Privacy Policy

Hammerspace is a personal memory system. You create hammerspaces, capture notes and files, and ask questions about what you stored. Contact us at hello@hmr.space.

When you create an account we store a username, email address, and (if you set one) a password hash. We do not store your password in plain text.

If you sign in with Google or Apple we store the provider account identifier (sub) and the email those services share with us. Apple may hide your email behind a private relay address.

We send a verification email through Brevo so we can confirm the address you gave us. Session tokens stay on your device (browser cookie or iOS Keychain).

You choose what to put in a hammerspace: names, messages, captions, and uploaded files or photos. We store those so the product can show them back to you and, in managed spaces, search and reply.

On managed spaces you can let us analyse uploads (vision for images, text extraction for other files) or keep a file caption-only. That choice is yours per upload or as an account default.

Opaque vaults are end-to-end encrypted on your devices. We cannot read vault contents, and we do not run the assistant over that material.

Managed spaces are processed on our servers so we can embed text, extract file contents when you allow it, and generate replies. Those events and derived search indexes live on our infrastructure.

We keep usage meters (for example message and upload limits) so we can apply product limits. Payments, if you use them, are handled on the web at https://app.hmr.space. The iPhone app does not take card details.

If you invite someone to a hammerspace, they can see what that space allows. Join links and membership records exist only when you use sharing. You can revoke members and block accounts from the app.

We use other companies to run the product: Apple and Google for Sign in with Apple / Google; Brevo for verification email; Amazon S3 (or a compatible store) for file bytes; and language-model providers you or we configure for managed-space chat and extraction.

Those processors see only what they need to provide that service. We do not sell your personal information.

You can delete your account in the iPhone app (Account) and on the web (Settings). Deletion removes your profile, sign-in methods, and the hammerspaces you solely own, after you transfer any spaces that still need another owner.

Backups and logs may retain residual data for a short period. Encrypted vault material we cannot read is deleted with the account records we hold.

Hammerspace is not directed at children under 13, and we do not knowingly collect personal information from them.

We will update this page when our practices change and revise the date above. The current policy is always at https://hmr.space/privacy.