HVNEY

Privacy

Last updated: 2026-07-09 · Product cloud + marketing · Year Zero

This policy covers www.hvney.com (marketing / waitlist) and the Hey HVNEY product app and API (accounts, devices, wakes, pairing). It does not cover on-robot ROS telemetry stacks that never leave a lab network.

Who we are

HVNEY is operated by CaissonHQ. Contact for privacy questions: use the waitlist form on the site or your pilot channel with the team.

Data map

System	What	Why
Formspree	Email (waitlist)	Hive launch updates
Clerk	Account identity, email, session	Sign-in / sign-up
Neon (via app-api)	User projection, devices, pairing, wake events	Hive membership & memory
Vercel	Hosting, logs, optional metrics	Run the API & site
On-device (phone)	Mic / speech for wake (if enabled)	Detect “Hey HVNEY” — audio not uploaded by default

What we collect

Waitlist email if you join from the marketing site.
Account data from Clerk (email, display name, avatar URL when provided).
App data you create: registered devices, pairing codes/claims, wake events (phrase metadata, source, confidence, engine — not raw audio).
Technical logs on the API: request id, path, status, latency; optional hashed user id. We do not intentionally log Authorization headers or device secrets.

On-device wake

If you enable listening, recognition runs on your device (or platform STT) while the app is in the foreground. By default we only store a wake event in our cloud — not a recording of your voice. You can turn listening off or use tap-only wake. See Settings in the app and ADR-0010.

How we use data

Provide the product (auth, hive bodies, memory, pairing).
Operate and secure the service (abuse prevention, rate limits, debugging).
Send product/hive updates if you joined the waitlist (you can stop via the form provider or by asking us).

We do not sell your personal data.

Retention

Account and hive data remain while your account is active. Deleting your account in the app (Clerk) soft-deletes the Neon projection (profile anonymized, devices revoked); hard purge typically after ~30 days. You may clear wake history anytime (“Clear hive memory”). Cloud wake events are pruned after about 90 days. Waitlist emails are retained until you ask to be removed or we retire the list.

Your choices

Sign out or delete account from the app Settings.
Revoke paired devices; deny or revoke pairing codes.
Mark false wakes with “Wasn’t me.”
Deny microphone / speech permission — tap wake still works.

Children

The product is not directed at children under 13. Do not create accounts for them.

Changes

We will update this page when practices change. Material pilot changes will be called out in release notes.

← Home · Terms