Humeto · For adults aged 18 and over

Privacy policy

Humeto is provided by Nabeel Khalid, using the developer display name DOTIVATE.

Updated 1 November 2026 · Contact help@humeto.com

What we collect and why

Humeto collects data needed to provide your account, cloud sync, task management and the optional features you use. We do not sell or rent personal data. This does not mean that we collect no data or that no service providers process it.

• Account information: name, email, account and workspace identifiers, password hashes, sessions and your acceptance of our policies. We use these for authentication, access control and account support. We do not save your password in the Android app.
• Your work: tasks, projects, goals, milestones, reminders, completion history, focus intervals, preferences and financial estimates you enter.
• Optional content: AI prompts and conversation history, project messages, voice notes, images and files you choose to upload. Workspaces using CRM and document tools also store the records and documents their authorised users submit.
• Service and safety records: request and security logs, abuse reports, moderation decisions, and a locally generated notification-device identifier used to avoid duplicate reminders. Hosting and service providers may process IP addresses and technical request information.

AI and service providers

When you use live Humeto AI, prompts, conversation history and relevant workspace context are sent to OpenAI to generate responses. Break-chat messages are sent to OpenAI for safety screening before publication. Do not submit information you are not authorised to disclose.

Humeto uses hosting and database infrastructure, including Vercel and Neon, and configured storage and email services, including Supabase storage and Resend. These providers process information needed to run the service. Provider processing, retention and applicable contracts are separate from a sale of personal data. We do not promise that all processing stays on your device or in one country, or that external AI providers retain nothing.

The website loads fonts from Google Fonts; loading them sends technical requests to Google. Optional browser dictation uses your browser’s speech recognition service, which may process audio online under its own policies. Humeto does not record or store dictation audio; the transcript is sent to Humeto AI only when you send your instruction. The Android app requests microphone access only for voice recording and notification permission for device notifications. You can deny or revoke OS permissions; the corresponding feature may stop working. Humeto does not request contacts, SMS, call logs or device GPS permissions in its current Android build.

Who can see your content

Your workspace and project permissions determine which authorised colleagues or clients can see shared content. Project invitations and reference links should be shared carefully. Workspace owners may administer organisational records. Do not treat shared content as private from its authorised recipients.

Break chat is a public, opt-in room across Humeto workspaces. Other participants see an animal alias rather than your account name. Humeto retains the identity mapping for moderation; this is not untraceable or end-to-end encrypted chat. Reports are reviewed by authorised moderators. Do not post personal or confidential information.

Storage, security and retention

Production app connections use HTTPS. Passwords are hashed on the server. Remembered Android sessions are encrypted using Android Keystore. Access is controlled by authenticated workspace and project permissions. These safeguards reduce risk; they are not a guarantee against every security incident.

Active account and workspace records are kept to provide the service. Archived tasks remain until restored or removed. Tasks in the Bin are scheduled for deletion after 30 days. The public Break-chat feed shows the last 24 hours; message and report evidence is scheduled for removal after 30 days. Scheduled removal depends on the service's cleanup jobs. Backups and legally required records may have separate retention periods.

Your choices and deletion

You can change optional notifications and device permissions, delete or remove supported content, stop using optional AI and chat features, and request access, correction or deletion through help@humeto.com. Request account and associated data deletion here; you do not need to reinstall the app.

Deletion is handled by support after appropriate identity verification. We will explain the scope, expected completion time and any information that must lawfully be retained. Removing your account is not the same as merely disabling sign-in. Organisational records about other people may require coordination with the workspace owner and a valid retention basis. Copies independently saved by other users may remain outside our control. Service-provider copies must also be addressed during fulfilment.

Adults, children and organisational records

Humeto accounts and this app release are intended for adults aged 18 and over. We do not market this release as a children's app or claim that its AI or anonymous chat is safe for children. If you believe a child has opened an account, contact us for review and appropriate removal.

An adult organisation may submit student or applicant records, including records about minors, through its authorised workflows. That organisation must have a lawful basis and appropriate notices or permissions. An adult-only account policy does not eliminate obligations relating to such records.

Questions and changes

Contact help@humeto.com about this policy, service providers or privacy requests. We update this page when practices change and seek new consent where required.