Privacy Policy

MuteHint is a Bring Your Own Key (BYOK) desktop application. The audio captured during your conversations is processed locally on your device and sent directly from your device to your chosen third-party LLM provider (such as Google Gemini or Groq) using your own API key.

What we handle on our servers: account information, subscription status, billing metadata from Lemon Squeezy, the devices you sign in on, your session records (time, length, profile, the hints shown and the context text you typed), and the website analytics described below.

2.1 Information you provide

• Account data: name and email address, obtained via Google OAuth or direct sign-up.
• Authentication data: Google OAuth identifiers (we do not see your Google password).
• Support communications: messages you send to support@mutehint.com or privacy@mutehint.com.

2.2 Information generated by your use of the Service

• Subscription data: plan (Free, 15-Day Pass, Monthly, Lifetime), subscription status and dates, and receipts for your payments. There is no license key: the app signs in with your MuteHint account. Billing transactions and tax data are handled by Lemon Squeezy as Merchant of Record; we receive a webhook record indicating purchase and renewal.
• Session records: for each session in the desktop application: when it started, how long it lasted, the profile you picked, the number of hints, the text of the hints shown to you, and the context text you typed or pasted in for the session (for example a CV, a job description or notes). The hint text and the context text are kept for plans that include session history. On the Free plan, which has no history, they are not stored.
• Device data: for each device you sign in on: a hashed device identifier, the platform (macOS or Windows), a device label, the application version and when the device was last seen.
• Website analytics: pseudonymous events about how our website is used (for example, pages viewed). Collected via PostHog and Google Analytics on the website only, and only if you accept analytics in the banner shown on your first visit. Google Analytics counts the public pages only, with advertising features switched off. The desktop application includes neither. PostHog never receives your call audio, and its session recording is switched off in our code. See Cookies and local storage.
• Page-speed measurements: our website host, Vercel, measures how quickly each page loads (page address, browser, device type, operating system, network speed and country). This runs on every visit and is not connected to the analytics banner.
• Technical logs: IP addresses, user-agent strings, and request metadata when you interact with our website or backend, retained for security and abuse prevention.

2.3 Information stored locally on your device (not on our servers)

The desktop application stores certain data only on your local machine. We never see this data:

• Your third-party API keys (encrypted using your operating system's built-in protection where that is available).
• Audio captured during conversations (held in memory only, transiently, while sent to your LLM provider).
• Transcripts (held in memory only; never stored on our servers).
• Application preferences and settings.

2.4 Information stored on our servers

The account, subscription, session and device data listed in 2.1 and 2.2 is stored on our servers. In particular, for every session on every plan:

• Hint text: the suggested answers shown to you during the session.
• Session context: the context text you typed or pasted in for the session.
• Session details: the session’s time, length and profile.

These are stored so that paid plans can show your session history. You can request deletion at any time (see Your rights below). Call audio and your API keys are never stored on our servers.

We use the data we collect to:

• Provide and operate the Service, authenticate you, and deliver the application.
• Manage your subscription and what your plan gives you access to.
• Communicate with you about your account, security, and important product changes.
• Send marketing communications you have agreed to receive (you can unsubscribe at any time).
• Understand product usage in aggregate and improve the Service.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with our legal obligations.

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing are:

• Contract performance: to provide the Service you have signed up for.
• Legitimate interests: for product analytics, security, fraud prevention, and direct marketing to existing customers, balanced against your rights.
• Consent: for non-essential cookies and any marketing emails to non-customers.
• Legal obligation: to comply with tax, accounting, and regulatory requirements.

We rely on the following sub-processors. Each is bound by data-processing terms requiring appropriate security and use-limitation safeguards:

• Vercel Inc. (USA): website and API hosting.
• Supabase, Inc. (USA / EU regions): database and authentication backend.
• Lemon Squeezy (USA): payment processing and Merchant of Record. Lemon Squeezy independently controls payment-card and tax data under its own privacy policy.
• Resend (USA): transactional email delivery.
• Upstash, Inc. (USA): Redis caching and rate-limiting.
• PostHog Inc. (USA / EU region): product analytics.
• Google LLC (USA): Google OAuth sign-in, and Google Analytics if you accept analytics.

Most of our sub-processors are based in the United States. Where we transfer personal data of EU, UK, or Swiss users outside the EEA/UK/Switzerland, we rely on the European Commission's Standard Contractual Clauses (or the UK International Data Transfer Addendum) and additional safeguards as required.

• Account data: kept while your account is open. When you delete your account (Account page in your dashboard), it is erased from our database at once: your name, email address, password, Google sign-in link, job title, settings, sign-ins, signed-in computers and session records. The account is then only an anonymous record that it was deleted.
• Session records (session details, hints shown and context text): kept until you ask us to delete them or you delete your account, when they are erased from our database at once. No shorter fixed period is set.
• Subscription & billing records: what you bought, when, the amount and its receipt are kept for at least 7 years to comply with tax and accounting laws, also after you delete your account. They are then linked only to the anonymous account record, not to your name or email. Lemon Squeezy, as Merchant of Record, keeps its own payment records under its own policy.
• Product analytics: retained for up to 24 months in identifiable form, and indefinitely in aggregate.
• Support communications: retained for up to 36 months.
• Local data on your device: retained until you delete it or uninstall the application.

Depending on where you live, you may have the following rights:

• Access to a copy of your personal data.
• Correction of inaccurate data.
• Deletion of your data (the “right to be forgotten”).
• Restriction of, or objection to, certain processing.
• Data portability.
• Withdrawal of consent (where processing is based on consent).
• The right to lodge a complaint with your local data-protection authority.

To exercise any of these rights, email privacy@mutehint.com. We will respond within 30 days and may need to verify your identity before fulfilling a request.

If you live in the European Union or the United Kingdom, send any question or request about your personal data to privacy@mutehint.com.

We use industry-standard security practices including TLS encryption in transit, encrypted database storage, role-based access controls, JWT-based authentication, and secret management for credentials. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

The Service is not directed to children under 18 and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact privacy@mutehint.com and we will delete it.

Our website keeps a small amount of data in your browser’s local storage: your login token, your consent choice and, only if you accept, analytics data. A banner on your first visit lets you accept or decline analytics. See Cookies and local storage for full details.

We will post any material change to this Policy on this page and update the “Last updated” date. For material changes affecting how we use existing personal data, we will give at least 14 days' notice and, where required, ask for fresh consent.

MuteHint is run by its founders and is not yet a registered company. Every purchase is sold and handled by Lemon Squeezy, the Merchant of Record. For privacy questions, data requests, or to exercise your rights: