Privacy — helloim.ai

This page says what helloim.ai collects, where your data goes, and what never reaches us. It's written from the code, not from a template.

helloim.ai is operated by vDesktop, LLC. When this page says “we”, that's who it means.

The short version

The Windows app needs an account. It checks that account with our server every time it starts.
When you talk to it, your voice goes to Microsoft's speech service. Microsoft turns it into text. We never receive the audio.
Your chats go to the AI you chose, on your own account. Our servers never see what you ask it, and never see your AI key.
Your keys and conversation history stay on your computer. So does the assistant's own voice, and so does anything you type to a local model such as Ollama.

The Windows app

Your account

The app won't run without a helloim.ai account. When you sign up we store:

your email address and display name
your country, if you give it
whether you accepted the terms, and when
whether you want product email
your password, in a form we can't read. We keep a PBKDF2-SHA-512 hash with a random salt, never the password itself.

Each time the app starts, it sends your sign-in session to our account server to confirm the account is still valid. That server runs at helloim.ai; an older install still mid-migration may briefly show nameos.ai, the product's earlier name, in your firewall instead. A session lasts 30 days, or until you sign out.

What the app sends, and where

What	Where it goes	Why
Your sign-in session	Our account server (helloim.ai; nameos.ai for older sign-ins during the move)	To check your account at startup
App version, platform, a random install ID, update channel, your session	Our update server (helloim.ai; nameos.ai for older installs during the move)	To ask whether an update exists
Your voice	Microsoft's online speech service	To turn speech into text
Your messages, plus anything you wrote in “About you”	The AI you chose: Anthropic, OpenAI, Google or another provider, on your account	So it can answer
Feedback you send from inside the app	Our server at helloim.ai	So we can read it

About voice: the app runs on Microsoft's WebView2, and the speech recognition built into that engine sends audio to Microsoft's cloud. Microsoft's own documentation says so. Microsoft's privacy terms cover that audio. Nothing is recorded or sent until you use the microphone.

About your AI: whoever provides it sees your messages under their own terms, and bills you for them. If you use Claude, the app runs Anthropic's Claude Code, which may send usage metrics and error reports to Anthropic and its service providers, under Anthropic's policy. If you pick a local model like Ollama and type to it, the conversation never leaves your machine. The app itself still goes online for the account check, updates, and voice.

Feedback includes your message, a category, an email address if you add one, your app version, your country, your browser details, and a one-way hash of your IP address.

Google (only if you connect it)

If you connect Google, the app asks Google for permission to:

Gmail: read, send and draft email, apply labels, mark messages read or unread, archive them, and move them to trash
Google Calendar: see your list of calendars, and create, change and delete events

Your mail and calendar travel directly between the app and Google. When you ask your AI to work with a message or an event, that content also goes to your AI under its provider's terms.

Signing in to Google, and every later token refresh, passes through a small token exchange we run at helloim.ai, because Google requires a secret the app can't safely hold. It passes each request straight to Google (oauth2.googleapis.com) and back. It stores nothing and keeps no logs. The only thing it holds is your IP address, in memory for up to a minute, to limit how often it can be called.

helloim.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Other connectors

You can also connect other services. Some sign you in through the browser: Notion, Linear, Slack, Canva, Dropbox, Monday and GitHub. Others come from the app's catalogue of MCP connectors, or from connectors hosted on your Claude.ai account. You can also connect any mail account by IMAP and SMTP. In every case the app talks straight to that service under your own login. Your tokens and passwords are stored in Windows Credential Manager, and none of it passes through us.

Downloads during setup

Setting up can fetch software from the people who make it. That means Anthropic for Claude Code (from Anthropic's download server, or from npm), Node.js from nodejs.org, and Ollama from ollama.com. Those downloads are covered by those providers' terms.

What stays on your computer

Your AI keys and passwords. They're stored in Windows Credential Manager and never sent to us.
Your conversation history. It's saved in the app's own folder. The “Clear conversation history” button deletes it.
Its memory, and your “About you” notes. The originals are plain text files in the folder you point it at. Open them, edit them, delete them.
The assistant's own voice. Kokoro turns replies into speech on your computer. The voice files come with the installer. If they ever need re-downloading, they come from the Kokoro project's page on GitHub and are checked against the copy we ship.
A troubleshooting log. The app keeps a short log on your device. It notes each start-up, and anything that goes wrong, such as a crash or the app freezing. It holds timestamps, version numbers, short technical messages and folder paths. As of 1.0.2, your Windows user name is stripped out of that log before it's written, including from log entries kept from earlier versions. It doesn't record your conversations or files, and it strips out common API-key formats. It's never sent anywhere automatically. You can open it from the Help page in the left sidebar and decide whether to share it with us.

The website

If you sign up for updates, we store your email, your name if you give it, which plan you were looking at, the time, your IP address, your country, and your browser details. Each signup is emailed to us and added to our contact list. Signing up means you'll get a welcome email with the download link, followed by a short series of product emails. Every one has an unsubscribe link. If you don't confirm your email address within 30 days, we delete your signup automatically. The only copies left after that are the confirmation email we sent you and the one sign-up notice our own inbox received; ask us and we'll delete those too.
If you connect an AI on the website, your key is saved in your browser, unencrypted, and sent straight to the provider. It never passes through our servers. Anyone who can use that browser profile can read it.
Analytics. The site loads no analytics or tracking scripts.
Hosting. The site and our servers run on Cloudflare, which sees the IP address of every request.

Payments

Enterprise is inquire-only, not self-serve — we bill it directly, not through a checkout on this site. If that changes, we'll receive your email address and plan from whoever processes it, and we'll never see your card number.

Who else handles your data

Cloudflare hosts the site and our servers, and stores accounts and signups.
Microsoft processes voice input.
Your AI provider gets your messages.
Google handles your mail and calendar, if you connect them.
GitHub hosts the installer and the voice files.
Stripe may handle billing for an Enterprise agreement, arranged directly with you, not through a checkout on this site.
Discord hosts our support server, under Discord's terms, if you use it.

We don't sell your data. We don't share it for advertising, and there are no ads.

Your rights

You can ask us to show you the data we hold about you, correct it, send you a copy, or delete it.

Anything else: email hello@markdalton.com from the address on your account, or the one you signed up with. That's how we confirm it's you.
How long we take: we'll answer within one month.
What deletion keeps: a marker saying you unsubscribed, so we never email you again, and billing and licence records, which we keep for our bookkeeping. A few short-lived technical records hold only a one-way hash of your address, never the address itself, and expire on their own within 180 days. Nothing else, apart from the signup emails described under “The website”, which we delete if you ask.
Where your data is processed: our servers run on Cloudflare, so your data may be processed in the United States.
Complaints: if you're in the EU or UK, you can complain to your local data protection authority.

To clear your computer, uninstall the app and delete your working folder. You can remove the keys in Windows Credential Manager.

How long we keep things:

Your account: while it exists. Once you close it, we delete it promptly.
Feedback: deleted promptly once we've dealt with it.
Signups: kept so we can send that short series of product emails, and removed within 30 days of the last email in the series, or right away if you unsubscribe or ask us to delete your data.

Children

helloim.ai isn't for children. You must be at least 13 to use it in the US, and at least 16 where local law sets a higher age. If we learn that an account belongs to a child under that age, we'll delete it.

Changes

If this changes materially, we'll update this page and the date at the top.

Contact

vDesktop, LLC · hello@markdalton.com

Send legal notices to the same address.