Last updated: May 12, 2026
Privacy Policy
The short version
Hush is a private voice journal. Your recordings are transcribed by AI, analyzed for mood, and stored only so we can show them back to you. We don't sell your data, we don't show ads, and you can delete your account — and everything in it — from inside the app at any time.
What we collect
- Account info: email, display name, and (for Google/Apple sign-in) your provider profile picture and a stable provider user ID.
- Journal content: audio recordings are processed in real time by OpenAI Whisper. The audio file itself is NOT stored on our servers — only the transcript text, an AI-detected mood label (e.g. "calm", "anxious"), a sentiment score, and short emotion tags.
- Usage data: timestamps of when you record entries, your streak history, and your reminder preferences.
- Notification tokens: if you enable push notifications, the browser/native push subscription identifier so we can deliver your daily reminder.
What we do with it
- Show your past entries back to you, with mood pills and the weekly insight paragraph.
- Generate weekly AI reflections using OpenAI GPT-5.2 on your recent entries (transcript text only).
- Email you a password-reset link when you ask for one.
- Send the daily reminder you've opted into (email and/or push).
- Operate the service. That's it. We do not sell, rent, or share your data with advertisers.
Who else sees it
- OpenAI — receives your audio for transcription (Whisper) and your transcript text for mood analysis & weekly insights (GPT-5.2). OpenAI's API does NOT train on this data. Their policy: https://openai.com/policies/api-data-usage-policies.
- Resend — receives only the recipient email address + the email subject/body when we send you a transactional email.
- Push providers (Apple APNs, Google FCM, browser push endpoints) — receive a short notification payload (title + body + URL) for delivery.
- MongoDB Atlas — hosts our database.
- We share nothing else with any third party, ever.
How long we keep it
We keep your data until you delete your account. Daily reminder logs are auto-purged after 90 days. Password reset tokens expire after 1 hour and are deleted automatically.
Your rights
You can export, edit, or delete any individual entry from the app. You can permanently delete your account — including every entry, session, push subscription, and reminder log — by going to Settings → Delete my account. The deletion is immediate and irreversible. You may also email us at help@apphush.online to exercise any GDPR / CCPA right (access, portability, rectification, deletion, objection).
Children
Hush is not intended for children under 13. We do not knowingly collect data from anyone under 13. If you believe we have, please email us and we'll delete it.
Changes
If we change this policy in a way that materially affects you, we'll email you at least 7 days before the change takes effect.
Contact
Questions? help@apphush.online