; and photos, videos, files, and avatars you explicitly upload. Free-form content may contain information you consider sensitive.
Photos, audio, video, and location
When you add selected Apple Photos, their originals are privately stored in HiveMind and optional Photo understanding labels and describes their image, video, and original-audio content for search, connections, questions, and private Moments. People processing is a separate opt-in. When enabled, a private self-hosted OpenVINO worker and AWS Rekognition independently detect and compare faces; neither provider is allowed to name a person. Only you can confirm a person tag. Photo observations can include private face boxes, quality scores, an OpenVINO face vector, and opaque AWS face references. Video processing keeps only the conclusion that a confirmed person may appear in a video, not face boxes, timestamps, locations, or appearance counts. Precise location remains off unless you enable it. Photos or videos you explicitly attach elsewhere are also uploaded. Voice-note audio is transcribed on device; the transcript can be stored and processed. Optional My Voice enrollment sends a recording to ElevenLabs to create an AI narration voice. Voice and video calls send live media through our calling provider to participants and are not intentionally recorded by HiveMind.
How we use information
We use this information to authenticate you; provide, synchronize, search, and secure your Mind; operate AI chat, organization, synthesis, and permitted autonomy; deliver social, messaging, calling, attachment, notification, moderation, export, support, and account-deletion features; prevent abuse and replay; diagnose failures; and, when enabled, meter credits and maintain purchase entitlements. We do not use information for cross-company advertising tracking.
AI and service providers
HiveMind presents optional third-party AI choices on its AI and media privacy screens. Mind help sends only the parts of messages, prompts, notes, memories, attachments, and connected-data details needed for a feature to OpenAI, Anthropic, Google, DeepSeek, or xAI, depending on your model choices. With Photo understanding enabled, Google Gemini receives a full photo, a video up to 60 seconds or a source-wide analysis reel for a longer video, and any supplied transcript to produce descriptions, facet labels, and privacy candidates. Temporary Gemini media uploads are deleted after the request. ElevenLabs Scribe receives short original-audio windows for transcription; transcript deletion is durably queued immediately after provider use and retried until confirmed. OpenAI receives only short label terms, never the photo, video, transcript, face box, or face vector, to merge equivalent labels such as dog and dogs. With people processing enabled, AWS Rekognition receives photo bytes or private sampled-video face crops directly in the configured AWS region without HiveMind creating S3 copies. Rekognition collections do not store source images but retain face vectors until their face, user, or collection references are deleted. Rekognition is disabled unless an organization-wide AWS AI-services opt-out policy has been verified so this data is not used for AWS service improvement or model training. OpenVINO face inference runs on HiveMind-controlled private infrastructure. Optional My Voice enrollment sends a recording to ElevenLabs; the provider voice and sample may remain while My Voice is active and are queued for provider deletion when you remove or replace the voice or delete your account. The separate OpenAI media-sharing safety workflow is currently disabled, so ordinary social attachments are not sent to OpenAI for that purpose. Other processors can include our hosting and database providers, private object storage/CDN, Apple and Google authentication, Apple Push Notification service, LiveKit/WebRTC calling infrastructure, maps/geocoding, Stripe when billing is enabled, and our support mailbox. HiveMind does not use private Mind content to train its own general-purpose models.
Sharing and visibility
Private Mind content is not displayed to other users. Content you publish, or your Mind publishes under permissions you grant, is shown only at the audience tier you select. Messages and call participation are shared with their participants. Reports are available to authorized safety operators. Blocking is designed to hide each user from the other and stop new interaction across the Hive.
Purchases and operational data
When billing is enabled, HiveMind and Stripe process customer, subscription, entitlement, purchase, refund, credit-ledger, and usage-metering records. HiveMind does not receive full card details entered on Stripe’s hosted page. We also process session and device identifiers, push tokens, IP/request metadata, timestamps, bounded audit and idempotency records, rate-limit counters, errors, and support correspondence for security, reliability, and support.
Retention and choices
Active account content is retained while needed to provide the service or until you delete it using an available feature. You can delete or unpublish content, change audiences and autonomy, disconnect Photos, choose photo-location detail, disable notifications, block or report users, export your data, and delete the account. Mind help, Photo understanding, My Voice, and people processing are separate choices. For people processing, you can separately pause future processing, erase biometric and provider data, or delete owner-authored person tags. Pausing does not erase existing biometric data or tags. Erasing biometric data removes local face vectors and observations and queues AWS face, user, and collection deletion while retaining your confirmed tags. Deleting person tags removes identity associations without deleting the underlying biometric observations. My Voice and its sample may remain at ElevenLabs while the voice is active; removing or replacing the voice queues provider deletion. A provider request already in progress may finish. Automatically suggested matches remain private and never enter person search, catalogs, or film production until you confirm them. Security, consent-audit, support, billing, and provider-deletion records are retained only for their operational, contractual, dispute, fraud-prevention, or legal purpose; backups expire on their managed schedules.
Deletion
Deleting your account (Settings → Delete Account) immediately disables access. A retryable erasure process revokes captured Sign in with Apple authorization, deletes any Stripe customer and cancels active Stripe subscriptions, removes all versions and incomplete uploads under your storage prefix, deletes local biometric vectors, observations, confirmed tags, and provider references, requests deletion of retained AWS Rekognition faces, users, and collections, and then removes account, Mind, social, message, call, device, AI, embedding, usage, and active-service records. Provider deletion is reconciled until acknowledged. Older Apple accounts without a stored revocation token receive manual Apple Account instructions. Limited backups and records retained for security, fraud prevention, billing disputes, or legal compliance may remain until their applicable schedules expire.
Security, rights, and changes
We use access controls, encrypted network transport, private storage, scoped authorization, and deletion verification to protect information, but no system is risk-free. Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing. Contact us to exercise a right or appeal a moderation action. We will update the version date and re-present material changes where required.
Contact
Privacy questions: skyler@hivemindresearch.com.