Privacy policy

Effective 9 November 2026 · The operator of this Harmonious instance is the data controller.

Short version. Recordings, metrics, transcripts and practice history are stored by the instance you use — your device for a local install, or this server for a hosted account. Accounts use a username and password hash; no email or legal name is required. There is no telemetry or advertising. The server operator can access stored data.

Account and session

A hosted instance requires an account. Passwords are hashed with scrypt and never stored in plaintext. Signing in sets an HttpOnly, SameSite session cookie that expires after the configured session period. The instance stores a hash of the session token, not the raw cookie value. The operator can reset or delete accounts and can see account usernames.

Data stored on the instance

Recordings, the SQLite database, transcripts, practice logs, profile data, session records and an installed license key live in the instance’s data/ folder. On a hosted server the operator controls the database, uploads, backups and access logs and can read the stored data. Account separation is enforced by the application; it is not end-to-end encryption.

Transcription

Transcription runs locally on the instance. A Whisper model may be downloaded from Hugging Face on first use; audio and transcripts are not sent there.

Payments

A self-hosted BTCPay Server hosts the crypto checkout. The billing service receives the invoice ID, amount/currency, payment status and the issued license key. Harmonious never receives wallet private keys, seed phrases or card data. Crypto transactions are public; license verification is offline. Billing records are kept separately from the app database.

External assistants

Harmonious has no built-in AI chat. If you attach a PDF report to an external assistant, you choose to share its contents, which may include your chosen name, metrics and transcript.

Delete your data

Delete individual check-ins in the app. Ask the instance operator to delete your account and its recordings; account self-deletion is not automated in this release. The operator can also remove local data by stopping the server and deleting the data/ folder. Billing records are handled separately as described in the repository’s PRIVACY.md.

Contact

Contact privacy@harmonious.science. Replace the controller and address placeholders in PRIVACY.md and in this page before a commercial public release. This page is a product notice, not legal advice.