Privacy Policy
Last updated: May 5, 2026
The short version
Hive runs on your Mac. Voice plays from your speakers. Your Claude Code session events stay local. We collect the minimum we need to bill, sync, and improve the product. We do not sell your data. We do not train AI models on your code. You own your skins forever, refunds are honored, and you can delete your account at any time.
1. Who we are
2. What we collect
Account data. Your email address, display name, and an authentication token issued by Firebase Authentication when you sign in with Google or Apple. We do not see your Google/Apple password.
Avatar data. The skins you own, your equipped skin, your avatar’s name and body type, your voice provider preference, drawer side, click-through and auto-equip settings. This is what makes Hive feel like “your” Hive across devices.
Wallet data. Your Honey balance, top-up history, and Pro subscription status. We retain a transaction ledger for refunds, audit, and tax compliance.
Streak + activity data. A daily ping from your Mac app indicating you opened Hive, used to compute your streak and grant streak rewards. We do not record what you did during the session.
Claude Code session events (local only). The Hive daemon installs a hook script in ~/.claude/hooks/mwah-hook that subscribes to Claude Code lifecycle events (SessionStart, PreToolUse, Stop, etc.) and the tool name + input summary for each. This data stays on your machine. The daemon uses it to animate the avatar and pick a voice phrase. It is not transmitted to our servers unless you opt in to telemetry (off by default).
Voice. Hive ships pre-rendered voice MP3s with the Mac app — one set per base avatar (Mwah, James, Pup, Cat) and one per Persona-tier skin (Dragon Knight, etc.). Voice plays from disk on your Mac. No microphone, no network call, no third-party voice service receives anything from your machine for routine narration.
Telemetry (opt-in). If you enable telemetry in Settings (off by default), we receive aggregate counts of tool-call types, session durations, and crash reports. Telemetry never includes file contents, prompts, or model outputs.
3. What we do NOT collect
- The contents of files you open in your editor.
- Your Claude Code prompts or model outputs.
- Your microphone input (Hive does not listen to you).
- Your screen contents.
- The audio your avatar plays back — we cannot hear what you hear.
4. How we use your data
- Operate Hive. Sync your skins and settings across devices, animate the avatar, process payments.
- Bill and refund. Process Honey purchases, Pro subscriptions, and refunds via Stripe.
- Customer support. Respond when you email us about an issue.
- Improve the product. Aggregate, anonymized usage patterns (telemetry) help us decide what to build next.
- Security. Detect and respond to abuse, fraud, or chargeback rings.
- Legal compliance. Tax reporting, regulatory disclosures, lawful requests.
We do not train AI models on your data. Your code, your prompts, and your avatar usage are not used to fine-tune any model we control or license.
5. Third-party processors
- Cloudflare — hosts the website, the relay infrastructure (Durable Objects + R2), and the worker handling RPC calls.
- Firebase Authentication (Google) — handles sign-in. We see your email but not your password.
- Stripe — processes payments. Stripe handles your card data; we never see the full card number. We retain a redacted transaction record (last 4 digits, processor receipt URL).
- ElevenLabs — we use ElevenLabs once at production time to render the preset voice MP3s shipped with the Mac app. They do not receive any data from your usage of Hive after install.
- Sentry — receives anonymized crash reports if telemetry is enabled.
6. Where your data lives
7. Your rights (GDPR / CCPA)
- Access a copy of your data — email privacy@clearly.sh; we respond within 30 days.
- Correct inaccurate data — via Settings, or by emailing us.
- Delete your account — via Settings → Account → Delete account, or by emailing us. Deletion is permanent and removes your skins, Honey balance, and avatar history within 30 days.
- Export your data — we provide a JSON export on request.
- Object to processing or restrict our use — tell us and we’ll comply where required.
- Lodge a complaint with your local data protection authority.
8. Data retention
- Active accounts: data retained while your account exists.
- Deleted accounts: personal data removed within 30 days; transaction ledgers retained for 7 years for tax / audit.
- Crash reports: 90 days, anonymized.
- Telemetry: aggregated indefinitely; raw events 30 days.
9. Security
10. Children
11. Changes to this policy
12. Contact
Data deletion / export / access: privacy@clearly.sh
Security disclosures: security@clearly.sh
Mailing address: Clearly, c/o the address listed in our Terms of Service.