Human Hub Privacy Policy
Human Hub ยท Last updated: 2026-10-09
WHO WE ARE
Human Hub (the app, we, us) is a personal-CRM app published by Melmiztonian LLC. Contact: hey@hellomelmo.com.
WHAT THIS POLICY COVERS
How Human Hub collects, stores, uses, and shares the personal data you give it. It also covers what we can and cannot see, which is the part most people actually want to know.
PRIVATE MODE
Human Hub has optional end-to-end encryption, called Private mode. You turn it on in Settings, under Your Data.
With it on, the names, nicknames, phone numbers, emails, birthdays, notes, check-ins, follow-ups, memories, tags and custom items in your Hub are encrypted on your phone before anything is sent to us. The key is generated on your device, stored in your iPhone's Keychain, and never reaches our server. We store text we cannot read. Each value is also cryptographically tied to your account and to the specific field it belongs to, so we cannot read your Hub or rearrange it.
You get a recovery code. That code is your key. We keep no copy, there is no escrow, and there is no reset link, because any of those would hand us the ability to decrypt your Hub. If you lose both your device and your recovery code, your data cannot be recovered by anyone, including us.
Private mode is OFF by default. You have to turn it on. We made it opt-in because the trade above is real and irreversible, and it should be your choice rather than a surprise.
Two things Private mode does not cover yet:
- Photos are never encrypted. They are stored privately and no other user can reach them, but we can see them.
- Voice commands. A remote service cannot read encrypted text, so anything you dictate is decrypted on your phone before it is sent for parsing. See "Voice commands" below.
DATA WE COLLECT
We collect only what you actively give us.
When you sign in:
- Your email address and display name from your Google or Apple account. Apple may give us a private relay address instead, and we treat it the same way.
- Your profile photo, if you set one.
When you use the app:
- Your contacts: names, nicknames, phone numbers, emails, birthdays, photos, notes, and anything else you type into a contact's profile.
- Your check-ins: dates, channel, mood, free-form notes, and optional photos.
- Your follow-ups, events, memories, gratitude entries, conversation topics and custom items.
From your device, only if you grant it:
- iOS Contacts, so you can pick which contacts to import. We do not upload your address book. Only contacts you tap to import are stored.
- iOS Calendar, to mirror Human Hub follow-ups and birthdays into a separate "Human Hub" calendar. We do not read or change your other calendars.
- Microphone and Speech Recognition, for voice commands.
- Your approximate location, once during onboarding, to fill in your city. We do not track your location.
Technical data:
- Purchase data. RevenueCat stores your subscription status so the app can unlock Pro features and offer Restore Purchases. We also send RevenueCat your email address and display name so we can tell accounts apart when you contact support. Apple-side receipt data stays with Apple.
- Crash data. In App Store builds only, Sentry receives crash reports carrying a random account identifier, your app version and your device model. No names, notes, photos or transcripts.
- Your IP address, recorded when you use a voice command, to rate-limit abuse of that feature.
VOICE COMMANDS
This is the one place your content leaves your phone in readable form, so here is exactly what happens.
When you dictate a command, your phone records audio. While you are online, that audio is processed by Apple's speech recognition service to turn it into text. While you are offline, it is processed on your device instead. We never receive or store the audio itself.
The resulting transcript is then sent to our server, which forwards it to Anthropic's Claude API so the words can be turned into actions. Along with the transcript we send the first name, last name and nickname of the people on your list, so the right person can be matched. We send the whole list, not only the person you mentioned, because the matching has to happen somewhere.
The transcript itself often contains details about a person, because that is what you dictated. We do not send your notes, photos or other contact fields separately, but the sentence you spoke goes as you spoke it.
Per Anthropic's published policy, API inputs are not used to train their models. We do not have a separate agreement with them about how long inputs are retained.
If you never use voice commands, none of this applies to you. Typing never sends anything to an AI service.
WHO PROCESSES YOUR DATA
- Supabase (US, Virginia): our database and photo storage. Encrypted at rest, and additionally encrypted by Private mode if you have it on.
- Anthropic: voice transcripts and contact names, when you use voice.
- Apple: speech recognition when you are online, address lookups when you type a location, and App Store purchases.
- RevenueCat (US): your subscription status, email address and display name.
- Sentry (US): crash reports, carrying a random account identifier and no content.
- Purelymail and Google (Gmail): if you email our support address, your message and address are handled by our mail provider and inbox.
- Shopify (US): our store and mailing list. If you have a Human Hub account, your email address is also held as a customer record there.
- Google Calendar, if you choose to connect it.
WHAT WE CAN SEE
Without Private mode on, we can read what is in your Hub. Every database row is gated so that no other user can reach it, and we verify that rather than assume it, but as the operator we hold the keys to our own database. We do not browse it. We look at an account only when you ask us to, for support.
With Private mode on, we cannot read your names, notes or any other content. What stays visible to us either way:
- Your own name and email, because signing in requires them.
- How many people are in your Hub, how you have prioritized them, how often you intend to be in touch, and when you last were.
- How a check-in felt, if you set that.
- The dates in your Hub, including birthdays.
- Your photos.
We can see shapes and counts. With Private mode on, we cannot see content.
OUR WEBSITE
hellomelmo.com is a Shopify store, and it carries tracking that the app does not.
- Shopify's own analytics.
- A Meta (Facebook) pixel, which records page views and may be used for advertising.
- Our own first-party page-view record, which stores a random visitor identifier in your browser so repeat visits can be recognized.
These run on the website, including on this page. They do not run in the app. The Human Hub app itself contains no analytics SDK, no advertising network and no attribution library, and its privacy manifest declares zero tracking domains.
WHAT WE DO NOT DO
- No tracking inside the app.
- No selling your Hub data.
- No password storage. Sign-in is Google or Apple only, and we never see a password.
- No reading or changing your existing calendars.
- No uploading your address book.
YOUR RIGHTS
- See your data. Settings, tap your profile card, then Export My Data produces a JSON file containing everything in your Hub, including your photos. It does not include your account record, our voice rate-limit logs, or the records held by the processors listed above. The export is in readable form even if Private mode is on, so treat the file as sensitive.
- Delete your data. Settings, tap your profile card, then Delete All Data. This removes every row we hold for you, every photo, and the account itself.
- Withdraw consent. Sign out and stop using the app.
- Contact us. hey@hellomelmo.com for anything we have not surfaced as an in-app action.
If you are in the EU or UK (GDPR) or California (CCPA), you have additional rights, including the right to know what we hold, to correct inaccuracies, and to complain to your data protection authority.
HOW LONG WE KEEP YOUR DATA
For as long as your account is active.
When you delete your account, everything goes at once: all of your rows across every table, every photo in storage, and your login itself. There is no archived copy that outlives it.
If any part of that fails, your account is deliberately left intact and the app tells you so, rather than reporting success and leaving data behind.
CHILDREN
Human Hub is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has signed up, email hey@hellomelmo.com and we will delete the account.
CHANGES TO THIS POLICY
If we change how we handle your data we will update this page and the Last updated date above.
CONTACT
Questions, complaints, requests: hey@hellomelmo.com
ยฉ Melmiztonian LLC