Privacy Policy for UrHypno

Last updated: 2 August 2026

The short version

UrHypno needs an account, because your sessions are written for you and have to be stored somewhere you can reach them from your phone.

We collect the email address you sign up with, the name you give us, what you tell us you'd like to change, the sessions we generate from that, and a record of what you listened to and when. That's the whole list.

To write and voice a session, the words you type are sent to two companies that do the writing and the speaking. Those are the only places your information goes, and neither of them is allowed to use it to train their systems.

There is no advertising, no analytics, no tracking, and nothing is ever sold or shared for marketing. The app contains no analytics code at all.

You can delete your account, and everything in it, from inside the app at any time.

The rest of this page is the detail.

What we collect

Your account

We never see or store your actual password.

What you tell us you want to change

better, feel calmer before presentations, or stop smoking. You write this in your own words, and it's the single most important thing we hold, because everything else is generated from it.

What we generate for you

How you use it

listened for. This is what draws your streak and the tracker heatmap.

Your purchases

renews, and how many sessions you have left.

receive a signed confirmation from Apple that a purchase happened.

Please read this part: what your goal reveals

The goal you type is personal, and it may say something meaningful about your health or your habits — that you smoke, that you use cannabis, that you're anxious, that you can't sleep. We treat it as sensitive information and we'd rather be plain about where it goes than bury it.

Write as much or as little as you like. A more specific goal produces a session that fits you better, but a short one still works. Nothing forces you to disclose anything.

Where your information goes

Three companies process your information on our behalf. All three are bound by contract to process it only for us and not to use it for their own purposes.

Writing your script — Anthropic (via OpenRouter)

Your goal text is sent to Anthropic's Claude to write your script, and again to check that script is safe and appropriate before it's voiced. Anthropic does not use data submitted through its API to train its models.

Voicing your script — ElevenLabs

The finished script text is sent to ElevenLabs, which turns it into speech. Your email address, name and account are not sent — only the words to be spoken.

Storing it — Supabase and Cloudflare

hosted in London (eu-west-2).

European Union.

Audio is never served from a public address. Playing a session mints a private link that expires shortly afterwards.

Nowhere else

We do not use advertising networks, analytics services, crash reporters, or attribution tools. We do not sell, rent or share your information with anyone for marketing, and we never will. There is no tracking across other apps or websites.

How long we keep it

Your information is kept for as long as your account exists.

When you delete your account, the account, your sessions, your scripts, your listening history and your audio files are permanently deleted straight away. This is not a soft-delete or a thirty-day queue — the records are removed.

We may keep a minimal record of a purchase where we're required to for tax or accounting purposes. That record does not include your sessions or anything you wrote.

Your rights

You can, at any time:

we've handled your information badly. We'd rather you told us first so we can fix it.

Our legal basis for handling your information is that it's necessary to provide the service you asked us for. Where your goal reveals something about your health, we rely on your explicit consent, given by choosing to type it — and you can withdraw that at any time by deleting the session or your account.

Age

UrHypno is for adults. It isn't intended for anyone under 18, and we don't knowingly collect information from children. If you believe a child has created an account, email us and we'll remove it.

Security

Connections between the app and our servers are encrypted. Your session data is protected by database rules that make it accessible only to your own account. Passwords are hashed and never stored in a readable form.

No system is perfectly secure, and we won't pretend otherwise — but we hold as little as we can, in as few places as we can, which is the part that actually reduces the risk.

Changes

If we change this policy we'll update the date at the top. If a change materially affects what we do with your information, we'll tell you in the app before it takes effect.

Who we are, and how to reach us

UrHypno is made and run by an independent developer in the United Kingdom, who is the data controller for the information described on this page.

For anything to do with your privacy — a copy of your information, a correction, a deletion, an objection, or a complaint — email support@urdev.dev. A person reads every message. A postal address is available on request.