Privacy policy

Effective 9 November 2026 · The operator of this Harmonious instance is the data controller.

Short version. Recordings, metrics, transcripts and practice history are stored by the instance you use — your device for a local install, or this server for a hosted account. Accounts use a username and password hash; no email or legal name is required. A recovery phrase is shown once at account creation and stored only as a salted hash. There is no telemetry or advertising. The server operator can access stored data.

Account and session

A hosted instance requires an account. Passwords are hashed with scrypt and never stored in plaintext. At account creation the app shows a recovery phrase once; it is hashed with scrypt and the plaintext is not stored, so it cannot be shown again. You are responsible for saving it; it is the self-service way to reset a forgotten password. Signing in sets an HttpOnly, SameSite session cookie that expires after the configured session period. The instance stores a hash of the session token, not the raw cookie value. The operator can reset or delete accounts and can see account usernames, but cannot recover a lost recovery phrase.

Data stored on the instance

Recordings, the SQLite database, transcripts, practice logs, profile data, session records, a salted hash of the recovery phrase and account data live in the instance’s data/ folder. On a hosted server the operator controls the database, uploads, backups and access logs and can read the stored data. Account separation is enforced by the application; it is not end-to-end encryption.

No email collection

The app does not collect an email address. Paddle may collect a billing email for payment, tax and invoices; that address stays with Paddle and is not used as your login.

Transcription

Transcription runs locally on the instance. A Whisper model may be downloaded from Hugging Face on first use; audio and transcripts are not sent there.

Payments

Hosted subscriptions are sold by Paddle, which acts as merchant of record and handles payment, applicable tax and invoices. Paddle receives your billing email, payment details and billing country under its own buyer terms and privacy policy. This server receives the Paddle customer ID, subscription status, plan and billing period and stores them with your account so it can grant hosted access. Harmonious does not receive or store card numbers. The billing email is not your login and is not shown to other users. See the refunds & cancellations policy.

External assistants

Harmonious has no built-in AI chat. If you attach a PDF report to an external assistant, you choose to share its contents, which may include your chosen name, metrics and transcript.

Delete your data

Delete individual check-ins in the app, or delete your account and its recordings from Settings. Deleting a Harmonious account does not cancel a Paddle subscription: cancel it first from Settings → Subscription → Manage billing. The operator can also remove local data by stopping the server and deleting the data/ folder. Billing records are handled separately as described in the repository’s PRIVACY.md.

Contact

Controller: Harmonious, a sole proprietorship operating under that trade name. Contact privacy@harmonious.science. This page is a product notice, not legal advice.