How Humm protects and handles your data
Summary: Humm transcribes your voice notes on-device. Audio never leaves your phone. Only transcribed text is synced to enable AI-powered organization, and all note content is encrypted at rest in our database. We do not sell your personal information.
Mind Meat Machine, LLC ("Company", "we", "us", "our") operates the Humm mobile application ("App") and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.
This Privacy Policy is incorporated into and subject to our Terms of Service. By using the Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with our practices, please do not use the Service.
When you sign in with Apple or Google, we receive:
When you create voice notes, we store:
We collect basic usage information to improve the Service:
We receive limited subscription status information from Apple to determine your access level. We do not receive or store your payment method details, credit card numbers, or billing address. All payment processing is handled exclusively by Apple.
Your voice recordings are never uploaded. All audio transcription happens directly on your iPhone using on-device processing. Audio files stay on your device and are deleted after transcription is complete. The text that is synced to our servers is encrypted at rest in our database.
We do not collect:
We use the information we collect for the following purposes:
We do not sell, rent, or trade your personal information to third parties. We share your information only in the following limited circumstances:
We use the following third-party services to provide and operate the Service. Your transcribed note text is shared with these providers solely for the purpose of delivering the AI-powered features you use:
Each third-party service provider is bound by its own privacy policy and, where applicable, data processing agreements that restrict how your data may be used.
We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to: (a) comply with applicable laws or respond to valid legal process; (b) protect the rights, property, or safety of Mind Meat Machine, LLC, our users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) enforce our Terms of Service.
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice within the App before your information is transferred and becomes subject to a different privacy policy.
Protecting your data is central to how Humm is built. We implement commercially reasonable administrative, technical, and organizational measures designed to protect your personal information.
We use multiple layers of encryption to help protect your data:
Encryption is one part of a broader security approach that includes:
When you provide feedback on your daily digests (such as thumbs up or thumbs down ratings), a copy of the related digest content and source notes is stored in unencrypted form. This allows us to review and improve the quality of our AI-generated digests. This unencrypted copy persists for as long as the feedback exists. You can remove your feedback at any time through the App, which will also remove the associated unencrypted copies.
When your notes are processed by AI services for classification, tagging, and digest generation, they are temporarily decrypted in server memory for processing and the results are re-encrypted before being stored. We take measures to limit the time and scope of any unencrypted data during processing.
While we take the security of your personal information seriously and implement measures designed to protect it, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you acknowledge that you provide your information at your own risk.
You have the following rights regarding your data:
To delete your account and all associated data, go to Settings > Account > Delete Account in the App, or contact us at [email protected].
If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"):
The following table describes the categories of personal information we have collected in the preceding twelve (12) months:
| Category | Examples | Collected | Sold or Shared |
|---|---|---|---|
| Identifiers | Email address, name, unique user ID | Yes | No |
| Commercial Information | Subscription status, purchase history | Yes | No |
| Internet or Network Activity | App usage data, feature interactions | Yes | No |
| Inferences | AI-generated categories, tags, entities | Yes | No |
| Sensitive Personal Information | Content of notes (user-generated text) | Yes | No |
To exercise your California privacy rights, contact us at [email protected] or use the in-app account deletion feature. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.
If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with comprehensive privacy legislation, you may have similar rights to access, delete, correct, and opt out of certain processing of your personal information. We do not sell personal information or engage in targeted advertising. To exercise your rights, contact us at [email protected]. If we decline your request, you may appeal by contacting us at the same email address.
The Service uses automated processing (artificial intelligence and machine learning) to classify, tag, summarize, and organize your notes. This automated processing is used solely to provide the core functionality of the Service and does not result in decisions that produce legal or similarly significant effects on you. You may review and override any AI-generated classifications, tags, or other metadata at any time within the App.
We retain your data as follows:
The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers and databases are located. The data protection laws of the United States may differ from those of your jurisdiction. By using the Service, you consent to the transfer of your information to the United States.
The Service is not intended for use by individuals under the age of 17. We do not knowingly collect personal information from anyone under 17 years of age. If you are a parent or guardian and you believe your child under 17 has provided us with personal information, please contact us immediately at [email protected]. If we become aware that we have collected personal information from a child under 17, we will take steps to delete such information promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you through one or more of the following means: (a) posting a prominent notice within the App; (b) sending a notification to the email address associated with your account; or (c) updating the "Last updated" date below. We encourage you to review this Privacy Policy periodically.
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us:
Last updated: February 2026