Legal
Privacy Policy
Last updated October 21, 2026
What you share with Hypnofy can be personal: your hopes, your worries, what you'd like to change. We built Hypnofy to need as little of it as possible and to keep what it does need on your phone. This policy explains what we collect, why, and the choices you have.
Hypnofy is operated by Maria Patricia Del Mundo as an individual ("Hypnofy", "we", "us"), who is responsible for your information under this policy (the data controller). If Hypnofy moves to a company, that company will take on these responsibilities and we'll tell you.
- Your sessions, scripts, audio, listening history and check-ins are stored on your iPhone, not on our servers.
- When you make a session, your answers are sent to our server to write it, and then they are not kept. We never log what you wrote.
- We don't sell your data, show ads, or use tracking or advertising SDKs.
- You can delete your account and all data on your device in one tap.
What we collect and why
| Information | Why | Where it lives |
|---|---|---|
| Account details: your email address (or the address Sign in with Apple shares, which may be a private relay address) and an account ID | To create and sign in to your account, restore Plus, and let you delete your account | Our account provider, Supabase, until you delete your account |
| Install ID and app key: a random identifier made for your copy of the app | To authenticate the app to our server and apply usage limits | Your device's Keychain; our server keeps a counter of how many sessions each install has made in the current period |
| What you share to make a session: your intake answers, preferred name, settings, and any script you write or edit | To check it for safety, write your session, and voice it | Sent to our server for processing, then discarded. The finished session is stored only on your device |
| Your library and routine: sessions, audio files, listening history, streaks, check-ins, reminder time and preferences | To run the app | On your device only, protected by iOS Data Protection |
| Service logs: event names and counts (for example, "session created"), timings and errors | To keep the service running and fix problems | Our hosting provider. These logs never contain your answers or scripts |
| Purchases: whether you have an active Plus subscription | To unlock Plus | Apple handles payment; we never see your card details |
Things that stay on your phone
- Dictation. If you speak your answers, Apple's speech recognition turns them into text. Where your iPhone supports it, recognition happens on the device; otherwise Apple may process the audio under Apple's privacy policy. Hypnofy doesn't record or keep your voice.
- Crisis screening. A first safety check runs on your phone before anything is sent.
- Face ID lock. If you turn it on, Face ID is handled by iOS. We never receive your face data.
- Reminders. Daily reminders are scheduled locally on your device.
Who processes your information
We use a small number of service providers to run Hypnofy. They process information only on our instructions, to provide their service to us:
- Supabase: accounts, sign-in and hosting of our API.
- Anthropic: its Claude models screen your answers for safety and write and review your script.
- Google Cloud: Text-to-Speech turns your finished script into the narrator's voice.
- Apple: Sign in with Apple, in-app purchases, speech recognition and app distribution.
We don't sell or rent your personal information, and we don't share it for advertising. We may disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business, in which case this policy would continue to apply to your information.
Sensitive information
What you share may reveal things about your health or wellbeing. We use it only to make your session, ask for it only when you choose to make one, and don't keep it on our servers. Our health and safety screen answers (age, driving and health considerations) are stored on your device to decide which features are safe to offer you.
How long we keep it
- Your answers and scripts: not kept by us after your session is made.
- Account details: until you delete your account.
- Usage counters: replaced at the start of each period.
- Service logs: kept for a limited time by our hosting provider, then deleted.
- On-device data: until you delete it, delete your account, or delete the app. Deleting the app deletes your sessions, and we can't recover them.
Your choices and rights
- Delete everything: in the app, go to Settings → "Delete my account and data". This deletes your account on our servers and wipes Hypnofy's data from your device.
- Turn things off: you can turn off microphone, speech recognition and notification permissions in iPhone Settings at any time.
- Access, correction and other rights: depending on where you live (for example, under the GDPR in the EU and UK, or state privacy laws in the US), you may have rights to access, correct, delete or port your information, or to object to or restrict how it's used. Because most of your data lives only on your device, the app itself is the most complete view of it. For anything else, email support@hypnofy.app and we'll respond within the time the law requires. You can also complain to your local data protection authority.
Where the GDPR applies, we process your information to provide the Service you asked for (contract), to keep it secure and working (legitimate interests), and, for sensitive information you choose to share, with your explicit consent, which you can withdraw at any time by not making new sessions or by deleting your account.
Security
Information is encrypted in transit. On your phone, Hypnofy's data and audio files use iOS Data Protection, and you can add a Face ID lock. Our API is stateless and checks every request against a per-install key. No system is perfectly secure, but we work to protect your information and will notify you if the law requires it after a breach.
International transfers
Our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.
Children
Hypnofy is for adults 18 and over. We don't knowingly collect information from anyone under 18. If you believe a minor has used Hypnofy, contact us and we'll delete their account.
Changes to this policy
We'll update this page when our practices change, and tell you in the app or by email before any significant change takes effect.
Contact
Email support@hypnofy.app with any privacy question or request. Company details are on our Legal information page.