Hejo – Privacy Policy

1. Summary

• Hejo is a voice assistant for iPhone. Answers are generated by Claude, an AI model by Anthropic, and may be inaccurate.
• You use your own Anthropic API key. Requests go directly from your iPhone to Anthropic (api.anthropic.com). RenaCode runs no intermediary server and does not receive, store or see your requests.
• Before anything is sent, the app shows what data goes where and asks for your consent. Without consent nothing leaves the phone.
• The app has no user accounts, ads, analytics or tracking. It is free and has no in-app purchases.

2. Publisher

Hejo is published by RenaCode, a sole proprietorship registered in Poland:

• address: ul. Wolbromska 18/1b, Wrocław, Poland,
• tax ID (NIP): 8992692240,
• e-mail: contact@renacode.com.

Please send questions about privacy in the app to the e-mail address above. If you write to us, we process your message in accordance with the RenaCode Privacy Policy.

3. What the app sends

When you ask a question or give a command, the app sends to Anthropic:

• the text of what you say (transcribed speech), not the audio recording,
• dates, times and titles of calendar events when a request requires checking your calendar: the AI model chooses the date range, events come from all calendars on the device, at most 20 at a time,
• details of events you ask the app to create: title, start and end date and time, and location,
• the text and due date of reminders you ask the app to create,
• the names of shortcuts (Shortcuts app) you ask it to run, and the text passed to the shortcut,
• what is needed to answer in your language and time: the current date and time, your time zone and the device's language and region setting,
• the conversation so far: your earlier requests, the AI’s answers and the results of actions (e.g. calendar events read or a confirmation that a reminder was created). The conversation is sent again with every request until you tap Reset or restart the app.

Your calendar may contain information about other people or sensitive information (e.g. medical appointments). Calendar events are sent to Anthropic only when the model decides that your request requires checking your calendar; the model chooses which date range to read.

4. Where the data goes

The App Store version works only with your own API key: requests go directly from your iPhone to the Claude API of Anthropic PBC (USA) at api.anthropic.com, under the agreement you enter into with Anthropic when you create the API key. Anthropic bills the requests to your key.

RenaCode does not receive, store or have access to your requests, answers or API key. How Anthropic processes this data, including how long it is kept and transfers outside the European Economic Area, is described in Anthropic's Privacy Policy and the terms you accept when creating the key.

5. Speech recognition and speech output

Speech is turned into text by Apple's system speech recognition: on the iPhone when on-device recognition is available for the language, otherwise on Apple's servers, under Apple's terms. The audio recording is not sent to Anthropic or to RenaCode. Answers are read aloud by the speech synthesizer built into iOS.

6. Consent and withdrawing it

Before the first request the app shows a "Before you start" screen explaining what data is sent and where, with links to this policy and to Anthropic's Privacy Policy (App Store Review Guideline 5.1.2(i)). Data is sent only after you tap "I agree".

Consent is stored only on your device (the version of the consent screen text and the date). You can withdraw it at any time in the app's Settings → Privacy; from then on every request is blocked before it leaves the phone. If the scope of the data sent changes, the app asks for consent again.

7. What is stored on the device

• Your API key – in the iOS Keychain, on this device only, without iCloud sync.
• App settings and the consent record (version and date) – in the app's settings on the device.
• The current conversation – only in the memory of the running app. The app does not save conversation history to storage; the conversation is gone when the app is closed or the settings change.

You can remove the key in the app's Settings with "Remove key" and revoke it in the Anthropic Console. Do this before deleting the app: deleting the app erases its settings, but iOS may keep Keychain entries.

8. Permissions

The app asks for access only when a command needs it:

• microphone and speech recognition – to hear your command,
• calendars and reminders – to read events and to create events and reminders when you ask.

Shortcuts are run by the Shortcuts app only after you confirm ("yes" or the button), because they can send messages or delete data. What a shortcut does depends on how it is set up. The App Store version does not use HomeKit and has no access to home accessories.

9. Source code and self-built versions

The app's source code is public (github.com/RenaCode/Asystent). Someone who builds the app from source can configure their own intermediary server (proxy) or enable HomeKit. In such a build requests go to the server set in that build, and the person who runs that server is responsible for processing them. This policy describes the version available on the App Store.

10. Age

The app is rated 18+ on the App Store and is not intended for people under 18.

11. Your rights

Because RenaCode does not receive data from the app, it cannot provide, correct or delete it. For data processed by Anthropic, contact Anthropic as described in its Privacy Policy. You can delete the data on your device by withdrawing consent, removing the key and deleting the app.

If you believe your personal data is processed unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) or with the supervisory authority in your country of residence.

12. Changes to this policy

Changes to this policy are published on this page with a new date. If a change extends the data the app sends, the app asks for consent again before sending anything further.