What we keep, why, and what we do not do with it. Last revised 9 September 2026.
Your email address, your password (kept only as a salted hash, which cannot be turned back into the password), the plan you chose, and the sessions you are signed in from. If you subscribe, Stripe keeps your card and your address; we keep only Stripe's customer id and the subscription's status. We never see your card number.
Clients, notes, outcomes, formulas, the conversations you have with Herbert and the documents you attach are stored on our server so that they are there when you return, and they are shown to no one but you. Conversations with Herbert are kept for thirty days so he can carry on where you left off; the questions are sent, with the relevant passages of the reference, to the language model that answers them, and to no one else.
We send the password letter you ask for, a welcome letter, and receipts through Stripe. We do not send marketing unless you ask for it, and we do not sell, rent or trade addresses.
One cookie keeps you signed in for ninety days. There is no advertising, no tracking pixel and no third party analytics. The box counts visits by the day (a page seen, and a hashed address that marks a distinct visitor for that day and is discarded after ninety days), never joined to an account; and the server's own logs record the addresses that call it and are kept for a short time to keep the service safe.
The service runs on a server we rent; the connection to it is encrypted. Herbert's voice is spoken on that server and the transcription of anything you dictate is written there and the audio forgotten.
You may ask us for a copy of what we hold on you, ask us to correct it, or ask us to delete your account and everything in it; use Write to us, on the front page and in the app's menu, or reply to any letter we send you. Signing out everywhere is a button in Your account.
If this page changes in a way that matters we will say so on the site.