Privacy Notice

1. Who we are

HYE ("Higher Than Yesterday") is the data controller for the personal information handled in the app. Questions or requests: hello@hye.app.

2. What we collect

Your account email address (and your name, if your Google account shares it). Your bookings: the time, whether the session is online or in person, and a phone number if you choose to leave one. The recordings John makes for you: the script and the audio. Basic technical logs to keep the service running and safe.

Before your first session, John gathers a confidential intake so he can look after you properly: your date of birth and contact details, your GP practice, what you'd like help with, and health information you choose to share, including a short health screen, any medications, and symptoms you tick.

That intake includes health information, which UK GDPR treats as a special category. We handle it with particular care: it is encrypted, only John and the people who run the service can access it, and we use it only to provide your care.

3. Why we use it

To provide HYE (our contract with you): your bookings, your recordings, and the emails that confirm them. We don't sell your data, and there is no advertising in HYE and no tracking of you across other websites.

For the health information in your intake, our lawful basis is your explicit consent, which you give during the intake and can withdraw at any time.

4. Who processes it for us

A small number of providers process data on our instructions, under contract:

• Supabase Database and sign-in (your account, bookings, recordings, and your encrypted intake), hosted in the UK/EU.
• Stripe Card payments for memberships and sessions. HYE never sees or stores your full card number; Stripe handles that directly.
• Google Placing your booked sessions on John's calendar, and Google sign-in if you choose it.
• Anthropic (Claude) Helps John draft your recording's script. Requests are sent without retention; nothing is used to train models.
• ElevenLabs Turns John's approved scripts into audio in John's voice. Only the approved script text is sent.
• Resend Transactional email, like "your recording is ready".
• PostHog Anonymous product analytics, hosted in the EU: which pages are opened and whether things like booking succeed. It is set up so it cannot receive your intake, your messages, or the words of your recordings, and it never records your screen.

5. Cookies and analytics

We use a small amount of product analytics to see which parts of HYE people actually use, and whether things like booking succeed. It is deliberately narrow: it records which page was opened and whether an action worked, and it is set up so that it cannot receive anything you write. Your intake answers, what you say to Momo, and the words of your recordings are never sent to it. It never records your screen. Where a web address contains the id of a record, that id is removed before anything leaves your browser.

The first time you visit we ask whether we may store a cookie for this. Until you answer, and also if you say no, nothing is stored on your device for analytics, and HYE works exactly the same either way. To change your answer, clear this site's data in your browser and the question comes back.

Signing in also stores a small amount of data on your device to keep you signed in. That is necessary for HYE to work, so it is not part of the question above.

6. John, and John's voice

John sees your bookings and the recordings he makes for you; that's how the service works. HYE's audio uses a clone of John's own voice, created and used with his written, revocable consent, and only ever for scripts he has approved.

7. Keeping it safe

Everything travels over TLS, and access to member data is role-restricted: only John and the people who run the service can see it.

8. Your rights

Write to hello@hye.app at any time to ask for a copy of everything we hold about you, or to have your account erased. You also have the usual UK GDPR rights (access, rectification, objection), and the right to complain to the ICO at ico.org.uk.

9. Retention and changes

We keep your data while your account is active. When you ask us to erase your account we delete it, though John may need to keep a limited clinical record for a period where a professional or legal obligation requires it; we'll tell you if that applies to you. A de-identified record of any payments (the amount and date, with your identity removed) is also kept where tax or accounting law requires it. If this notice changes in a way that matters, we'll tell you before it takes effect.