Privacy Policy
The plain version: Hyphælium saves a breadcrumb — the platform you used, the title and URL of the conversation, and the opening words of your first message (so you can find the thread again by searching the way you first asked). It does not save the rest of the conversation, the AI's replies, or anything you typed after that opening question. To link related breadcrumbs together, and to suggest topic tags on the paid plan, it briefly sends the title and opening words — nothing more — to an AI provider for a short analysis. Your breadcrumbs are stored securely against your account — never sold, never used for advertising, never used for anything but helping you find your way back.
Who we are
Hyphælium is an independent venture operated as a sole trader, based in Burton upon Trent, United Kingdom. If you have any questions about this policy, contact us at privacy@hyphaelium.com
What data we collect
When you save a breadcrumb from an AI conversation, the following is recorded:
- Platform — which AI service you were using (e.g. Claude, ChatGPT)
- Title — the title of the conversation page, as shown by the platform
- Opening words — the opening words of your first message in that conversation, so you can find it again by searching the way you first asked
- Link back — the URL of the conversation page
- Timestamp — the date and time of the save
We also keep:
- Your organising choices — which breadcrumbs you have pinned or filed into folders, the folder names you choose, and topic tags
- Links between breadcrumbs — when a new breadcrumb continues an earlier one, we store the earlier breadcrumb's title alongside it so the connection can be shown in your vault
- Your account details — your email address, the name you give us (optional), your plan, and a protected (hashed) form of your password. We never see or store your password itself, and card details are handled entirely by Stripe.
We do not collect the rest of the conversation, the AI's responses, anything you typed after your opening message, or any files you upload to AI platforms. The conversation itself stays on the platform that created it and never passes through Hyphælium. Your opening words are your own text, so it is sensible not to include sensitive personal details in them.
AI processing: linking and tagging
Two features need a short piece of AI analysis. When you save a new breadcrumb, Hyphælium can check whether it continues one of your recent breadcrumbs, so the connection can be shown in your vault; and, on the paid plan, it can suggest a topic tag.
To do this, our server sends the title and opening words of the new breadcrumb — together, for the linking check, with the titles and opening words of up to five of your recent breadcrumbs on the same platform — to Anthropic, an AI provider, which returns a short answer. Nothing else is sent: never the rest of your conversation, the AI's replies, your files, your email address or any account details.
Anthropic acts as our data processor. Under its commercial terms it may not train its models on this content. It automatically deletes inputs and outputs from its systems within 30 days, unless content is flagged by its safety systems as violating its usage policy (in which case it may keep it for up to two years) or the law requires it to be kept longer. Anthropic is based in the United States, and we rely on the safeguards in its data-processing terms for that transfer. Its retention terms are published in its Privacy Center (privacy.claude.com).
Where your data is stored
Your breadcrumbs are stored in Hyphælium's secure database, hosted with a GDPR-compliant provider on servers within the European Union. Access is protected by your account, which you create with an email address and password.
You never have to manage any database keys or technical credentials yourself. You sign in with your email and password, and Hyphælium's server handles everything securely behind the scenes — so the technical complexity stays with us, not you.
How your data is used
Your data is used solely to provide the Hyphælium service — displaying your breadcrumb trail in your vault, organising it, and enabling you to return to past conversations. Your data is never sold and never used for advertising. It is shared only with the service providers listed below, and only as far as needed to run the service.
Your rights under GDPR
As a UK and EU resident you have the right to:
- Access all data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent at any time
You can also delete any individual breadcrumb yourself, at any time, from your vault. To exercise any of the other rights, contact us at privacy@hyphaelium.com and we will respond within 30 days. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ico.org.uk).
Data retention
Your breadcrumbs are kept for as long as your account exists, whether it is free or paid. When you delete a breadcrumb in your vault, it is removed from our live database straight away. If you ask us to delete your account, we will delete your account and everything in it within 30 days. Deleted data may remain in routine encrypted backups for a short further period before being overwritten. Payment records are held by Stripe and by us for as long as the law requires.
Cookies
The Hyphælium landing page does not use tracking cookies. To keep you signed in, Hyphælium stores a single secure login token in your browser — not cookies, and never your password. The public pages of the website (the landing, setup and help pages) use GoatCounter, a privacy-friendly analytics service, only to count visits and clicks on a few key links; it sets no cookies and does not build profiles of visitors. Your vault is not tracked in this way.
Third party services
Hyphælium relies on a small number of trusted providers to operate the service:
- Database & hosting — to store your breadcrumbs and run the service, with GDPR-compliant providers.
- Anthropic — AI analysis for linking and tagging, as described above. It receives only short extracts (a title and opening words), never your conversations.
- Stripe — payment processing. Privacy policy at stripe.com/privacy
- Resend — to send you service emails such as your welcome message.
- GoatCounter — cookie-free counts of visits to the public website pages.
None of these services receives your AI conversations.
Changes to this policy
We will notify members of any material changes to this policy by email. Continued use of Hyphælium after changes constitutes acceptance of the updated policy.
Contact
For any privacy questions: privacy@hyphaelium.com