Privacy Policy
Last updated: August 2026
Protecting your personal data is important to us. This notice explains what data is processed when you visit this website, purchase a Hush license, or activate a license in the app. The Hush app itself processes your speech and transcripts exclusively locally on your Mac — this content is not transmitted to us or third parties.
1. Controller
Martin Kistner
Lorscher Straße 5, 60489 Frankfurt am Main, Germany
E-Mail: [email protected]
2. Hosting, CDN, and server log files
This website is hosted on servers operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. For delivery, protection against attacks, and stability, we use Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) as a content delivery network and reverse proxy. When you access the site, information is automatically stored in server log files transmitted by your browser: IP address, date and time of access, page accessed, browser type, and operating system. Processing is carried out to ensure secure and stable operation on the basis of our legitimate interest (Art. 6 (1) (f) GDPR). Data processing agreements pursuant to Art. 28 GDPR are in place with Hetzner and Cloudflare. Cloudflare may transfer data to the USA; Cloudflare relies on EU Standard Contractual Clauses for this. Further information: cloudflare.com/privacypolicy.
3. SSL/TLS encryption
For security reasons, this site uses TLS encryption. You can recognize an encrypted connection by “https://” in your browser's address bar.
4. Payment processing via Stripe
We use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) as our payment provider. When you purchase a license, you are redirected to the Stripe checkout page. The data required for processing (including name, e-mail address, payment data, and billing address) is transmitted directly to Stripe and processed by Stripe. We do not receive complete payment data. The legal basis is contract performance (Art. 6 (1) (b) GDPR). Data may be transferred to the USA; Stripe relies on EU Standard Contractual Clauses for this. Further information: stripe.com/privacy.
5. Delivery of the license key by e-mail
After a successful purchase, we send your license key to the e-mail address you provide via Stripe. For delivery, we use Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. Your e-mail address and order information are processed for the purpose of delivering the ordered service (Art. 6 (1) (b) GDPR).
6. License activation in the app
When you activate a license key in the Hush app, the app sends a one-time background request to our server (hush-app.uk/api/license/track) after successful local verification. The license key and an anonymous installation ID (random UUID stored locally in your Mac keychain) are transmitted. On the server, we store only a SHA-256 hash of the key — not the key itself — together with the installation ID and activation timestamps. The purpose is to document license activations for abuse prevention and support. Local activation works regardless of whether the request succeeds. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR). Data is stored as long as the license is valid and there is a legitimate interest in tracking.
7. Aggregate download analytics
When the Hush landing page is viewed or a download is requested, we record separate aggregate counters by UTC day and hour, Hush release (for downloads), a source code passed in the link, and, for downloads, the two-letter country code provided by Cloudflare. The source code is limited to short, operator-defined letters, numbers, hyphens, and underscores; other query parameters are not retained. We do not store IP addresses, browser or device information, referrer URLs, cookies, or other visitor identifiers, and we do not link page views to individual downloads. The counters help us understand distribution and release adoption and are retained for no more than 13 months. The legal basis is our legitimate interest in operating and improving the distribution of Hush (Art. 6 (1) (f) GDPR). You may object to this processing at any time by contacting us.
8. Cookies and storage technologies
This website uses only technically necessary cookies required for operation; no consent is required for these (§ 25 (2) TDDDG). Cloudflare may set security cookies, for example. In addition, the website stores localStorage entries in your browser for your language preference (hush-lang) and color scheme (theme). These serve user convenience only and do not require consent. We do not use analytics, marketing, or advertising tracking that stores information on, accesses information from, or identifies visitors' devices.
9. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21) at any time. Contact us at the address above. You also have the right to lodge a complaint with a data protection supervisory authority.
10. Retention period
We store personal data only as long as necessary for the stated purposes or as required by statutory retention periods (e.g. commercial and tax retention periods for invoice data).