Overview
Smart Hub is a communication service for friends, communities, and teams. This Privacy Policy applies to the Smart Hub website, web app, and supported desktop and mobile applications.
Information we collect
Smart Hub collects information you provide or create while using the service, including:
- Google account details used to sign in, such as your Google account identifier, email address, display name, and profile image.
- Your Smart Hub profile, preferences, presence setting, friendships, blocks, server memberships, and acceptance of the Terms and Conditions.
- Your birthday month and day, device timezone, and optional country selection (Global, United States, or India). Your birthday is permanently locked after you confirm it. Smart Hub does not request or store your birth year, GPS location, or precise location for these features.
- Messages, reactions, reports, server rules, channels, polls, invites, and other content you choose to create.
- Files you upload for sharing or for Buddy to analyze, including supported documents and server icons.
- Technical information needed to operate and protect the service, such as signed-in device and session records, passkey public credentials, login alerts, request metadata, security events, usage records, and sanitized diagnostics.
- Voice messages, optional transcripts you explicitly request, scheduled messages, reminders, and encrypted offline copies stored on your own device for up to 30 days.
- Your unique Account Token ID, monthly token usage, permanent bonus-token balance, and annual gift records. Smart Hub does not collect your PayPal password or complete payment-card details.
How we use information
- Provide accounts, authentication, servers, direct messages, uploads, reports, blocking, and other requested features.
- Deliver realtime messages and synchronize your activity across supported devices.
- Send one private Buddy greeting and award 100 permanent bonus tokens on your birthday, and award another 100 permanent bonus tokens on Christmas. Your timezone is used to determine the correct local day.
- Select birthday, global, or country-specific holiday branding using your local calendar day. Your optional country code is used only for regional branding and remains editable.
- Run Buddy when you request it, enforce token balances, spend permanent bonus tokens before monthly tokens, and provide requested summaries, answers, polls, or generated content.
- Apply safety rules, profanity filtering, rate limits, access controls, and investigate abuse or technical problems.
- Maintain, diagnose, secure, and improve Smart Hub.
- Queue and synchronize work created while offline, deliver scheduled messages and reminders, provide passkey and trusted-device security, and verify eligible Apple in-app purchases.
Buddy and AI processing
Buddy processes the prompt and only the conversation, server content, or documents required for the action you request and that you are permitted to access. AI output may be inaccurate, so important results should be checked.
If you add a supported third-party AI API key, it is stored encrypted on the backend and used only for your requested Buddy actions. Server-owner keys are used only for that server. Your prompts and relevant context may be sent to the AI provider you selected and are then subject to that provider’s privacy terms. Do not submit a ChatGPT Plus or Claude subscription password; only supported developer API keys should be used.
Voice transcription is never automatic. If you select Transcribe, the minimum required audio is sent to the configured transcription provider. Encrypted voice messages require processing on an approved device rather than server-side transcription.
Storage and service providers
Smart Hub uses Cloudflare infrastructure. Account, birthday lock, gift, token-ledger, and chat records may be stored in Cloudflare D1, realtime chat may use Durable Objects and WebSockets, private uploads may be stored in Cloudflare R2, and Buddy or requested transcription may use Cloudflare Workers AI. Google and Apple provide sign-in. Apple processes iPhone token purchases through StoreKit. PayPal separately processes voluntary donations and eligible purchases outside the iPhone app.
These providers process information under their own terms and privacy policies. Information may be processed in countries other than where you live.
Sharing and visibility
Messages and profile information are visible to the people and servers you choose to interact with. Public servers and their directory information may be visible to people browsing Smart Hub. Private-server content is limited to authorized members.
Reports are delivered to the relevant server owner for investigation without identifying the reporting user to that owner. Smart Hub may disclose information when required by law, to protect users or the service, or during a business transfer. Smart Hub does not sell personal information.
Retention and deletion
Information is kept while needed to provide Smart Hub, meet security or legal obligations, resolve disputes, and enforce agreements. Session cookies expire after 24 hours. Encrypted offline history is retained on the device for up to 30 days and can be cleared sooner. Your locked birthday, timezone, optional country code, token balance, annual gift ledger, recovery records, and Account Token ID are deleted with your account. Purchase records may be retained as required for fraud prevention, refunds, tax, or law.
Messages shared with others may remain where necessary for conversation history, server moderation, safety, or legal compliance. Uploaded documents may be retained while connected to active content or processing and then removed according to service operations.
Your choices and rights
- Edit your Smart Hub profile and presence preferences.
- Review your birthday before confirming it. After confirmation it cannot be changed. You may still edit or clear your optional regional-branding country choice and choose whether iPhone seasonal Home Screen icons are enabled.
- Control eligible direct messages, block or unblock users, and leave servers you do not own.
- Remove a saved third-party AI API key.
- Request access, correction, or deletion where applicable law provides those rights.
- Sign out to revoke the current session.
- Review and revoke signed-in devices, add or remove passkeys, generate an encrypted-history recovery code, clear offline data, and inspect a diagnostic report before sending it.
Children’s privacy
Smart Hub is not intended for anyone who is below the minimum age required to consent to an online service in their location without authorization from a parent or guardian. Google account and app-store age requirements also apply. If Smart Hub learns that personal information was collected from a child contrary to applicable requirements, reasonable steps will be taken to delete it.
Security
Smart Hub uses safeguards including hashed session tokens, passkeys, trusted-device approval, local encrypted storage, access checks, encrypted storage for supported API keys, private file access, origin validation, and rate limiting. End-to-end encryption protects supported message content, but membership, timestamps, delivery metadata, reports, and content explicitly shared with Buddy remain server-processed. No online service can guarantee absolute security.
Changes and contact
This policy may change as Smart Hub develops. Material updates will be published on this page with a new effective date. For privacy questions or requests, contact the Smart Hub operator using the current contact information published at arjunrao.dev.