Privacy Policy
Last Updated: 2026-10-18
This Privacy Policy explains how Hirey, Inc., a Delaware corporation ("HiRey," "we," "us"), collects, uses and shares personal information when you use our website hirey.ai, our iOS apps HiRey and Who I Met, Rey (our assistant, reachable by text message, iMessage and email), our APIs and agent integrations, and related services (the "Services").
Questions: help@hirey.ai. You do not need a HiRey account to email us.
Summary
- What we collect: what you give us (account details, the people you save, notes, photos, videos with sound, voice notes and messages); what people who met you give us about you; public professional facts from the web and from data providers; and limited technical data our servers record when you use the Services.
- Sensitive information: the contents of your messages, and your exact location only if you choose to share it on the Nearby map. We do not use face recognition or any biometric identification. The iOS apps detect where faces are in a photo, on your device, only to crop it, and keep no face data.
- Other sources: yes. See Information about you from other people and other sources.
- Selling and advertising: we do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not give the information in accounts or on Pages to advertisers.
- Ads and tracking: none. Our apps contain no advertising, analytics or tracking SDKs, our website loads no advertising or analytics tags, and we do not track you across other companies' apps or websites.
- Your choices: use hirey.ai/me and the in-app Account screen, or email help@hirey.ai. We respond within 45 days.
Contents
- Google user data
- What information do we collect?
- How do we use your information?
- When and with whom do we share information?
- Cookies and similar technologies
- How long do we keep information?
- How do we keep information safe?
- International data transfers
- Your choices and rights
- California residents
- Children
- Changes to this policy
- Contact
Google User Data
Google sign-in. If you choose it, we receive your Google account's stable identifier and verified email address, and may receive your name. We use them to sign you in and link that sign-in to your HiRey account. If that sign-in creates your HiRey account, the name from Google becomes your starting profile name, which you can change. Google sign-in does not give HiRey access to your Gmail, Drive or Calendar content.
Google Calendar (optional). If you separately connect Google Calendar, we ask permission to create a secondary calendar named "HiRey" and to see, create, change and delete events only on calendars HiRey created. We use it to put HiRey meetings you organize or accept on that calendar and to keep them updated. Events can include the meeting title, time, time zone, location or join link, and confirmation status. We do not request access to your primary calendar or other calendars you did not create through HiRey.
What we store. For sign-in, your Google account identifier, verified email address and name. For Calendar, the Google account identifier, granted scopes, the HiRey calendar identifier, and encrypted connection credentials. We use Google user data only to sign you in, to run the Calendar connection and, for your name, as described below, and never for advertising. HiRey's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your name and AI. Your profile name, including one that came from Google, is sent to OpenAI when you use Rey and to help transcribe your voice notes. Once you confirm it as your Page name, it is also used when HiRey builds your Page with OpenAI and Anthropic and looks up public professional facts about you (People Data Labs through Monid, Exa and OpenAI). We send it only to provide these features; under OpenAI's and Anthropic's API terms it is not used to train their models. Calendar data is not sent to AI providers.
Disconnecting. You can disconnect Calendar in HiRey settings or revoke HiRey's access in your Google Account. Events already written stay in your Google calendar. To request access to or deletion of Google data we hold, email help@hirey.ai. The retention and security practices below also apply to Google user data.
1. What Information Do We Collect?
Account information you give us
- Your name.
- Your phone number or email address, used to send you a one-time sign-in code by text message or email.
- If you use Sign in with Apple: an Apple user identifier, and your name if you choose to share it. We do not keep the email address Apple shares.
- If you use Google sign-in: the Google data described above.
- We do not use passwords.
Content you create
- People you met and your notes. The names of people you save, your private notes about them, and where and when you met.
- Contact details you save. Phone numbers or email addresses you choose to type in for a person you met. Only you can see them. The apps do not read your phone's address book.
- Photos, videos and Moments. Photos you take or choose in the apps, and videos you record in Capture. With a photo, we also keep when it was taken (from the photo's own date) and whether you took it in the app or chose it from your library. Only you and HiRey's team can see these. Capture can record up to 60 seconds of video. The app asks for microphone permission when you first choose Video; if you allow it, the recording includes sound. If you do not, you can record silent video. Saving the Capture uploads the video, including any recorded sound, to us. Saving a Capture does not post it to the Feed. If you choose to post a Moment, it appears on the Feed and on the public Pages of the people in it. If you choose Send card, people who have the card link can see the shared card, including its photo, date and place, without a Feed post.
- Pages. Your public HiRey Page and its drafts, and any Pages you prepare for people you met (see below).
- Documents you import. Text from PDFs, images or text files you choose with "Résumé or screenshot" in the HiRey app's Capture. The text is extracted on your device and sent to us.
- Sources for your Page. Files (such as a résumé PDF, a Word document or a screenshot) and text you add so Rey can write or update your Page, and the instruction you give with them. A file is uploaded to us whole. We keep it, the text read from it and your instruction in your account as private sources. Adding a source does not publish it; only what you publish on your Page is public.
- Voice notes (Who I Met). Audio you record about someone you met. The audio is transcribed (see Service providers). The recording is deleted 30 days after upload; the transcript stays with your note until you delete it.
- Dictation (Who I Met). "Say who you met" turns speech into text on your device using Apple's on-device recognition. That audio is not sent to us.
- Messages. Messages, photos and files you send to other people or to Rey in the HiRey app, or to Rey by text message, iMessage or email. Rey reads your messages to Rey to do what you ask.
- Messages from people you don't know. When someone you do not know messages you, whether Rey reads the message and whether we notify you depends only on facts about the sender (verified sign-in methods, account age, what they have published on HiRey, and whether the message answers a Need you published), never on what the message says. Nothing is deleted for this reason; you can open every message sent to you.
- Reports and blocks. When you report something or block someone, we record the report (what was reported and the reason you chose) or the block, linked to your account.
- Account deletion requests. When you request deletion in the app, we record the request and its status.
Location: only when you tap
- Where you met. The HiRey and Who I Met apps, and the capture page on our website, read your device's location only when you tap the location button to fill in where you met someone. The apps ask for approximate location by default.
- The position is rounded to about 1 km and sent to Amazon Location Service (Amazon Web Services) to look up the neighborhood and city name and nearby places, such as cafés. If you allowed only approximate location, the app fills in the city only; with precise location, it also shows nearby places for you to choose from.
- We do not store or log those coordinates and never keep a street address from them. Only the place name you choose to keep is saved, privately, with your note.
- Nearby map (website, optional). If you are signed in at hirey.ai and press "Show me on the map", your browser sends your exact location while you share it (for the 1, 2 or 4 hours you choose, or until you stop), and people signed in to HiRey can see where you are on a map, with your Page. We keep only your latest position. It stops being shown when sharing ends, and is then deleted.
- The apps never collect location in the background or continuously.
Location metadata in files
- When you upload photos, videos or PDFs in our apps, on our website or through our API, we remove the location metadata these files commonly carry (GPS coordinates and place names in standard photo metadata, such as EXIF and XMP, and video location tags) before storing them. If we find location metadata we cannot remove, we do not accept the file.
- Location stored in other forms may remain: for example, inside a video's own data stream, in the short video of a "motion photo", or in compressed content inside a PDF.
- Photos and files you send to Rey by text message, iMessage or email are currently stored as received.
Push notifications (HiRey app)
If you turn on notifications, we store your device's Apple push token so we can send them. You can turn notifications off in iOS Settings.
Information our servers record
- An app-installation identifier that each app generates at random (not a hardware or advertising identifier), with the device type, app version and operating system version.
- Your account and session.
- Which actions you took and on what (for example "posted a Moment" or "sent a message"), and when. These records are linked to your account.
- Error and performance details, such as which operation ran, how long it took and whether it failed. These do not include the content of your messages.
- Like any internet service, our servers receive your IP address and your browser or app version when you connect. We use IP addresses to limit abuse, and some of our infrastructure may record them in access logs.
We use this to run, secure and debug the Services and to understand which features are used.
Website storage
- hirey.ai sets a sign-in cookie when you sign in at hirey.ai/me or in the Who I Met web app, and keeps a random browser identifier and some preferences and drafts in your browser's storage.
- Some marketing pages keep, in your browser's local storage, the page that referred you, the page you landed on and your first-visit time, to adapt the text shown on the page.
- Forms. If you fill in a form on our website (for example a waitlist), we receive what you enter, such as your name, email address or phone number and what you are looking for, together with the page that referred you and the page you landed on.
- Other providers. Some pages load fonts, scripts, images or map tiles from other providers (Google, jsDelivr, unpkg, CARTO and There's An AI For That). Like any web server, they receive your IP address and browser information when they deliver those files.
Information about you from other people and other sources
HiRey is built on real meetings, so people who met you can tell us about you, and we add public professional facts.
- People you met (Connectors). Someone who met you in person can record the meeting and give us your name, a photo taken when you met, their notes and links. They can prepare a public Page about you and may publish it before you join HiRey; they are recorded as its publisher. Their private notes and any contact details they saved are never shown on a Page.
- Public web pages and links people send us.
- Data providers of public professional profiles. We use People Data Labs (through Monid) and Exa. To look someone up, we send them a name with a company, job title or location, or a public profile address. A lookup is started by you, or by someone who has added you to their HiRey contacts, usually after meeting you. From a LinkedIn profile or a provider's record we use professional facts only: employers, titles, dates, schools, degrees and location. We write any summary in our own words and do not use photos from LinkedIn or data providers.
Categories we hold from these sources: identifiers (name, phone, email); professional and employment information; education; public profile links; photos; and what people send to Rey.
If a Page is about you and you do not want it:
- Every public Page has a Remove this Page link at the bottom (hirey.ai/v1/public/pages/<page>/request-removal). Sign in to HiRey and ask there, or email help@hirey.ai with the Page address.
- We do not take anonymous removal requests. If you do not have an account, create one and sign in, or email us.
- HiRey's team reviews each removal request. We may ask you to confirm who you are.
2. How Do We Use Your Information?
- Provide the Services. Create and sign in to your account. Save the people you meet, your notes, photos, videos and voice notes. Show the Pages and Moments people choose to publish. Deliver messages. Have Rey act on your requests. Help people who met find, contact and be introduced to each other. Look up public professional facts when you or a Connector ask.
- Send service messages. Sign-in codes, and notifications about messages, meetings and your account, by text, email or push. Reply STOP to any text to opt out of texts.
- Keep HiRey safe. Review reports, act on blocks, prevent fraud and abuse, and investigate and debug problems.
- Understand and improve the Services. Count which features are used, from the server records described above. We do not build advertising profiles.
- Comply with the law and enforce our Terms.
We do not use your information for targeted advertising, and we do not use your content to train third-party AI models.
AI. Rey, search, messages, Moments and Pages use AI from OpenAI and Anthropic. When you use them, we send these providers what the feature needs, such as what you write, your notes, the people you've met, messages you send or receive, and the Moments and Pages you post. HiRey asks your permission once (in the app or on the web), after you sign in. We ask again only if how we use AI changes materially. When you add a file or text to write or update your Page, we send it, with your instruction, your current Page and up to three of your recent interview transcripts, to OpenAI, Anthropic or both, depending on how the Page is written. OpenAI may receive a file whole.
We send it only to provide the feature to you. Under OpenAI's and Anthropic's API terms, they do not use it to train their models.
3. When and With Whom Do We Share Information?
- With the people it is meant for. A message goes to its recipient. A posted Moment or published Page is public on hirey.ai and in our apps, and can be read by search engines and AI agents. A Meeting Card you send goes to whoever you send it to, using your own apps.
- With service providers that process it for us under contract:
- Amazon Web Services: hosting, database, file storage and place-name lookup.
- OpenAI: Rey, voice-note transcription (with your name and the name you gave the person), transcription of audio from videos when you use interview processing or ask Rey to prepare or transcribe a video, search, finding public background, writing your Page from files and text you add, and other text, audio and image tasks you ask HiRey to do. Under OpenAI's API terms, this data is not used to train OpenAI's models.
- Anthropic: company and title suggestions from your notes, search, writing or checking your Page from files and text you add (including the file itself when it has no text, such as an image), other language-model processing of text you ask HiRey to work on, and a one-word label for what kind of picture a profile photo is (a person, a group, a logo and so on). It never says who is in the photo, and there is no face recognition.
- ElevenLabs: speech-to-text for some recordings.
- Twilio: text messages.
- Photon: iMessage delivery to and from Rey.
- Resend: email.
- People Data Labs (through Monid) and Exa: public professional facts.
- Apple: Sign in with Apple and push notifications.
- Google: Google sign-in and the optional Calendar connection.
- Zoom: only if you connect your Zoom account, to create video rooms and import recordings.
- For legal reasons. To comply with law or valid legal process, or to protect the rights, safety and property of our users, HiRey or others.
- In a business transfer. If HiRey is involved in a merger, acquisition or sale of assets, subject to this policy.
We do not share mobile phone numbers or text-message opt-in data with third parties or affiliates for their marketing or promotional purposes.
4. Cookies and Similar Technologies
- The apps use no cookies or tracking technologies.
- The website uses only the sign-in cookie and the browser storage described in Section 1. It loads no advertising or analytics tags.
- You can block or delete cookies and site data in your browser; signing in at hirey.ai needs them.
- We do not respond to Do-Not-Track signals because no common standard exists, and we use no cross-site tracking for them to act on.
5. How Long Do We Keep Information?
- Account information: while your account is open.
- Messages, notes, people you saved and photos: while the account that holds them is open, or until you delete them.
- Videos (including recorded sound): kept in your account. Deleting a Moment removes its shared posts and cards; it does not by itself delete the stored recording. To request deletion of the recording, use the deletion choices in Your Choices and Rights.
- Voice-note audio: deleted 30 days after upload. The transcript stays with the note.
- Pages: while published or kept as a draft by the person who prepared them, together with the facts and sources behind them.
- Sources for your Page (files and text you add): while your account is open.
- Results from data providers that nobody used: up to 180 days. Facts used on a Page stay with the Page.
- Reports, blocks and action records: as long as needed to keep HiRey safe and to run and debug the Services.
- Deletion requests: when you ask us to delete information, we aim to complete the deletion within 45 days, unless the law requires us to keep it. Some records may take longer to remove from all systems, and copies may remain in backups until those backups expire.
6. How Do We Keep Information Safe?
We use encryption in transit and access controls, and limit staff access to people who need it. Staff moderation and deletion actions require a specific, recorded grant. No system is perfectly secure, so we cannot guarantee that information will never be accessed without authorization.
7. International Data Transfers
HiRey is based in the United States, and the service providers listed in Section 3 process information there and in the other countries where they operate. If you use the Services from outside the United States, your information is transferred to and processed in the United States, whose privacy laws may differ from those of your country. We process this information to provide the Services you ask for and protect it as described in Section 6. For questions about where your information is processed, contact help@hirey.ai.
8. Your Choices and Rights
Delete your account.
- In HiRey: Me → Delete account. In Who I Met: Account → Delete account.
- This sends a deletion request; it is not instant. HiRey's team reviews and processes each request, usually within 45 days, and you can check its status in the app, including from the sign-in screen on the same device.
- HiRey's team then deletes your account and the information in it, such as the people you saved, your notes, photos, videos and posts. Content that other people hold, such as their own notes about meeting you, is reviewed separately.
- You can also email help@hirey.ai.
See, correct or delete information, including a Page someone made about you: use hirey.ai/me; sign in and use the Remove this Page link on the Page; or email help@hirey.ai with the Page address, whether or not you have an account.
Report and block. In the apps, use the "⋯" menu to report content or to block a person. HiRey's team reviews reports.
Withdraw consent to optional features (microphone, location, notifications, Calendar) in the app, in iOS Settings or in your Google Account.
Texts. Reply STOP to opt out of texts and HELP for help.
Responding to requests. We may need to confirm who you are before we act. We respond within 45 days; if we need more time, we tell you within those 45 days and take up to 45 more. We will not discriminate against you for exercising your rights.
9. California Residents
Categories of personal information we have collected in the past 12 months:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, phone number, email address, account and installation identifiers, IP address | YES |
| B. Personal information in the California Customer Records statute | Name, contact information, education, employment | YES |
| C. Protected classification characteristics | Gender, date of birth | NO |
| D. Commercial information | Purchases, payment information | NO |
| E. Biometric information | Fingerprints, faceprints, voiceprints | NO |
| F. Internet or other network activity | Actions you take in the Services, the page that referred you to a form | YES |
| G. Geolocation data | Approximate location when you tap the location button; exact location only while you share it on the Nearby map (Section 1) | YES |
| H. Audio and visual information | Photos, videos with recorded sound, voice notes | YES |
| I. Professional or employment-related information | Employers, job titles, work history | YES |
| J. Education information | Schools, degrees | YES |
| K. Inferences | Company and title suggestions, summaries on Pages | YES |
- Sources and purposes: Sections 1 and 2.
- Disclosed for a business purpose to the service providers in Section 3: categories A, B, F, G, H, I, J and K.
- Sold: none. Shared for cross-context behavioral advertising: none.
- Your rights: to know, delete and correct your personal information, to opt out of sale or sharing (we do neither), and not to be discriminated against for using these rights. The only sensitive personal information we collect is your exact location while you share it on the Nearby map, and the contents of messages you send and receive; we use them only to provide the Services you ask for, so there is no separate right to limit their use.
- Authorized agents: we may require proof that an agent is authorized to act for you.
- How to exercise them: hirey.ai/me, or help@hirey.ai.
10. Children
The Services are for people 18 and older. We do not knowingly collect information from anyone under 18. If we learn we have, we delete it. Contact help@hirey.ai.
11. Changes to This Policy
When we change this policy, we update the "Last Updated" date above. If we make material changes, we may also tell you in the Services or by email. If we materially change how we use AI, we ask for your permission again.
12. Contact
Hirey, Inc.
28 Geary St, Suite 650 #334
San Francisco, CA 94108
United States