Privacy Policy

Last updated October 25, 2026

Draft. This page is waiting for review by a lawyer and may change before HubAxis launches.

HubAxis is made by Cody Tuma (“we”, “us”). This policy explains what the HubAxis Mac app and hubaxis.app collect, why, who helps us process it, and the choices you have. The short version: your files stay on your Mac, and recordings leave it only when you share them.

1. The Mac app

• Scanning happens on your Mac. HubAxis reads file names, sizes and dates to show what's using space. This stays on your Mac and is never sent to us.
• Messages, Photos, Contacts, Mail and Calendar. If you allow access, HubAxis reads what a feature needs (for example attachment details in Messages, or your Photos library) only on your Mac, to show and clean up what you choose.
• Dictation, transcripts and AI. Speech is turned into text by Apple's on-device speech models, and summaries, chapters and “What is this?” answers come from Apple's on-device models. That happens on your Mac and is not sent to us.
• No analytics in the app. The app doesn't send usage statistics or crash reports to us.
• Account and license checks. When you sign in, the app keeps a token in your Keychain and checks your plan with our server about twice a day. We record the device name and app version you sign in from, so you can see and revoke signed-in Macs.
• Updates. The app checks for new versions. Like any web request, that reveals your IP address to our host.

2. Recordings and screenshots you share

Nothing you record leaves your Mac until you share it. When you share a recording or a screenshot:

• What's uploaded: the share copy of the video and its sound (HEVC or H.264, and a smaller AV1 copy), a poster image and link-preview image, the title, and its length and size. The full-quality original stays on your Mac.
• Transcripts and AI insights. The transcript made on your Mac is uploaded with the video, to show captions and the Transcript tab to viewers and to let you search your library. If you have Pro, the summary, chapters and action items are uploaded too.
• Who can see it. Anyone with the link, unless you make the video private, add a password, or set an expiry. You choose whether viewers can download it and comment.
• Where it's kept. Shared media is stored with DigitalOcean (Spaces, in the United States). Downloads you or viewers request are kept as an MP4 for 6 days.
• Deleting. Trashing a video stops its link immediately. It's deleted for good 30 days later, or right away if you choose “Delete for good”. When you publish an edit, the previous version is deleted 7 days later. Copies in our database backups are overwritten within a few weeks.

Recording other people. If your recording includes other people (on a call, say), you're responsible for having their permission where the law requires it.

3. Viewers and viewer analytics

• Watching needs no account. To count views and show owners how far people watched, we keep, per video and viewer: a random viewer ID in a first-party cookie (or, without it, a daily hash of the IP address and browser), how many seconds were played, how far into the video, and when. A signed-in viewer's account is linked to their view.
• What owners see. View counts and watch time, and the names of signed-in viewers who watched.
• Owner views don't count, and we use no advertising or cross-site tracking.
• Password-protected videos set a cookie for that video after the right password, so you don't type it again for 7 days.

4. Comments and reactions

• Commenting needs a free account. Your name, picture (if any), comment text, the moment it refers to and your reactions are shown to everyone who can watch the video.
• The video's owner, people you reply to and people you @mention get an email about it (grouped, at most every few minutes).
• You can edit or delete your comments; the owner can delete any comment on their video. Deleting a video deletes its comments.

5. Your account

• We keep your email address, name and picture (if you sign in with Google or Apple), your plan, the videos you've shared, and the browsers and Macs you're signed in on (device name, app version, browser, IP address, last seen).
• Sign-in codes and links are emailed to you; we store only a hash of them, for 10 minutes.
• Cookies on hubaxis.app: a session cookie when you sign in, the viewer cookie above, and unlock cookies for password-protected videos. No advertising cookies.

6. Services you choose to connect

• Google Drive. Files you choose to back up go directly from your Mac to your own Google account. HubAxis only asks for access to the files it creates there. We never receive your files or Google credentials. HubAxis's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
• Claude (optional). If you add your own Anthropic API key, the requests you make (for example “What is this?” about a folder: its name, size and dates, never file contents) go to Anthropic under its privacy policy.

7. Who processes data for us

We don't sell personal information or share it for advertising. We may disclose information if the law requires it, or to protect people's safety or our service.

8. How long we keep data

• Shared media, transcripts and comments: until you delete them (see section 2), or until you delete your account.
• View records: as long as the video exists.
• Account data: until you delete your account. Billing records stay with Stripe as long as tax and accounting rules require.
• Server logs (requests, IP addresses): a few weeks, for security and fixing problems.

9. Your rights

You can download or delete your videos from your library, and ask us for a copy of your data, to correct it, or to delete your account by emailing codytuma@gmail.com. Depending on where you live (for example the EU, UK or California) you may have further rights, including objecting to processing, and you can complain to your local data protection authority. Our legal bases are providing the service you asked for (contract), our legitimate interest in running and securing it, and your consent where we ask for it.

10. International transfers

We're based in the United States and our servers are there. If you use HubAxis from elsewhere, your information is transferred to and processed in the United States.

11. Children

HubAxis isn't directed at children under 13 (or the minimum age in your country), and we don't knowingly collect their information.

12. Changes

If we change this policy, we'll update the date above and tell account holders by email about significant changes.

13. Contact

Cody Tuma, [State], United States · codytuma@gmail.com