Privacy Policy

This policy explains what Hearthli collects, why, and what we deliberately don’t collect. It covers this website (hearthli.com), the waitlist, and the Hearthli application and service. Questions or requests: [email protected].

The short version

• We never record your calls, and calls are end-to-end encrypted — we cannot watch or listen.
• Nothing streams when you’re alone. The app never turns your camera or microphone on by itself.
• AI features (like transcription) run on your device, not our servers.
• We don’t keep presence history, attendance logs, or “last seen” data — by design, not just by policy.
• We don’t sell personal information, and we don’t use it for advertising.
• This website sets no cookies, and our analytics are cookie-less.

The waitlist

If you join the waitlist we store your email address with our email provider, Resend, and send you a single confirmation email. We’ll email you about Hearthli availability and nothing else. To be removed, reply to any of our emails or write to [email protected] and we’ll delete your address.

Your account

Hearthli has no passwords. You sign in with Google or with a magic link sent to your email. We store your email address, display name, and avatar, plus the workspaces, rooms, and memberships you create.

Google user data

If you sign in with Google, we receive your basic profile (name, email address, profile picture) to create and identify your account.

If you choose to connect Google Calendar, Hearthli reads your calendar events to set your availability automatically (for example, marking you busy during a meeting), and creates calendar events on your behalf when you schedule a meeting from inside Hearthli (including a join link). We do not use your calendar data for any other purpose.

Hearthli’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we only use Google user data to provide the features described above; we do not transfer it to third parties except as necessary to provide those features, to comply with law, or as part of a merger or acquisition with prior notice; we do not use it for advertising; we do not use it to train AI or machine-learning models; and no humans read it except with your explicit consent, for security purposes, to comply with law, or when aggregated and anonymized.

You can disconnect Google access at any time from your Google account’s security settings.

Calls, video, and presence

• End-to-end encryption. Audio, video, and in-call data in Hearthli rooms are encrypted on your device and decrypted only on your teammates’ devices. Our servers and our media infrastructure provider relay encrypted frames they cannot read.
• No recording. Hearthli has no server-side recording. Nothing about your calls is stored by us.
• Nothing streams when you’re alone. Media flows only when two or more people are in the same room. Alone in your office, there is no capture and no stream.
• Your camera and mic are yours. The app never activates your camera or microphone on its own — no transition, reconnect, or room change can switch them on. Fresh sessions start with the camera off and the mic muted.
• Positive-only presence. Hearthli shows who is available, never who is absent. We do not store presence history, time-in-room analytics, attendance dashboards, or “last seen” timestamps. This is a product decision: that data does not exist on our servers.

On-device AI

Transcription and related intelligence features run locally on your Mac. Transcripts and summaries are not uploaded to our servers unless you explicitly choose to share one with your team.

What we store on our servers

• Account data: email, name, avatar, workspace memberships.
• Workspace content you create: room names and settings, text chat messages, pinned links and notes, and async video memos (stored in object storage, fetched via short-lived signed URLs).
• Billing records: handled by Stripe. We store your subscription status and seat count; your card details never touch our servers.
• Email delivery events (bounces and complaints) so we stop emailing addresses that don’t want or can’t receive mail.

Service providers

We use a small set of providers to run Hearthli. Each receives only what’s needed for its job:

• Fly.io — application hosting.
• Neon — our database (hosted in AWS Asia Pacific, Sydney).
• Tigris — object storage for workspace content such as memos.
• LiveKit Cloud — real-time media routing. Carries end-to-end encrypted frames it cannot decrypt.
• Resend — transactional email and the waitlist.
• Stripe — payments and billing.
• Cloudflare — this website’s hosting, DNS, and cookie-less analytics.
• Klipy — GIF search, when you use it inside the app. Your search query is proxied through our servers; no account data is shared.

We do not sell personal information to anyone.

Cookies and analytics

This website sets no cookies and uses Cloudflare Web Analytics, which is cookie-less and does not track you across sites. The Hearthli web companion uses strictly necessary cookies for signing in — nothing for tracking or advertising.

Retention and deletion

We keep your data while your account is active. To delete your account and its data, or to remove your email from the waitlist, contact [email protected]. We’ll action deletion requests within 30 days. Some billing records must be retained as required by tax and accounting law.

Your rights

Depending on where you live (including under the Australian Privacy Act and the GDPR), you may have rights to access, correct, export, or delete your personal information, and to complain to a supervisory authority. Write to [email protected] and we’ll help — that address reaches a human.

Changes

If this policy changes materially, we’ll note it here and, for significant changes affecting account holders, email you. The “last updated” date at the top always reflects the current version.