Privacy Policy
Your relationship is the most intimate thing you have. We treat the data you trust us with the same way — minimum collection, strong protection, no selling, no advertising, no surveillance.
1. Who we are
HRMNYS APP LTD ("hrmnys", "we", "us", "our") is a private limited company registered in England & Wales (Company No. 17208756). We are the data controller for personal data processed in connection with the hrmnys app and website (the "Service"). If you have questions about this Policy, write to privacy@hrmnys.com.
2. The short version
- We collect only the minimum personal data needed to run the Service.
- Your conversations with the assistant are encrypted, never sold, never shared with advertisers, and never used to train external AI models.
- Each partner has their own private context. We share only the cross-partner insights you both explicitly opt into.
- You can export or delete your data at any time.
- We do not use third-party advertising cookies, analytics trackers, or data brokers.
3. The data we collect
Account data. Email address, optionally your name and time zone, a salted hash of your password, the date you created your account, and a billing identifier provided by our payment processor.
Relationship data. The link between two partner accounts, and any artifacts one of you has explicitly chosen to make visible to the other.
Conversation data. Messages you send to the assistant, structured responses you provide to assessments and check-ins, journals, and any notes you create.
Usage data. Coarse metrics about how features are used (e.g., counts of sessions, error events). Where possible we collect this in aggregate without individual identifiers.
Device data. IP address, browser/OS user-agent, app version. Used for diagnostics, security, and abuse prevention.
Payment data. Card details are handled by our payment processor (Stripe). We never see or store full card numbers.
4. How we use your data
- To provide the Service. Hold both sides of context, generate the assistant's responses, surface shared insights you both opt into.
- To improve the Service. Diagnose errors, measure feature usage in aggregate.
- To communicate with you. Respond to support, send Service notices (e.g., billing, security).
- To meet legal obligations. Tax, accounting, and lawful requests from authorities.
We rely on these lawful bases under UK GDPR:
- Contract — to deliver the paid features you subscribe to.
- Legitimate interest — to operate the free tier, secure the Service, and prevent abuse.
- Consent — for any optional analytics or marketing emails (which you can decline at any time).
- Legal obligation — where required by law.
5. Conversations are private to you
Your conversation history with the assistant is encrypted at rest. Your partner does not have access to your private messages — they only see the insights and artifacts you have explicitly chosen to share. We do not read individual conversations except in the narrow cases below.
We do not use your conversations to train external AI models. We do not allow our model providers to train on your content. Where third-party AI processors are used to generate responses, we send only the minimum context needed, and we prohibit retention and training under contract.
We may access conversation content only when:
- Required by lawful process (e.g., a court order). We will challenge orders that we believe are overreaching, where lawful to do so.
- You ask us to (e.g., for support troubleshooting that you authorise).
- A genuine safety risk to life is detected by automated systems, and human review is necessary to direct you or your partner to emergency resources.
6. Sharing with third parties
We share data only with the following categories of processors, under contract:
- Cloud hosting — for the underlying infrastructure.
- AI model providers — to generate responses; processors are contractually bound not to retain or train on your data.
- Payment processing (Stripe) — for subscriptions.
- Email delivery — for transactional notifications only.
- Error and performance monitoring — with personal data scrubbed where possible.
We do not sell your personal data. We do not share data with advertisers, data brokers, or analytics networks. There are no third-party advertising cookies on our site.
7. International transfers
We are based in the United Kingdom. Some of our processors operate outside the UK and EEA (typically in the United States). When we transfer your data outside the UK / EEA we use approved transfer mechanisms — including Standard Contractual Clauses and the UK International Data Transfer Addendum — to ensure your data continues to be protected to UK / EU standards.
8. Retention
- Account & conversation data: kept while your account is active, and for 30 days after deletion, after which it is irreversibly removed from production systems. Encrypted backups are purged within 90 days.
- Billing records: retained for 7 years as required by UK tax law.
- Diagnostic logs: 30 days.
- Aggregated, non-identifying analytics: indefinite.
9. Your rights (UK / EU GDPR)
You have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Delete your data ("right to be forgotten"), subject to limited legal exceptions;
- Export your data in a portable format;
- Object to processing carried out on the basis of legitimate interest;
- Restrict processing in certain cases;
- Withdraw consent at any time where consent is the lawful basis;
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, write to privacy@hrmnys.com. We respond within 30 days.
10. Cookies and similar technologies
We use only strictly necessary cookies: a session cookie to keep you signed in, and a CSRF token for form security. We do not use advertising cookies or third-party analytics cookies. We do not track you across the web. No consent banner is required for strictly necessary cookies under UK PECR, but you can clear them at any time from your browser settings.
11. Security
- All data is transmitted over TLS 1.2 or higher.
- Sensitive fields are encrypted at rest.
- Passwords are stored as Argon2id-hashed values. We never see your plaintext password.
- Access to production systems is limited to a small number of personnel, gated by hardware-backed multi-factor authentication.
- We perform regular security reviews and follow responsible-disclosure practice for reports sent to security@hrmnys.com.
No system is unbreakable. If a breach affecting your personal data ever occurs, we will notify you and the ICO without undue delay, in accordance with UK GDPR.
12. Children
The Service is not directed to children under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact privacy@hrmnys.com and we will delete it.
13. Crisis & safety
14. Changes to this Policy
We may update this Policy as the Service evolves or as the law changes. When we make material changes, we will notify you in-app and by email at least 14 days before the changes take effect. The "Last updated" date at the top tracks the most recent revision.
15. Contact
HRMNYS APP LTD
London, England
Company No. 17208756
Email: privacy@hrmnys.com (privacy enquiries) ·
hello@hrmnys.com (general)
Terms of Service
These Terms are the agreement between you and hrmnys for using the Service. Please read them carefully — there are sections on what the Service is, and importantly, what it is not.
1. Welcome
These Terms govern your use of hrmnys (the "Service"), provided by HRMNYS APP LTD ("hrmnys", "we", "us"), a company registered in England & Wales (Company No. 17208756, London). By creating an account, using the assistant, or visiting hrmnys.com, you accept these Terms. If you do not agree, please do not use the Service.
2. What the Service is
hrmnys is an AI-assisted relationship companion designed to help couples reflect on their relationship, surface patterns, prepare for hard conversations, and find their way back to closeness. The Service may include:
- Conversational AI assessments and check-ins;
- Structured artifacts (journals, conversation prep, exercises);
- A shared layer that surfaces insights both partners opt into;
- Optional human-led therapy sessions where offered.
The exact set of features may change over time. We try to give reasonable notice for material changes.
3. What the Service is NOT
- If you are experiencing a mental health emergency, abuse, or any safety risk, contact your local emergency services immediately.
- AI responses may be incorrect or incomplete. Use your own judgement and consult a qualified professional for important decisions.
4. Eligibility
You must be at least 18 years old and capable of entering into a legally binding contract under your local law to use the Service. By using the Service, you confirm both.
5. Your account
- You are responsible for keeping your sign-in credentials secure.
- One account per person. Do not share accounts.
- Notify us at security@hrmnys.com if you suspect unauthorised access.
- We may suspend or terminate accounts that violate these Terms.
6. Partner accounts and consent
When you invite a partner, your partner controls their own data. Insights are surfaced across the two accounts only where both partners opt in. You must not invite someone to join without their genuine consent, and you must not use the Service to coerce, monitor, or surveil another person. If we detect such use, we will suspend the account.
7. Acceptable use
You agree not to:
- Use the Service for any unlawful purpose;
- Attempt to gain unauthorised access to accounts, systems, or data;
- Reverse engineer, decompile, scrape, or interfere with the Service except as expressly permitted by law;
- Use the Service to harm, harass, abuse, threaten, defame, stalk, or impersonate others;
- Submit content you do not have the right to submit;
- Probe, attack, or attempt to disrupt the integrity of the Service.
We may remove content and suspend accounts that violate these rules.
8. Subscriptions and billing
- The Service offers a Free tier and paid plans (currently "Pro").
- Paid plans renew automatically until cancelled.
- Cancellations take effect at the end of the current billing period; you retain access until then.
- Prices may change with at least 30 days' notice before your next renewal.
- We may offer a free trial that converts to a paid subscription unless cancelled before it ends.
- Payment processing is provided by Stripe. By providing payment information you accept Stripe's terms.
- We do not refund partial periods except where required by law. In the UK, you may have statutory cancellation rights for digital purchases — see §16.
9. Your content
You retain ownership of everything you submit to the Service ("Your Content"). You grant us a non-exclusive, worldwide, royalty-free licence to host, process, transmit, and display Your Content solely to provide the Service to you and your partner. We do not own Your Content. We do not use it to train external AI models (see Privacy Policy §5).
You are responsible for Your Content. Do not submit content that:
- Infringes the rights of others;
- Is unlawful or violates these Terms;
- Includes credentials, identifiers, or sensitive data of third parties without their permission.
10. Our content
The Service, including software, design, brand, copy, illustrations, and the model outputs generated for you, is the intellectual property of hrmnys or its licensors. You may not copy, modify, distribute, or create derivative works of our content, except for personal, non-commercial use of the AI outputs you receive within the Service.
11. AI outputs
The Service uses third-party AI models to generate responses. AI outputs may be unexpected, inaccurate, or biased. You should not rely on AI outputs as professional advice. Do not act on AI-generated guidance about safety, legal, medical, or financial matters without consulting a qualified professional.
12. Crisis and safety
If you or your partner indicate immediate danger, the Service may surface local emergency resources. We do not, however, monitor accounts for safety in real time. The Service is not a crisis service. In emergencies contact your local emergency line — 999 in the UK; 911 in the US; 112 across much of Europe.
13. Disclaimer of warranties
To the maximum extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, express or implied, including fitness for purpose, merchantability, accuracy, or non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or completely secure.
14. Limitation of liability
To the maximum extent permitted by law:
- We are not liable for indirect, incidental, consequential, special, exemplary, or punitive damages, or for loss of profits, revenue, data, or goodwill.
- Our total liability arising out of or relating to the Service in any 12-month period is limited to the greater of (a) the amount you paid us in that period, or (b) £100.
- Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be limited by law.
15. Indemnity
You agree to indemnify and hold us harmless against claims, losses, and reasonable expenses arising from your breach of these Terms or your unlawful use of the Service.
16. Consumer cancellation (UK)
If you are a consumer in the UK, you have a 14-day right to cancel a paid subscription from the date of purchase under the Consumer Contracts Regulations 2013. By starting to use the Service immediately after purchase, you acknowledge you may lose this right with respect to digital content you have already accessed. Contact billing@hrmnys.com to cancel.
17. Termination
- You may delete your account at any time from the Service settings.
- We may suspend or terminate accounts that breach these Terms, with notice where practical.
- Sections that should reasonably survive termination (payment owed, IP, disclaimers, limits of liability, governing law) will survive.
18. Changes to the Service or these Terms
We may modify the Service and these Terms over time. We will give reasonable notice of material changes (typically by in-app message and email at least 14 days before changes take effect). Your continued use after the change date means you accept the updated Terms. We will keep an archive of older versions on request.
19. Governing law and jurisdiction
These Terms are governed by the laws of England & Wales. The courts of England & Wales have exclusive jurisdiction, except that consumers may be entitled to bring claims in their country of residence under local mandatory rules. Nothing in these Terms restricts your statutory rights as a consumer.
20. Contact
HRMNYS APP LTD
London, England
Company No. 17208756
- Billing: billing@hrmnys.com
- Privacy: privacy@hrmnys.com
- Security disclosure: security@hrmnys.com
- General: hello@hrmnys.com
— end —