Privacy policy

Hex for Mac (desktop app)

Stored on your Mac: chats, projects, knowledge files, memories, schedules, usage statistics, settings and downloaded models, in ~/Library/Application Support/Hex. Secrets such as connector tokens are encrypted with the macOS Keychain.

Your own browsers. Hex reads your open tabs, bookmarks or history from Chrome, Safari or another browser only where you allow it (per browser, in Customize → Browsers), or when you import them into Hex's browser. That data stays on your Mac and goes to the model running there. Hex never reads your browser's passwords, cookies or saved cards.

Hex Agent (optional). Hex Agent is Hex's cloud model. It's only used when you choose it in the model menu, and it needs an account. When you use it, your messages and whatever the agent includes with them (for example parts of files it read, command output or screenshots) are sent over an encrypted connection to Hex's servers and on to the AI model provider Hex uses to answer. Hex's servers pass them through without storing their content; we keep a record of each request's size in tokens, its cost and when it was made, to count your allowance. The provider processes them under its terms with Hex. Chats themselves stay on your Mac as usual.

What the app contacts, and when:

• Model downloads. When you download a built-in model, Hex fetches it from Hugging Face; the model engine (llama.cpp) is downloaded once from its GitHub releases. Those services see a normal download request.
• Updates. When Hex starts, and every few hours while it's open, it asks this website whether a newer version exists, and downloads it in the background if so. These requests contain no personal data.
• Hex Agent. Only when you choose it, as described above.
• Web search and pages. If the agent searches the web or opens a page, the query or page request goes to DuckDuckGo or to that website.
• Connectors. Connectors you add talk to their services (for example GitHub or Notion) with the access you gave them.
• Your account, if you sign in. See below.

Nothing else is sent. With a built-in model, your prompts and files are processed by the model on your Mac.

Accounts, sync and the web app

Hex needs an account. We store your email address and sign-in details, and your answers to the optional setup questions (what you'll use Hex for, your role, how you heard about Hex). We use your email to sign you in and to contact you about your account.

Activity records

To support you, improve Hex and prevent abuse, the desktop and web apps send us a record of what you do in them, tied to your account and to a random ID for each device. For example: opening the app, steps of the setup, signing in or out, starting a chat, sending a message (with the chat type, the model picked, how long the reply took and how many tokens it used), stopping or retrying, downloading or removing a built-in model, opening pricing, starting checkout, changing the look, and installing an update, with the app version and operating system.

Activity records never include what you write or what Hex writes back: no chat text, prompts, file contents, file or folder names, or web pages. Records made before you sign in are linked to your account once you sign in on that device. We keep them while your account exists and delete them with it.

If you're on Pro, Hex syncs your chats, messages, projects, project files and settings to your account so they're available on your other devices and in the web app.

In the web app, your messages are sent to the model provider you choose, using the API key you add. That provider processes them under its own terms. API keys you save in the web app are encrypted at rest.

In the web app you can also choose Hex Agent; your messages then go to the AI model provider Hex uses, and are stored in your account like other web chats.

We keep usage counts (messages per day, and the size and cost of each Hex Agent request) to apply plan limits and allowances.

Payments

Payments for Pro are processed by Stripe. We never see or store your card number. We keep your plan, subscription status and billing period, and Stripe's customer ID for your account.

Service providers

We use Supabase to host accounts and synced data, Stripe for payments, and an AI model provider to answer Hex Agent requests. They process data on our behalf to run the service. Ask us and we'll tell you which provider currently answers Hex Agent.

Your choices and rights

• Use Hex for Mac without ever uploading your chats: they're only synced if you turn on Pro sync.
• Export your chats from Settings → Privacy in the app, and your web data from Settings → Account in the web app.
• Delete your account from the web app's settings; your synced data is deleted with it.
• Ask us about, correct or delete your data: email jangidp318@gmail.com.

Cookies

The website uses only the cookies needed to keep you signed in. No advertising or third-party tracking cookies.

Children

Hex isn't directed at children under 13, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date above, and tell account holders about significant changes by email.

Contact

Questions: jangidp318@gmail.com.