privacy policy

last updated 9 august 2026

hmm is a daily reflection app made by Hmm Labs Limited, a company registered in Hong Kong. this policy explains what information the app collects, how it is used, and the choices you have. we have tried to write it the way we write everything: plainly.

what we collect

your account. you sign in with Apple. we receive a unique identifier and the email address you choose to share (which may be Apple's private relay address if you choose to hide your email). we do not receive your Apple ID password.

your answers. the questions you are asked, the answers you write, any follow-up exchanges, and the days you skip are stored so the app can work — your answers are the raw material of your portrait.

your preferences. your chosen reflection track, notification time, and similar settings.

what we don't collect. hmm contains no advertising, no third-party analytics or tracking SDKs, and no location tracking. we do not sell your data, and we never will.

how your answers are used

your answers exist for one purpose: to be reflected back to you. the app generates insights, follow-up questions, and a painted portrait from what you write. nothing you write is used to advertise to you, shared for marketing, or used to train our own models.

the AI services we use

hmm's reflections are generated with the help of third-party AI providers. when the app generates an insight, follow-up question, or portrait, relevant text from your answers is sent to these providers for processing:

Anthropic (Claude models) — generates follow-up questions, insights, and the written elements of your portrait and reading.

Recraft — generates the painted portrait image from a written brief derived from your answers. your raw answers are not sent to Recraft; only the derived art brief is.

these providers process data to provide the service to us. we use their business APIs, under terms that do not permit them to use your content to train their generally available models.

where your data lives

your account, answers, and portraits are stored with Supabase, our hosting and database provider. data is protected in transit with encryption (HTTPS) and access is restricted by row-level security, meaning your data is readable only by you and by the app's own server functions.

notifications

the daily question notification is scheduled locally on your device. it fires whether or not you open the app, and you can change the time or turn it off in the app's settings or in iOS Settings at any time.

deleting your data

you can request deletion of your account and everything associated with it — answers, insights, portraits — by writing to hello@hmm.day from the email tied to your account. deletion is permanent and we will confirm when it is done.

children

hmm is not directed at children under 13, and we do not knowingly collect information from them. if you believe a child has created an account, contact us and we will delete it.

changes to this policy

if this policy changes in a way that matters, we will note it in the app and update the date at the top of this page.

contact

Hmm Labs Limited, Hong Kong · hello@hmm.day