Crownsplice
Hueman privacy policy
1. What Hueman is
Hueman is an AI assistant that can answer phone calls and handle email for you, draft replies, schedule appointments, and remember context from your conversations. Hueman never acts on its own. Every outgoing action (a reply, a call, an email, a calendar booking) is shown to you first and waits for your approval, one at a time. Built-in rules that cannot be turned off:
- Medical: scheduling a medical appointment needs two separate approvals from you. Hueman never makes medical decisions (for example, agreeing to a procedure or treatment).
- Purchases: blocked unless you started the purchase yourself, and even then it still needs your approval.
- AI disclosure: when Hueman answers a call, it says it is an AI assistant and that the call may be recorded — see Section 8.
- Decision log: every approve, decline, and block decision is logged on your device.
2. Information we collect
Stored on your device (encrypted):
- Facts Hueman remembers about you, each flagged “OK to share” or “never share.” Never-share facts are not given to callers or included in drafts.
- Conversations, drafts, call summaries, medical appointment requests, and the activity/decision log.
- App settings (for example, voice choice: man’s or woman’s voice, and which optional features are on).
- When call screening is on: the time of the last call seen. The current version does not store caller numbers in plain settings.
Processed by our service providers when the planned real features are enabled:
- Calls: caller phone number, call time and length, call audio, and AI-generated transcripts and summaries.
- Email: with your permission, messages in the inboxes you connect (sender, subject, body) so Hueman can sort them and draft replies. Replies are only sent after you approve each one.
- Calendar: with your permission, your events and availability so Hueman can propose times. Bookings need your approval (two approvals for medical).
- AI prompts: the text needed for a task (for example, a caller’s message plus relevant “OK to share” facts) is sent to an AI language model to produce a draft or answer.
- Subscription: Google Play tells us your subscription status. We never see your card number; Google handles payment.
- Account/contact: your email address and the phone number assigned to your Hueman line.
Information about other people (callers and email senders). When Hueman answers a call or reads an email, it processes that person’s phone number, email address, voice, and what they say or write. We use it only to serve you (the Hueman user) and keep it under the same retention limits below.
We do not collect: precise location, contacts lists, photos, advertising IDs, or browsing history. We do not use advertising or tracking SDKs.
3. How we use information
To answer calls and email for you, draft replies and summaries, schedule with your approval, remember context you allow, enforce safety rules, provide and bill your subscription, keep the service secure, and fix problems. We do not sell or “share” (for cross-context advertising) your personal information. The draft states that we do not use your content to train AI models. That point is still to be confirmed against the language-model provider’s settings, and the provider is not yet named (see Section 4).
4. Who we share it with
Only service providers (“processors”) that help run Hueman, under contracts limiting their use. Each provider has its own privacy policy.
| Provider | Purpose |
|---|---|
| Vapi | AI voice agent: answering calls, speech-to-text, text-to-speech |
| Twilio | Phone numbers, call routing, call audio |
| Gmail and Google Calendar access (only if you connect them), Google Play Billing and app distribution | |
| Language-model provider — not yet named | Generating drafts, answers, and summaries |
| Backend / hosting provider — not yet named | The server that holds API keys and relays requests. API keys are never stored in the app. |
We may also disclose information if required by law, to protect safety, or as part of a business transfer (with this policy still applying).
Google user data: Hueman’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. How long we keep it
- Call recordings and transcripts held by our providers: the number of days is not yet decided. The draft notes a possible default of 30 days and marks that number as pending an owner decision. This page does not promise deletion after 30 days.
- On-device data: until you delete it or uninstall the app.
- Email and calendar content: processed to complete a task, and not kept on our servers longer than the same not-yet-decided retention period.
- Billing records: as long as required by law.
6. Security
On your phone, Hueman’s database is fully encrypted with SQLCipher (256-bit key). That key is itself encrypted by a non-exportable key in the Android Keystore. App backup to the cloud is turned off. Data sent to providers travels over encrypted connections (HTTPS/TLS). No system is perfectly secure. Tell us at mikal.oliver@gmail.com if you suspect a problem.
7. Your choices and rights
- In the app: turn off AI call answering, disconnect email and calendar, delete remembered facts, or mark them never-share. Uninstalling deletes on-device data.
- Request access, correction, deletion, or a copy of data we or our providers hold: email mikal.oliver@gmail.com. We respond within 45 days.
- California residents (CCPA/CPRA): you may know what we collect, delete, correct, limit use of sensitive information, and opt out of sale/sharing (we do none). We will not discriminate against you for using these rights. An authorized agent may request for you with proof.
- Outside the U.S. (including the EU and UK): you may also object to or restrict processing and complain to your local data protection authority. Our legal bases are providing the service you asked for, your consent (email and calendar connection), and legitimate interests (security).
- Callers and email senders who are not Hueman users may contact us to request deletion of their information.
8. Call recording and consent
California and several other states require all parties to consent to recording. Hueman’s greeting should say that the caller is speaking with an AI assistant and that the call may be recorded or transcribed, so callers can hang up if they do not agree. You are responsible for using Hueman lawfully where you live.
9. Children
Hueman is not for children under 13 (under 16 in some regions), and we do not knowingly collect their information. If you believe a child has used Hueman, contact us and we will delete the data.
10. Health information
Hueman may handle appointment details you or callers mention. Hueman is not a healthcare provider and does not make medical decisions. Treat medical details as sensitive. They stay encrypted on your device and are only shared with providers as needed to complete a task you approve.
11. Changes
We will post updates here with a new effective date and notify you in the app for significant changes.
12. Contact
Crownsplice · Mikal Oliver · Oakland, California · mikal.oliver@gmail.com