Privacy Policy

1. Who is responsible

The data controller is Hecaton Inc.. Questions, access requests, and deletion requests: support@zenhive.co.

These practices also apply to the ZenHive Mac app. By creating an account or using the paid features you agree to this policy. The Terms of Service govern the commercial relationship.

2. Summary

• Message contents stay on your Mac by default. Conversations, contacts, attachments, and phone numbers are read locally. They are not uploaded unless you choose the optional cloud reader described in section 5.
• Google Sign-In is identity only. We receive your email address, name, profile photo URL, and a Google account identifier. We do not access Gmail, Drive, Calendar, or any other Google user content.
• The server stores account and subscription records so we can tell whether you have paid, plus follow-up state and product analytics if you sign in (not message text).
• We keep product analytics on the account, not on your messages. When you are signed in, the app records which features you use and how long it is in front, so we can tell whether ZenHive is earning its keep. Message text, names, and phone numbers are not included.
• We do not sell personal data and we do not use it for advertising.

3. Google user data

ZenHive uses Google Sign-In (OAuth 2.0 / OpenID Connect) so you can create an account without a password. Sign-in is required for the trial and for ZenHive Pro. The free message browser does not require it.

When you sign in with Google, Google provides us with:

• your Google account email address;
• your name;
• your Google profile photo URL, if one is set; and
• a unique Google account identifier.

We use that information only to:

• authenticate you and create or restore your ZenHive account;
• display your identity in the app and on the account page;
• associate a subscription, trial, devices, follow-up state, and product analytics with that account; and
• contact you about your account, billing, or a material change to this policy.

We do not access Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google user content. We do not use Google user data for advertising, analytics profiling, or resale. We do not share it except with the processors in section 8, and only as needed to operate sign-in, hosting, and billing.

This use is limited to providing and improving the user-facing account features that are prominent in ZenHive, in accordance with the Google API Services User Data Policy, including the Limited Use requirements.

4. What ZenHive reads on your Mac

With Full Disk Access granted, ZenHive reads, on the device only:

• the Messages history already stored on your Mac — conversations, message text, timestamps, read receipts, tapbacks, and inline replies. It is read-only; ZenHive does not alter that database;
• which conversations you have pinned, so the list matches Messages; and
• attachments in a conversation you open, so they can be displayed.

Separately, and only if you allow it, ZenHive asks macOS for Contacts access so conversations show names and photographs instead of phone numbers. Refusing it costs you names, nothing else.

Reply-speed scores, the leaderboard, and on-device follow-up judgements are computed and stored on your Mac.

5. How conversations are read

Follow Up can rank conversations by your reply habits alone. You may also choose who reads the last few messages to decide whether a reply is still owed:

• Apple Intelligence (default). Apple’s on-device model runs on your Mac. The transcript does not leave the device on this path.
• Claude (optional). If you select it in Settings, the last few messages of a conversation are sent to our server and then to Anthropic to produce a verdict (whether a reply is owed, a short label, and a short instruction). The transcript is not stored by us. Anthropic processes it to return that verdict and is bound by its own terms and data policies.

You can switch back to Apple Intelligence at any time. Snoozes, Done, mutes, and tasks are your decisions and are not replaced when you switch.

6. What the server stores

Our backend runs on Supabase. Stripe handles payments. Together they hold:

• Account identity. A user id and the Google Sign-In fields in section 3.
• Subscription state. Your Stripe customer id and subscription id, the status Stripe reports, the current period end, and when your trial started. A log of status changes is kept so a billing question can be answered.
• Devices. A code identifying each Mac that has activated your account, with a name and the date it was last seen.
• Issued licences. A record that a licence was issued to an account, for a device, on a date. It contains no message text.
• Follow-up state, if you are signed in. Message and conversation identifiers, the verdict metadata (not the transcript), and your mute, snooze, and Done actions, so two Macs on the same account stay in sync.
• Product analytics, if you are signed in. Named events such as opening a section, creating a task, sending a reply from ZenHive, or how long the app was in front. Properties are feature names and counts. Not message contents, contact names, or phone numbers.

The app asks our server where your account stands, receives a signed answer, and caches it for up to seven days. That licensing check does not include message contents.

7. Payments

Stripe processes payments and holds your card details. We never receive a card number. Stripe’s privacy policy governs what it collects on checkout and billing pages. Invoices Stripe keeps are subject to the tax and accounting rules it operates under.

8. Processors and other parties

• Google — Sign-In only. It provides the account fields in section 3. We do not send Google any message data or any data about you beyond the OAuth request itself.
• Supabase — hosts accounts, sign-in, licensing records, follow-up state, and product analytics.
• Stripe — subscriptions, cards, invoices, and the customer billing portal. We pass your email so Stripe can identify the customer.
• Anthropic — only if you choose Claude in Settings. Receives the last few messages of a conversation to return a verdict; we do not retain that transcript.
• GitHub — hosts the download and the update feed. Downloading the app means GitHub sees a request from your IP address.

None of these parties receive your Messages history except Anthropic, and then only when you have opted into Claude.

9. This website

The site sets no advertising or tracking cookies and runs no analytics script. Your browser may store a light-or-dark preference and, if you sign in on the account page, a session token. Both live in local storage and can be cleared at any time.

10. Retention and deletion

Account, subscription, device, licence, follow-up, and analytics records are kept while your account exists. Write to support@zenhive.co from the address you signed in with and we will delete your account and the rows attached to it, other than records Stripe is required to keep for its own accounting. Deleting the Mac app deletes data that was only ever stored on that Mac.

You can also revoke ZenHive’s access to your Google account at Google Account permissions. Revoking access signs you out of new sessions; it does not by itself delete the records we already hold. Email us if you want those deleted too.

11. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete the personal data we hold, and to object to or restrict certain processing. Contact support@zenhive.co. We do not sell personal data.

12. Children

ZenHive is not directed at children. We do not knowingly create accounts for anyone under 13, or under the age of digital consent where you live if that age is higher.

13. Changes

If this policy changes in substance, the date at the top changes with it. Material changes will be announced to subscribers by email before they take effect.

Questions: support@zenhive.co. See also the Terms of Service.