Privacy Policy

Last updated: [date of publishing]

Draft. This text is a starting point written in plain English. Have it reviewed by a lawyer and fill in the highlighted parts before Hintzi is sold to the public.

This policy explains what information Hintzi collects, why, and the choices you have. Hintzi is provided by [legal business name], [registered address] ("we", "us"). Questions: [privacy email, e.g. privacy@hintzi.com].

The short version

Hintzi only looks at your screen when you press the Hintzi shortcut and ask a question.
The screenshot is used to work out your hint and is not stored by us after the answer is sent.
We never sell your data and we don't use your screenshots to advertise to you.
You can delete your account and personal data at any time.

1. What we collect

Account details: your name, email address, a securely scrambled (hashed) version of your password, language, plan, and the date you accepted our terms.
When you ask for a hint: your question; a screenshot of the app window you're using, made smaller before sending; the names and positions of buttons and menus in that app; the app's name and window title; and the earlier hints in the same task.
Devices: a random identifier the app creates, your computer's name and operating system, and when each device was last used, so you can see and sign out your devices and so plan limits work.
Usage records: when you asked, which app you were in, whether it worked, how long it took and how many AI resources it used. We use these to count your plan's hints, keep Hintzi running well and control costs. They don't include screenshots or what you typed.
Payments: handled by our payment provider [provider name]. We don't see or store your full card details.
Support emails you send us.

2. How screenshots are handled

Screenshots and your question are sent over an encrypted (HTTPS) connection to our server, which passes them to our AI provider to create your hint. Our servers keep them in memory only while working on your request (at most a few minutes if the screen was uploaded while you were typing) and don't save them to disk or logs. Our AI provider is [e.g. OpenAI]. Under its business terms, data sent through its API isn't used to train its models, and may be kept for a limited time for safety and abuse monitoring before being deleted. [Check and link the provider's current data-retention terms here].

Avoid asking for help while sensitive information (for example passwords, medical or banking details) is visible on screen.

3. Why we use your information

To provide Hintzi: sign you in, give hints, count usage and apply your plan (to perform our contract with you).
To keep accounts and the service secure and to prevent fraud and abuse (our legitimate interest).
To send account emails such as confirming your email, password resets and important changes. We'll only send marketing emails if you agree.
To meet legal obligations, such as tax records for payments.

4. Who we share it with

Only service providers that help us run Hintzi, bound by contracts to protect it: cloud hosting ([e.g. Google Cloud]), the AI provider ([e.g. OpenAI]), email delivery ([e.g. Resend]) and payments ([provider]). We may disclose information if the law requires it. We don't sell personal information.

5. Where it's stored and for how long

Data is stored in [region, e.g. the European Union] and may be processed in other countries by the providers above, with appropriate safeguards.
Account details are kept while your account is open. When you delete your account we remove your name, email and devices straight away; anonymous usage counts may be kept for statistics.
Payment records are kept for as long as tax law requires.

6. Your choices and rights

See and update your details on the Account page.
See every computer you're signed in on and sign any of them out.
Delete your account from the Account page, or ask us to.
Depending on where you live, you may also have the right to get a copy of your data, object to some uses, or complain to your data protection authority. Contact us and we'll help.

7. Security

Connections are encrypted, passwords are hashed, the app holds no secret keys, and sign-ins on each device can be revoked at any time. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

8. Children

Hintzi isn't meant for children under [minimum age]. If you believe a child has given us personal information, contact us and we'll delete it.

9. Changes

If we change this policy in a meaningful way, we'll tell you by email or in the app before the change applies.