Privacy

Your Mac and your providers

Your messages, attachments, commands, and requested workspace information pass between Hermote and your paired Mac. Hermes Agent processes that work and may send it to the model, speech, or other service providers you configure. Those services have their own privacy and retention policies. Hermote does not replace them.

Conversation history and files stored by Hermes Agent remain on your Mac or with the services you use. Removing a pairing does not delete that history or provider-held data.

Your paired connection

The Hermote bridge connection is end-to-end encrypted between your device and Mac, whether you use Tailscale or the hosted relay. The hosted relay forwards encrypted messages and cannot read their contents. Encryption ends at your Mac; the agent and its configured providers process the information needed for your requests.

The hosted relay receives connection metadata, including network addresses, connection times, traffic volume, and request URLs, including the stable identifier for your paired Mac in the connection query string, plus client information such as user agents. Access logs are used for operation and troubleshooting and rotate as they grow. We do not currently guarantee a fixed deletion period for these logs. The relay is not a conversation-history service.

On your device

Hermote stores pairing records and its device identity in the iOS Keychain, and keeps preferences and working app data locally. Attachments awaiting upload are staged in protected local files excluded from device backups. Temporary attachment files are cleaned up after use; unfinished uploads may remain available for retry.

Use the app’s Mac-management controls to forget a Mac, and the bridge’s device controls to revoke a trusted phone. Revocation closes that phone’s active bridge connections. Deleting the app or forgetting a Mac does not delete files or conversations held by Hermes Agent or its providers.

Optional voice and notifications

Dictation uses microphone and speech permissions. Apple’s speech recognizer can process speech on your device when supported; otherwise Apple’s speech service may receive audio. Provider-based transcription sends a recording through your Mac to its configured speech provider. Read-aloud can use Apple’s system voice or your configured text-to-speech provider.

If you enable push notifications, the device’s push token and notification preferences are sent to your paired Mac. The Mac can send notification content and related identifiers through Apple Push Notification service. You can manage permission in iOS Settings.

Diagnostics and community support

If you choose to send a diagnostics report, the app asks for confirmation. Error context and recent Mac logs may be sent to the diagnostics service operated by Nous Research for Hermes Agent. Review information before sharing it; do not include credentials, pairing links, or private conversations in public bug reports.

TestFlight and Apple may provide crash, usage, and feedback information under Apple’s settings and policies. Information you post on Discord or GitHub is handled by those services and may be public.

This website

This site serves static pages and assets. It does not include advertising trackers, analytics scripts, or a sign-in form. Our web server processes ordinary request information to deliver the site. Following a link to GitHub, Discord, Apple, or another service takes you to that service’s privacy practices.

Questions and changes

For support, visit the Hermote community or Mac bridge issue tracker. Ask how to contact the maintainer privately before sharing personal information. We will update this page when these data-handling practices change.