Privacy

Last updated: November 11, 2026

1. Who uses this

Halograph Mind is a private application for a single person. There is no public sign-up, no advertising and no tracking.

2. Which data

Messages from iMessage and from WhatsApp and Telegram exports, mails from Gmail, Outlook and Apple Mail, appointments from Apple, Google and Outlook calendars and calendar links, meetings from Granola and Wispr Flow, dictations from Wispr Flow and FluidVoice, Apple Notes, contacts, GitHub repositories, Claude Code sessions and saved memories. This includes messages written by other people; they are stored only for personal search and are never shared.

3. Where it lives

In a Supabase Postgres database (Frankfurt region) and, for semantic search, as vectors in Cloudflare Vectorize. Credentials for connected services are encrypted with AES-GCM, keys for agents are stored only as SHA-256 hashes. An encrypted backup (age) is made every night and stays with the owner.

4. How the Mac sync works

A small reader on the Mac has Full Disk Access but no network access; it copies the local databases into a private folder. A separate sync process without disk access sends new entries here and deletes the copies. The server can never send commands to the Mac.

5. Who sees it

Only someone signed in with an allowed address (Supabase sign-in via Google, magic link or password). Questions in the world view and the agent chat send the matching snippets to the Anthropic API to write an answer. Agents connected over MCP can search; read-only keys cannot write.

6. Deleting

In Settings you can delete single entries, single sources or all mind data at once. Disconnected sources take their entries with them on request.

7. Cookies

Only the technically necessary session cookies from Supabase after sign-in.