Hera Privacy Policy

Effective date: 11 June 2026

This policy is also available in Chinese. In case of any discrepancy between language versions, this English version prevails.

1. Who we are

Hera ("the app") is provided by Zhuhai Yuejiajun Technology Co., Ltd. (珠海跃嘉竣科技有限公司) ("we", "us"). This policy explains what personal data we process and your rights under the UK GDPR and applicable data-protection law. Contact: support@heraai.co.

2. Data we process

Account data: email address and/or phone number you use to sign in (via one-time code).
Recordings & transcripts: audio you record (in-app or via a paired recording device) and the text transcripts generated from it.
AI interaction data: the questions you ask Hera's AI assistant and its responses, which are based on your own content.
Derived memory: contacts, facts, to-dos and profile summaries automatically extracted from your meetings.
Device & connectivity data: identifiers of paired recording hardware and Bluetooth/Wi-Fi connection data used to sync it.
Diagnostics & usage: crash and performance logs (via Alibaba Cloud EMAS) and minimal usage events. Usage events that relate to your queries store only a one-way SHA-256 hash, never the query text.
Location: we do not collect your geographic location. The location permission is used only by the operating system for Bluetooth/Wi-Fi scanning to discover your recording device.

3. How we use your data and our lawful bases

To provide the service (record, transcribe, build and recall your memory): performance of a contract.
To process your content with AI (see §4): your consent.
To keep the service secure, diagnose crashes and improve it: our legitimate interests / your consent for analytics where required.
To manage your account and deletion requests: legal obligation and contract.

4. AI processing and third-party sub-processors (important)

To transcribe recordings and power the AI assistant, your recordings, transcripts and AI queries are sent to and processed by third-party AI and cloud providers, including:

Google (Gemini API) — transcription and/or AI generation. Processing may occur on Google servers outside the UK/EEA.
DeepSeek — AI generation.
MiniMax — text-to-speech.
Alibaba Cloud — object storage (recordings), SMS one-time codes, and crash/performance diagnostics (EMAS).

We obtain your explicit consent before this processing. We do not sell your data and do not use it for advertising.

5. International transfers

Where data is processed outside the UK/EEA (e.g. by Google for AI), we rely on appropriate safeguards such as Standard Contractual Clauses / the UK International Data Transfer Addendum. Details available on request.

6. Storage and security

Recordings and content are stored on Alibaba Cloud (UK region for UK users). We apply access controls and encryption in transit. No method is 100% secure.

7. Retention and account deletion

You can delete your entire account in-app (Settings → Delete Account). On request the account is immediately deactivated and access to the service is suspended. Within a 15-day recovery window you can restore the account by signing in and confirming; if you do not, once the window expires all your data is permanently deleted and your email/phone binding is released. Diagnostic and usage logs are deleted. We keep data only as long as needed to provide the service or to meet legal obligations.

8. Your rights (UK GDPR)

You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time (including consent to AI processing — note the app cannot function without it). You may lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk. To exercise rights: support@heraai.co.

9. Recordings of other people

Hera lets you record meetings that may capture other people's voices. You are responsible for obtaining any consent required by law in your jurisdiction before recording others.

10. Children

Hera is not intended for children under 16. We do not knowingly collect their data.

11. Changes

We may update this policy and will post the new version at https://api.heraai.co/legal/privacy with a revised effective date.

12. Contact

Zhuhai Yuejiajun Technology Co., Ltd., support@heraai.co.