Privacy Policy

In short: HeyCC does not run a relay server for AI requests. What you chat about with the assistant goes straight from your device to the model provider you choose (a third party). The HeyCC developer cannot see it. The App Store version does not upload logs or conversations to the developer's servers.

Data Collection

The HeyCC developer has no server that receives your conversations, and does not collect your conversations, logs, or other personal data. Your conversations and API keys are stored on your own device.

Only what you send yourself reaches the developer: feedback emails you choose to send (see "Logs and Feedback").

Also, when you open features such as the plugin marketplace, the app downloads a catalog from a server run by the developer (see "Other Third Parties When You Go Online"). That server can see your IP address.

What Is Sent to Model Providers

After you add a model provider, HeyCC sends the following straight from your device to the provider you chose (a third party, such as Anthropic, OpenAI, DeepSeek, MiniMax, or an address you entered yourself). The requests do not pass through HeyCC servers.

• The text you type
• The images and files you add
• Earlier messages in the conversation (sent with every question)
• Content the assistant reads to complete your request, such as files, web pages, the clipboard, calendar, reminders, contacts, photos, location, and the state of home devices. What the assistant reads is sent with the next request. For Calendar, Reminders, Contacts, Photos, Location, and home devices, iOS asks for your permission first; files and web pages do not need system permission.
• Your name, occupation, and what the assistant remembers about you. Private chats leave these out by default.
• Background tasks: organizing memories, shortening long chats, tidying voice notes, and letting custom assistants learn from your chats also send chat content.
• Voice: voice input is turned into text and sent as text. If you turn on "Talk over each other (duplex)", use the "Read-aloud model" for cloud read-aloud, or ask the assistant to transcribe a recording, the audio or the text read aloud is also sent to the provider.
• Image and video prompts: when you ask the AI to generate an image or a video, the prompt you write takes the same path.

Your key is only used to prove who you are to that provider. If you connect more than one provider, image generation, transcription, sub-tasks, or a model group's fallback may go to another one; this section applies to each of them.

Notice

When you add a provider on the "Add Provider" screen, the new version of HeyCC explains the list above the first time and asks you to tap "Agree and Continue". If you tap "Not Now" or close the page instead, that model is not added.

Providers you add by signing in with a subscription account, by a command, or through the assistant do not show this page. What is sent is the same as listed above. You can read this explanation any time in Settings › About › Privacy Policy.

Providers you have already set up keep working. This is shown once: adding other providers later on the "Add Provider" screen does not ask again.

If you have already tapped "Agree and Continue" and the range of what is sent changes later, HeyCC shows you the notice again the next time you add a model.

Other Third Parties When You Go Online

Online features such as search, weather, web previews, and software downloads are not model providers, but they receive part of your content:

• When the assistant searches the web, your search words go to the search website.
• When the assistant checks the weather, it uses Apple Weather (WeatherKit) first. If that is unavailable, the location used for the weather lookup (latitude and longitude, at full precision) goes to the weather website.
• When a web link appears in a chat, the app asks that website for a link preview.
• When the assistant opens a web page, that website receives the page address.
• Each time you open the app, it sends a connection check that carries no content to Anthropic's server.
• Extension services you add or turn on yourself (for example MCP services or browser acceleration) receive what you ask them to handle.
• When you install software packages, the app downloads from software mirror sites. When it refreshes model reference data, or you open the plugin or skill marketplace, it downloads a catalog (the plugin catalog comes from a server run by the developer). These requests do not carry your conversations.

For every item above, the other server can see your IP address. Each of these third parties has its own privacy policy. HeyCC cannot guarantee how they handle data.

iOS System Capabilities

HeyCC has a number of tools that use system capabilities (Calendar, Reminders, Contacts, Photos, Location, Clipboard, home devices, Files, Shortcuts, and more). For system data such as Calendar, Reminders, Contacts, Photos, Location, and home devices, iOS asks for your authorization first, and you can revoke it at any time in Settings › HeyCC. Files and web pages do not need system permission. What the assistant reads with these capabilities is sent, like the text you type, with the next request to the model provider you chose; see "What Is Sent to Model Providers".

Voice

Voice input uses Apple's built-in speech recognition. During recognition your audio may be uploaded to Apple's servers for processing, depending on your device, OS version, and language — that's Apple's rule, not something HeyCC controls.

By default HeyCC does not send audio to a model provider. Audio, or the text read aloud, is sent to the provider you configured only if you turn on "Talk over each other (duplex)", use the "Read-aloud model" for cloud read-aloud, or ask the assistant to transcribe a recording (see "What Is Sent to Model Providers").

Local Storage

• Conversations: stored in a local SwiftData database on your device
• API keys: stored in the iOS Keychain (encrypted)
• Preferences: stored in UserDefaults (local)

iCloud Sync (Your Private Container)

iCloud sync is off by default; you turn it on yourself. If you do, HeyCC syncs your data (conversations, memory entries, tool-call records, model groups, notes, assistants, scheduled tasks, and more) to your own private iCloud CloudKit database, scoped to the iCloud account signed in on this device. This makes your data restorable across devices and after reinstall.

Exception: even if you have not turned on iCloud sync, your provider settings (name, endpoint address, model list, request settings and similar, but not the key) sync between your own devices through iCloud key-value storage. These settings sit in your own iCloud account, kept by Apple, and do not pass through the developer's servers.

Important properties of this sync:

• The CloudKit container is private to your Apple ID. Apple does not read it.
• HeyCC's servers never see this content — sync happens directly between your device and Apple's CloudKit infrastructure.
• You can disable sync anytime in System Settings → Apple ID → iCloud → HeyCC, or by signing out of iCloud.
• If iCloud is not signed in, HeyCC uses local storage only and does not sync.

Retention and Deletion

• Your conversations: stored on your device until you delete them. Deleting a conversation in the app removes the copy on this device.
• Your keys: deleting a provider also deletes its key; "Settings › Model › Clear All Credentials" clears every key at once.
• Content sent to model providers: how long it is kept, and whether it is used for training, is decided by the provider. See each provider's privacy policy. To have a provider delete data it holds, contact that provider.
• iCloud: when sync is on, the copy is in your own iCloud account. You can turn sync off, or manage iCloud storage, in System Settings.
• Feedback emails you send to the developer: to have one deleted, email the contact address below and say which one.

Apart from feedback emails you send yourself, the HeyCC developer holds none of your data, so there is nothing else to delete.

Third-Party Services

• The model provider you choose (such as Anthropic, OpenAI, DeepSeek, MiniMax, or an address you entered yourself)
• Search and weather websites, and the websites behind links (link previews)
• Extension services you add yourself (such as MCP services)
• Software mirror sites, and the plugin and skill marketplaces (catalog and file downloads)
• Apple: iCloud (CloudKit, only if you turn on sync), Weather (WeatherKit), and speech recognition
• No analytics, tracking, or advertising SDKs

Each of these third parties has its own privacy policy. HeyCC cannot guarantee how they protect data; see their policies.

Logs and Feedback

The App Store version does not upload logs or conversations to the developer's servers. Logs stay on your device unless you send them out yourself.

What you send out yourself is the exception: feedback emails, and logs you share with the share button at the top right of "Settings › Feedback › Issue Log".

When you tap the share button, the log goes to the iOS share sheet, and you choose who gets it.

When you send feedback in "Settings › Feedback", the email contains only what you write, plus the app version, device model, and OS.

After you join the co-build program, feedback sent from the conversation menu shows you what the email contains before it is sent. By default it includes the record of that conversation, the issue log, a screenshot, and device and version info (keys and contact details are removed from the conversation record); you can untick each item.

The email goes out through the Mail app on your device, and whether to send it is up to you. Once sent, it sits in the developer's mailbox.

Children's Privacy

HeyCC is not designed for children under 13, and we do not knowingly collect personal information from children.

Policy Changes

We may update this privacy policy from time to time; updates are posted here. If the range of what HeyCC sends changes, the app shows the notice again the next time they add a model, to anyone who has already tapped "Agree and Continue".

Contact

For privacy questions, email: [email protected], or visit the support page to reach us via Telegram / X / RedNote.

Last updated: October 2026