Privacy Policy

Effective October 2, 2026 · Last revised October 3, 2026

Hermes Bot Mobile, including HermesBot Mobile Beta on Google Play, is an independent companion app for Hermes Agent provided by Hedhli Labs (Mahdi Hedhli). This policy covers the mobile app, hermes-bot.app, and information you send us for support or beta participation. You choose the Hermes host the app connects to. Your host and its connected services have their own data practices.

Data the app handles

The app handles pairing details and device credentials, bot names, Bot Chat messages and tool activity, scheduled jobs, model settings, and other information returned by the Hermes host you pair. It stores the information needed to keep your pairing and show recent content on your device. The app sends requests you initiate to your selected host. Core Bot Chat traffic does not pass through a Hedhli Labs server.

When you scan a pairing code, camera access is used to read the code. The app does not use the camera image for advertising or analytics. If you use voice input, the device’s speech recognition service processes your speech; on Android it may send audio to Google or another speech provider. iOS requests on-device recognition. Android recognition may use a network service even when on-device recognition is requested. The app shows the recognized text for review before you send it to Hermes. Read-aloud uses your device’s speech system.

Where data goes

• Your Hermes host: Bot Chat messages, job and model requests, and the pairing information needed to authenticate the phone are exchanged with the host you select. You control that host’s configuration and retention.
• Media providers: When you load an image hosted outside your Hermes host, your phone requests it from that provider. The provider receives the request, including your IP address and the requested URL, under its own privacy policy.
• Device services: iOS or Android may process camera, speech, storage, and system diagnostics according to your device settings and the platform’s policies.
• App stores: Apple TestFlight and Google Play may provide us with install, crash, and tester feedback information through their developer consoles.
• Support: If you email us or submit store feedback, we receive the information you choose to include and use it to respond and investigate the issue.

Your Hermes host may send messages and files to the AI providers and tools its operator configures. Those services process data under their own terms. Tailscale provides the network connection to your host; its service is governed by Tailscale’s privacy policy.

The app does not include an advertising SDK. Android pairing uses Google’s ML Kit barcode scanner, which sends SDK diagnostics and usage metrics to Google. We do not sell your personal information.

Android QR scanner diagnostics

ML Kit processes camera images and decoded barcode results on your device. Separately, its SDK sends technical diagnostics and usage metrics to Google, including app and device information, installation identifiers, and API performance, configuration, event and error information. These metrics help Google maintain and improve ML Kit and handle abuse. Google describes this processing in its ML Kit privacy terms and Android SDK data disclosure. Local image processing does not mean these separate metrics stay on your phone. We have not established an app-controlled telemetry opt-out or a fixed retention period for Google’s metrics.

Optional reply reports

In builds with the “Report reply” action, you can send an offensive-response report to the HermesBot Mobile developer. Opening the report form or cancelling it sends nothing. Before sending, the app explains that reporting uses a separate internet connection through Cloudflare. The report contains your selected reason, optional details, and a reply excerpt only if you explicitly include it. You can review and edit the excerpt. The app does not add host, bot, message, device or account identifiers, pairing credentials, or other chat history. Do not include passwords or sensitive personal information in a report.

Reports are stored privately in Cloudflare Workers KV for developer review and automatically expire after 30 days. Cloudflare processes the HTTPS request and technical network metadata for service delivery, service improvement, security and abuse prevention under Cloudflare’s privacy policy. This metadata includes your IP address and may include approximate location inferred from it. The report receiver does not store your IP address in the report record or log report bodies. Provider processing and retention of network metadata are governed by Cloudflare’s policies. Reports are not published or used for advertising. Reporting does not send a command to your Hermes host.

Use the contact mechanism below to request deletion of a report before it expires. Because reports contain no added user identifier, include enough information to identify the report without sending additional sensitive information. If we cannot identify it, its record will still expire automatically after 30 days.

Website and beta participation

This website is hosted on GitHub Pages. GitHub may process technical request information, including your IP address, to deliver and secure the site under GitHub’s privacy statement. The site does not use advertising trackers or analytics scripts.

The Android beta signup form is provided through Google Forms. Google processes form submissions under its privacy policy and stores the responses in our Google account. We collect only the email address you enter; responses are not shared publicly. If you sign up or contact us to join the Android beta, we use the email address and information you choose to provide to manage beta access and send beta-related updates. We do not publish the signup list or use it for unrelated marketing. You can leave the list by responding to the email UNSUBSCRIBE. To request deletion before receiving an email, use the contact mechanism below. We keep beta signup information while managing the beta or until you request removal.

Storage and retention

Pairing credentials use platform-protected storage. Saved app content is encrypted on the device, with keys held by the platform's protected storage. App data remains on your device until you remove it through the app or the operating system; your Hermes host may keep its own copy under its settings. Support correspondence is retained while needed to handle your request and investigate the issue. You can ask us to delete correspondence you sent to us; we may retain information needed for legal or security obligations and will explain any applicable exception.

Your choices

You choose which Hermes host to pair and which messages to send. Use “Remove from this phone” in instance details to remove that pairing and its saved conversations from the app. If the host is unreachable, revoke the phone’s access separately on the host. Removing a pairing or uninstalling the app does not delete conversations or jobs stored on your Hermes host: ask its operator to remove those. The app does not require a separate Hedhli Labs account. You can deny camera or microphone permission and use text input or another pairing method when available. Your device settings control speech service and store diagnostic sharing.

Security

The app uses authenticated requests to your paired host over Tailscale, platform-protected credential storage, and encrypted saved content. Protect your phone, host, and provider accounts. No storage or transmission method can guarantee absolute security.

Children

Hermes Bot Mobile is intended for adults who operate a Hermes host. It is not designed for children.

Changes and contact

We will update this page when the app’s data practices change. For privacy questions or deletion of reports, support or beta information you shared with us, open the Android beta signup form and choose “Contact form owner” at the bottom. You do not need to join the waitlist to send a privacy request. Google may ask you to sign in and will show which contact details are shared with your message.