Privacy policy

HunchKey is a desktop autocomplete app for Windows and macOS, with a website and a web dashboard. This policy is published by [Company legal name], [Registered address] (“HunchKey”, “we”).

It explains what we collect, why, where it goes, and the choices you have. It applies to the desktop app, this website and the web dashboard.

• HunchKey reads the text field you’re in only when you press your shortcut. There is no keylogging and no typing history.
• With your permission it also keeps a few minutes of recent activity in memory (the apps and windows you switched between, and text you copy if you allow it) to understand the task at hand. Never on disk.
• What it reads is sent to make one suggestion and is not saved by HunchKey.
• Password fields are always skipped, and you can turn HunchKey off in any app.
• We keep your account, your preferences, your setup answers and a daily count of suggestions requested. Never the words.

Your name, email address and a hashed password (we never store the password itself), plus sign-in sessions so you stay signed in. On your computer, the sign-in token is kept in the operating system’s secure credential store.

When you press your shortcut, the desktop app reads the focused text field: up to 8,000 characters before your cursor, 4,000 after it, any selected text, the app’s name and the window title, and, when you’re in a web browser, the address of the page (its domain and path, never the part after “?” where search terms and tokens tend to be). This is sent to our server and to our AI provider to produce suggestions, then discarded. HunchKey does not store it.

Recognised password fields are never read, and nothing is read, captured or sent while a password manager or a private browsing window is in front. Some apps don’t expose their text; HunchKey can’t read those without screen context.

Screen context is offered during setup and recommended; you choose whether to use it and can turn it off at any time in Settings.

While it’s on, the desktop app keeps up to fifteen seconds of the active window in memory, never on disk: about one image a second, and one straight away when you switch app, change tab or pick a file. Near-identical images are merged and at most thirty are held. HunchKey’s own windows, password fields, password managers, private browsing windows and apps you’ve excluded are not captured. When you press your shortcut, the current screen and up to three of the most relevant earlier frames (other windows, or the same window before it changed) are attached to that request. Frames are dropped fifteen seconds after they were taken. They go to the AI provider with that request so it can see what you’re responding to, and are not saved by HunchKey.

Offered during setup and recommended; you can turn it off at any time. While it’s on, the desktop app remembers, in memory only and for at most five minutes, which apps you switched between, the titles of their windows (which can include page, document or email subject names) and, on Windows, the name of a file you select in File Explorer.

When you press your shortcut, the steps that belong to the task at hand, up to twelve, are sent with that request to make the suggestion, then discarded. Password managers, private browsing windows and apps you’ve excluded are never recorded.

Off unless you turn it on. When it’s on, the desktop app keeps the text you last copied in memory for up to five minutes, and sends it (up to 1,000 characters) with a request made within three minutes of copying. Copies that the copying app marks as private, as password managers do, are never read, nor is anything copied while a password manager or private window is in front.

We count how many suggestions your account requests each day. It’s a single number per day, used to show your usage in the web dashboard and to apply plan limits. It contains no text, no app names and no images.

Off by default. If you turn on “Share usage measurements”, we also keep, per suggestion, how long it took and how many characters it contained. Never the words.

If you answer them, the setup questions (how you found us, what you do, where you write) are saved to your account. Your preferences are saved too: shortcut, suggestion length, screen context, recent activity, copied text, measurements, appearance and the apps you’ve turned HunchKey off in.

The Home dashboard in the desktop app counts suggestions shown, kept and dismissed, characters inserted, app names and app icons. To decide when a suggestion is worth showing, the app also keeps counts of how often you keep suggestions overall, per app and per kind, the typical length of what you keep and whether you usually write in lowercase. Numbers only, never the words. Recent also keeps the text of your last 40 suggestions, kept or let go, so you can see what HunchKey wrote; you can turn that off in Settings, which forgets the text already kept. This lives only on your computer and you can clear it in Settings. Only two short notes from it (the typical length you keep, and lowercase writing) are sent with a request.

The website doesn’t use advertising or analytics trackers. If you sign in to the web dashboard, your browser keeps a sign-in token so you stay signed in; signing out removes it.

• To produce suggestions when you ask for them.
• To run your account, keep it secure and remember your preferences.
• To show your usage and apply your plan.
• With your answers and optional measurements, to understand what’s working and improve HunchKey.

Suggestions are generated through OpenRouter, which routes each request to an AI model provider. We configure requests so providers that collect or train on data are excluded. Their own policies also apply; see OpenRouter’s privacy policy.

When the next words depend on current public facts, like the news or a price, and web search is on, the AI can ask for one web search. A short query about public facts (written by the AI, never your text, and never containing email addresses or phone numbers) is sent to Exa, our search provider, and the results are used for that one suggestion. You can turn web search off in Settings or the web dashboard. See Exa’s privacy policy.

Our servers and database are hosted by infrastructure providers who process data only on our behalf. We don’t sell your data or share it for advertising.

We may disclose information if required by law or to protect the safety of people or the service. Because we don’t keep the text or images you send for suggestions, we can’t disclose them.

In the desktop app you can pause HunchKey, change your shortcut, turn screen context, recent activity, copied text and measurements on or off, exclude apps, clear the context held in memory and clear on-device activity and learning. Most of these are also in the web dashboard under Preferences.

Text and images sent for a suggestion: not kept. Account, preferences, setup answers, daily usage counts and optional measurements: while your account is open. Sign-in sessions: until they expire or you sign out.

You can ask for a copy of your data, a correction, or deletion of your account and its data by writing to [privacy contact email]. Depending on where you live, you may have further rights, including complaining to a data protection authority.

HunchKey isn’t intended for anyone under 16, and we don’t knowingly collect their data.

If we change what we collect, we’ll update this page and tell you in the app before it takes effect. Questions: [privacy contact email].