Privacy Policy for UrHypno
Last updated: 2 August 2026
The short version
UrHypno needs an account, because your sessions are written for you and have to be stored somewhere you can reach them from your phone.
We collect the email address you sign up with, the name you give us, what you tell us you'd like to change, the sessions we generate from that, and a record of what you listened to and when. That's the whole list.
To write and voice a session, the words you type are sent to two companies that do the writing and the speaking. Those are the only places your information goes, and neither of them is allowed to use it to train their systems.
There is no advertising, no analytics, no tracking, and nothing is ever sold or shared for marketing. The app contains no analytics code at all.
You can delete your account, and everything in it, from inside the app at any time.
The rest of this page is the detail.
What we collect
Your account
- The email address you sign up with, and a securely hashed version of your password.
We never see or store your actual password.
- The name you choose to give. It's only used to greet you in the app.
What you tell us you want to change
- The goal you type when creating a session — for example that you'd like to sleep
better, feel calmer before presentations, or stop smoking. You write this in your own words, and it's the single most important thing we hold, because everything else is generated from it.
- Any notes you add to a session afterwards.
What we generate for you
- The script written for your goal, in four sections.
- The audio of that script, spoken in the voice you chose.
- Your settings for each session: voice, background sound, background volume.
How you use it
- Listening history: which session, when you started, and how many seconds you
listened for. This is what draws your streak and the tracker heatmap.
- Where you got to in a session, so it can resume.
- A record of sessions generated, used to apply the limits of your plan.
Your purchases
- Whether you have the Quit Programme or an active subscription, when a subscription
renews, and how many sessions you have left.
- We never see your card details. All payment is handled by Apple. We only ever
receive a signed confirmation from Apple that a purchase happened.
Please read this part: what your goal reveals
The goal you type is personal, and it may say something meaningful about your health or your habits — that you smoke, that you use cannabis, that you're anxious, that you can't sleep. We treat it as sensitive information and we'd rather be plain about where it goes than bury it.
Write as much or as little as you like. A more specific goal produces a session that fits you better, but a short one still works. Nothing forces you to disclose anything.
Where your information goes
Three companies process your information on our behalf. All three are bound by contract to process it only for us and not to use it for their own purposes.
Writing your script — Anthropic (via OpenRouter)
Your goal text is sent to Anthropic's Claude to write your script, and again to check that script is safe and appropriate before it's voiced. Anthropic does not use data submitted through its API to train its models.
Voicing your script — ElevenLabs
The finished script text is sent to ElevenLabs, which turns it into speech. Your email address, name and account are not sent — only the words to be spoken.
Storing it — Supabase and Cloudflare
- Your account, sessions and listening history are stored in a Supabase database
hosted in London (eu-west-2).
- The audio files are stored in Cloudflare R2, in a bucket restricted to the
European Union.
Audio is never served from a public address. Playing a session mints a private link that expires shortly afterwards.
Nowhere else
We do not use advertising networks, analytics services, crash reporters, or attribution tools. We do not sell, rent or share your information with anyone for marketing, and we never will. There is no tracking across other apps or websites.
How long we keep it
Your information is kept for as long as your account exists.
When you delete your account, the account, your sessions, your scripts, your listening history and your audio files are permanently deleted straight away. This is not a soft-delete or a thirty-day queue — the records are removed.
We may keep a minimal record of a purchase where we're required to for tax or accounting purposes. That record does not include your sessions or anything you wrote.
Your rights
You can, at any time:
- See and correct your information from inside the app.
- Delete everything — Settings › Delete Account. It's immediate and permanent.
- Ask for a copy of your information, by emailing us.
- Object to, or ask us to restrict, how we use your information.
- Complain to the UK Information Commissioner's Office (ico.org.uk) if you think
we've handled your information badly. We'd rather you told us first so we can fix it.
Our legal basis for handling your information is that it's necessary to provide the service you asked us for. Where your goal reveals something about your health, we rely on your explicit consent, given by choosing to type it — and you can withdraw that at any time by deleting the session or your account.
Age
UrHypno is for adults. It isn't intended for anyone under 18, and we don't knowingly collect information from children. If you believe a child has created an account, email us and we'll remove it.
Security
Connections between the app and our servers are encrypted. Your session data is protected by database rules that make it accessible only to your own account. Passwords are hashed and never stored in a readable form.
No system is perfectly secure, and we won't pretend otherwise — but we hold as little as we can, in as few places as we can, which is the part that actually reduces the risk.
Changes
If we change this policy we'll update the date at the top. If a change materially affects what we do with your information, we'll tell you in the app before it takes effect.
Who we are, and how to reach us
UrHypno is made and run by an independent developer in the United Kingdom, who is the data controller for the information described on this page.
For anything to do with your privacy — a copy of your information, a correction, a deletion, an objection, or a complaint — email support@urdev.dev. A person reads every message. A postal address is available on request.