Privacy Policy

1. Scope

This Privacy Policy applies to Hiddle's website, voice concierge, and related services available at hiddle.app (the "Service"). It applies to account holders and, where relevant, people who receive a personal message sent through Hiddle.

2. Information we collect

Account and settings information

We process account identifiers such as your email address, authentication information managed by Supabase Auth, your optional profile name and birthdate, voice and agent preferences, memory controls, and the designated contact name, phone number, and email address you choose for personal messaging. Your profile name may be shown to your designated contact during SMS enrollment; your birthdate is not included in those messages.

Waitlist information

If you join the Hiddle waitlist, we collect your email address to manage your place and send product or early-access updates.

Conversation information

When you start a voice session, Hiddle processes microphone audio, live transcriptions, assistant responses, call timestamps, and technical session information. Audio recording is enabled by default and is visibly indicated during a call. Recordings and transcripts may be stored with your account.

Memory and personalization

If memory is active, Hiddle may derive and store facts, preferences, conversation summaries, and a personalized profile from your conversations. You can pause memory, review or correct stored memories, delete individual memories, reset memory, or use Forget everything to delete memories, conversation history, and audio recordings while retaining your account and settings. Incognito calls do not use or create long-term memories.

Messaging information

If you ask Hiddle to send a personal SMS, we process the designated recipient's phone number, the confirmed message body, delivery metadata, provider message identifiers, and error or status information. We also process inbound SMS keywords, recipient consent status, consent source, disclosure version, and opt-in or opt-out timestamps. For secure web invitations, we also process a one-way token hash, invitation status and expiration, a one-way IP address hash, browser user-agent information, and confirmation-delivery status. Hiddle sends only after the recipient opts in and the account holder confirms the exact personal content.

Technical information

We may process IP address, browser and device information, request logs, error logs, authentication events, and security metadata needed to operate and protect the Service.

3. How we use information

• Provide real-time voice conversations and transcription.
• Save conversation history, recordings, settings, and memories you choose to use.
• Send a user-requested personal message to a designated recipient.
• Authenticate accounts, prevent abuse, troubleshoot failures, and secure the Service.
• Comply with applicable law and telecommunications requirements.

We do not sell personal information. We do not use phone numbers or SMS consent for third-party or affiliate marketing.

4. Service providers and disclosures

We disclose information only as needed to operate the Service, follow your instructions, protect Hiddle and its users, or comply with law. Current providers include:

• Supabase for authentication and account data storage.
• Google Firebase and Google Cloud for application hosting, logs, and deployment infrastructure.
• Alibaba Cloud Model Studio / Qwen for real-time voice and language-model processing.
• Mem0 for optional long-term memory and personalization.
• Cloudflare R2 for private audio recording storage.
• Twilio and participating telecommunications carriers to administer recipient consent and deliver user-requested SMS messages.

These providers process information under their own terms and privacy commitments. Information may be processed in countries other than where you live.

5. SMS privacy and consent

Hiddle SMS is intended for occasional, personal, non-marketing messages requested by an account holder. A designated recipient must personally opt in either by texting START, YES, or UNSTOP to the Hiddle sending number, or by completing a secure consent invitation shared outside Hiddle SMS. The web flow requires the recipient to enter the invited number, review the disclosures, check an agreement box, and select “Agree & subscribe.” Merely opening a link does not provide consent. Hiddle records the consent and blocks personal SMS delivery unless the recipient is opted in.

Message frequency varies. Message and data rates may apply. Recipients may reply STOP to opt out or HELP for help. Consent to receive SMS is not a condition of purchase. Mobile information and SMS consent are not sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. They may be disclosed to Twilio and participating carriers solely to deliver and administer the messaging service.

See the SMS Messaging Program for the complete consent flow, supported keywords, and representative messages.

6. Retention and deletion

We retain information for as long as reasonably necessary to provide the Service, maintain security and records, resolve disputes, and meet legal obligations. Retention periods vary by data type and provider. Account holders can use Hiddle's memory controls to delete stored memories and may contact us to request access, correction, or deletion of other personal information.

Some information may remain temporarily in backups, provider systems, fraud-prevention records, or records we must retain by law.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No network, storage system, or transmission method is completely secure, so we cannot guarantee absolute security.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. You may also:

• Pause, edit, or reset Hiddle memory, or delete all memories, conversation history, and audio recordings.
• Use incognito mode for a call without long-term memory.
• Remove or replace the designated SMS number.
• Revoke microphone permission through your browser or device.
• Opt out of SMS by replying STOP or contacting us.

9. Children

Hiddle is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can review and delete it where appropriate.

10. Changes to this policy

We may update this policy as Hiddle evolves. We will post the updated policy here and revise the effective date. Material changes may also be communicated through the Service when appropriate.

11. Contact

For privacy questions or requests, email privacy@hiddle.app. For general support, email support@hiddle.app.