Who we are
This policy covers the Hewy apps for Mac, iPhone and Android, the Hewy Daemon you install on your servers, and our services at hewy.app and hewy.ai. Hewy is provided by Prairie Works Services ("we").
What we store, and why
| Data | Why |
|---|---|
| Your email address | To find your account when you sign in, and to email you sign-in links and notes about your account and subscription. Never marketing. |
| A fingerprint of your login key, which your device derives from your master password | To check that it's you signing in. We never receive your master password. |
| Your account key, encrypted with a key only your password (or recovery code) can make | So a new device can unlock your data after you sign in. |
| Your synced data, encrypted on your device, padded so sizes reveal little | To pass it between your devices. We can't read it. |
| Device ids, their public keys, and when they sign in and sync | To keep each device signed in, and to let you see and remove devices. |
| Messages between your connected chats, while no Hewy app is open to carry them: sealed on your server for the other one, kept for a day at most, and deleted once collected. With them, the keys each server collects with, and their sizes and times. | To pass them between your servers. They're encrypted for the receiving server, so we can't read them. |
| Notification tokens from Apple or Google, with a random id for each device | To deliver notifications from your servers. Their contents are encrypted for your devices; we only pass on ciphertext. |
| If you subscribe while signed in: your plan, when it renews or ends, whether it was refunded, and Apple's or Stripe's ids for the subscription and, with Stripe, for you as its customer | So your subscription can follow your account. Apple or Stripe takes the payment; we never see your card details. |
| Emails you send us | To answer you. |
Our web proxy keeps standard access logs (IP address, time and address requested) for a limited time, for security and troubleshooting. Rate limits use IP addresses briefly, in memory.
This website counts its visits, so we know which pages people read and where they came from: how many times each page was viewed, which site linked to it (or a ?ref= tag in the link), and downloads of the Android and Mac apps. For visits that come from our own older web addresses, it also notes which page they landed on and the kind of browser ("Mac Safari"), to find old links that still point there. It uses no cookies and keeps no IP addresses. To count each day's visitors once, it uses a code made from your network address and browser that changes every day. The code is kept only for that day and then deleted, and it's never linked across days, so nobody can be followed from one day to the next. The Hewy apps' daily update checks are counted the same way, as a number of devices.
Where your data goes besides us
Your servers
Your devices connect to them over SSH, and the Hewy Daemon keeps your chats with agents there.
AI providers you choose
Agents on your servers send your prompts and code to Anthropic, OpenAI or the provider you picked, using your own API key or your Claude or ChatGPT plan. Their privacy policies apply.
Dictation
When you use the in-app microphone, the audio goes from your device straight to OpenAI using your OpenAI key. Without a key, or when OpenAI can't be reached, it's transcribed on your device and goes nowhere. Your keyboard's own dictation is handled by Apple.
Apple
Apple delivers notifications to Macs and iPhones (as ciphertext), distributes those apps, and takes payment for subscriptions bought in them.
Google's Firebase Cloud Messaging delivers notifications to Android phones, as ciphertext, like Apple's.
Stripe
Stripe takes payment for subscriptions bought on hewy.ai. Your card details go to Stripe, never to us, and Stripe's privacy policy applies to them.
On your devices
Keys, saved passwords, API keys and your sign-in are kept in your device's secure storage (the Keychain on Apple devices, the Android Keystore on Android), available only to Hewy on that device. If you're signed in, your API keys and saved passwords also sync to your other devices, encrypted so that only your devices can read them. An API key you use on a server is also stored on that server, readable only by your user there, so its agents can use it. In the current apps, a key goes to a server only when you choose it, in Set Up or on that server's page, where you can also remove it. You manage your API keys on the API Keys page in the app, and removing one there also takes it off your servers the next time your device connects to them. A device's own SSH key is made in its secure hardware and can never leave it. Other SSH private keys stay on the devices that hold them, unless you copy one to another of your devices (sealed so only that device can open it) or export it yourself.
Keeping and deleting data
We keep your account until you delete it. Deleting it removes everything we store about it; copies in our encrypted backups are gone within 30 days. You can delete it yourself in Hewy: Settings → Account → Delete Account.
Children
Hewy is a tool for people who run servers, and isn't directed at children under 13.
Changes
If this policy changes, we'll update this page and its date. Significant changes will be explained in the app.
Contact
Email support@hewy.ai. During the beta, TestFlight feedback in the app reaches us too.
