Privacy Policy
Last updated: 2 November 2026
This Privacy Policy applies to Hermes Chat, also listed as “World History AI Tutor Chat” (App Store ID 6447547239), and its AI and support services. The operator and data controller is Remione LTD, 75 Leontiou Machaira, Centre, Office 102, Limassol 3025, Cyprus. Alexey Strokin is the App Store publisher acting on behalf of Remione LTD. A provider may separately act as controller for its own services, such as Apple's transactions.
For privacy questions, withdrawal or deletion requests, email info@remione.ltd. App support is available at support.team@hermeschat.app. Please identify the app as Hermes Chat or World History AI Tutor Chat.
Hermes offers educational conversations with AI simulations of historical figures, character discovery, learning prompts, interests and local chat history. You do not create a separate registered Hermes account. Installation identifiers, chat content and purchase profiles can nevertheless be personal data.
Before sending a message: the current conversation history, selected character/topic instructions and an installation identifier are sent through our backend to OpenAI. Chat history can also be copied to your Apple iCloud storage when available. Deleting local history does not reliably erase all cloud copies or provider records. Reading this policy or buying a subscription does not replace separate consent where required.
1. Information processed and its purposes
- Conversations: messages you write, AI replies, message identifiers and dates, selected historical characters and topic constraints are stored in the app's local database and processed to provide chat, learning actions and history. A request can include the whole current thread, not just the latest message. Text can contain personal information if you include it.
- Interests and preferences: choices about science, art, historical periods, cultures and languages personalize discovery and learning. They are saved locally and are also sent as installation-linked user properties to the configured analytics services. Editing a preference locally does not necessarily delete its earlier analytics record.
- Installation and technical information: installation/app-instance and SDK identifiers, device and operating-system information, app version, language, time zone, IP address and connection information are processed for delivery, configuration, diagnostics, purchases, security and measurement. Providers may infer a general region from an IP address. Hermes does not request GPS/location access for its chat features.
- Usage, advertising measurement and diagnostics: launches, sessions, screens, character/topic selections, learning actions, message counts, errors, performance, paywall and purchase events help us understand app use, improve the service and measure marketing. Events can be associated with an installation or SDK profile. Advertising identifiers and cross-app tracking require applicable platform permissions and legal consent; a pseudonymous identifier is not automatically anonymous.
- Purchases: Apple and RevenueCat process product and transaction identifiers, receipt/transaction information, purchase and renewal dates, price/currency, trials, subscription status and entitlements for payment administration, restoration and measurement. RevenueCat's profile is associated with the app's installation identifier. We do not receive your full payment-card number from Apple.
- Security and notifications: Firebase App Check and Apple's App Attest or DeviceCheck can process app/device attestation information to establish app authenticity. Apple and Firebase also process notification tokens and delivery information. Backend rate limiting uses request counters and a hashed network address; hashing alone does not make that address anonymous.
- Support and diagnostic reports: email provides your address, message and attachments. The current fallback contact form inside the app sends the entered message as an analytics event to configured analytics services. For confidential support or privacy requests, use the email addresses above. Optional diagnostic-report attachments can include local logs and a copy of the app database, including conversations and interests; review them before sending.
2. How AI conversations work
When you send a message, a suggested question or a learning action such as “Explain simpler”, “Make a timeline” or “Quiz me”, Hermes sends the conversation's messages and roles, character instructions, selected topic constraints, generation settings and your installation identifier to our HTTPS backend. The backend forwards the request to OpenAI to generate an answer and returns it to your device. The identifier is included in the AI request as a user reference. Hermes' chat feature processes text conversations.
The current backend handles requests and responses rather than maintaining a personal server-side chat-history account. Its application request logs record operational fields such as request IDs, route, status and timing rather than conversation bodies. This does not mean that conversations never leave the device or that all services have zero retention. Local app diagnostics, voluntarily sent reports and provider-side processing have separate scopes and retention.
OpenAI states that API data is not used to train its models by default unless the API customer opts in. Its standard abuse-monitoring logs can include inputs and outputs and are generally retained for up to 30 days, with legal and safety exceptions. Additional feature-specific processing can apply. See OpenAI API data controls and OpenAI's Privacy Policy. We do not claim a zero-retention arrangement for Hermes.
Do not send passwords, payment-card details, private documents or sensitive information that is unnecessary for a historical conversation. Only include another person's information if you have the right and any necessary permission to do so. We do not publish your private conversations in a public feed or grant ourselves a right to advertise with them through this policy.
The current version does not provide a separate in-app control for consenting to or withdrawing from OpenAI sharing. Accepting the Terms, starting a subscription or reading this notice is not a substitute for explicit permission where required. To avoid new AI transmissions, do not send messages, suggested questions or learning actions. Previous requests and records are addressed through the rights and deletion process below.
3. Local history and iCloud
Chats, saved messages, character information and interest preferences are stored in a local database. Where the app's iCloud container is available, Hermes can automatically copy that database to your Apple iCloud storage when the app becomes inactive and restore an available copy when it becomes active. This operates through Apple, independently of our AI backend, and is subject to your Apple Account and iCloud settings.
The current sync implementation does not propagate an empty local history as deletion of the existing iCloud copy. As a result, clearing all chats locally or reinstalling can leave an older cloud database available to restore. Resetting one conversation also does not constitute a verified erasure of every underlying database record. Do not treat these actions as a request to erase data from all services.
Use the available iCloud controls in your Apple device settings to manage or remove Hermes iCloud data, and manage other device backups separately. Disabling future sync does not by itself prove that an existing cloud copy has been deleted. Contact support if you need help locating these controls. We cannot sign in to or delete data from your personal Apple Account for you.
4. Service providers and other recipients
The services below receive information relevant to their roles; the precise collection depends on the feature, version, configuration and applicable permissions:
- Apple: App Store purchases, restoration, iCloud/database storage, device backups, notifications and app/device attestation — Apple Privacy Policy.
- Google Firebase / Google Cloud: backend infrastructure, catalog resources, Remote Config, Analytics, Crashlytics, Cloud Messaging, App Check and rate-limit storage — Firebase privacy and security information and Google Cloud Privacy Notice.
- OpenAI: generation of chat answers, using the content and identifier described in section 2.
- RevenueCat: purchase profiles, subscriptions, entitlements and restoration — RevenueCat Privacy Policy.
- Amplitude: product analytics, events, sessions and interest/profile properties — Amplitude Privacy Notice.
- Meta / Facebook: app events and advertising measurement or attribution — Meta Privacy Policy.
We require providers processing user data on our behalf to limit use to agreed purposes, protect confidentiality and security, and provide protection at least equivalent to this policy and applicable Apple requirements. Their notices do not remove our responsibility for the app's processing and choices.
We may disclose necessary information to comply with law, protect rights, investigate abuse, obtain professional advice or complete a business transfer with applicable safeguards. When you copy or share a reply through another service, that recipient processes the copy under its own terms. We do not sell personal data for money; advertising-measurement disclosures may still fall within legal definitions of sale, sharing or targeted advertising, and the relevant opt-out and consent rights apply.
5. Purposes, legal bases and choices
Where GDPR or similar law applies, necessary service delivery, purchases and requested support rely on performance of our contract or steps you request. Proportionate security, abuse prevention and reliability work may rely on legitimate interests, subject to your rights. Required records and lawful disclosures rely on legal obligations. Where consent is required for analytics, tracking, device access or sharing personal data with AI, it must be obtained for that purpose and can be withdrawn. A contract or legitimate interest does not override a consent requirement.
Providing chat content and interests is your choice. The AI feature needs the content you send to produce a contextual response; information for a support request must be sufficient to address it. We do not use AI answers to make solely automated decisions about you that produce legal or similarly significant effects.
- Notifications: you may decline the system prompt or change notification display in iOS Settings. Lock-screen visibility depends on your settings.
- Tracking: Apple's App Tracking Transparency permission is required where applicable for tracking across other companies' apps or websites and access to the advertising identifier. Available controls are under Settings → Privacy & Security → Tracking. ATT does not disable every diagnostic or analytics service.
- Analytics and consent: the current App Store configuration starts analytics services and does not offer a single in-app switch to disable all collection. Contact info@remione.ltd to withdraw consent, object or request deletion. Sending that request does not itself turn off networking on the device. To prevent further transmissions while it is addressed, stop using the app or disconnect it from the network; online features will be unavailable. This limitation does not replace required technical consent controls.
- Interests and history: you can edit interests and use the chat-history controls. They affect local content and do not necessarily erase earlier analytics, AI or iCloud records. See section 3.
Declining optional tracking or unrelated permissions must not remove purchased features that do not require those permissions. Withdrawing consent does not affect earlier lawful processing or cancel a subscription.
6. Retention and deletion requests
- Local data: conversations and preferences remain until removed or the app's local container is deleted. Clear All Chats currently clears the local database, which also holds profile/preferences. A per-chat reset is not a secure deletion tool for every saved message. Offloading can preserve app data. Exported copies, caches and backups have separate lifetimes.
- iCloud: the database copy can remain in your iCloud storage after local deletion; manage that copy separately as described above. Reinstallation is not a reliable cloud-erasure method.
- Installation identifiers: device storage and Keychain hold an installation identifier. Keychain values may survive reinstallation; uninstalling is not a reliable request to delete analytics or subscription profiles.
- AI records: provider retention follows the applicable arrangements described in section 2. Removing a local reply does not remove a previously submitted request or OpenAI's abuse-monitoring records.
- Operational records: backend logs are retained according to infrastructure settings and the period needed for operation, security and investigation. Rate-limit records have expiry timestamps approximately one day after the short rate-limit window, with asynchronous cleanup; this is not a promise that all data disappears at an exact time.
- Analytics, diagnostics and support: retention depends on the relevant provider configuration and how long the information is needed to analyze use, diagnose a problem, resolve a request or address a dispute. We review necessity, delete or de-identify information no longer needed, and apply valid rights requests.
- Purchase and legal records: information needed to administer/restore entitlements, resolve transaction disputes or meet legal recordkeeping obligations can remain after other data is erased, limited to the applicable purpose and obligation.
To request deletion of data we control, email info@remione.ltd with “Hermes data deletion” and enough information to locate it, such as the email used for support, approximate request date or a relevant purchase reference. We may ask for proportionate verification or help locate your installation identifier. Do not send your Apple password, payment-card details or unnecessary copies of private conversations. We will address identifiable records and our processors where applicable, explaining lawful exceptions or identification limits. Protected backups may remain until expiry; irreversibly anonymized statistics may be retained.
There is no separate registered Hermes account to close. Deletion of app data does not cancel billing by Apple, and we cannot erase your Apple Account or independent records that Apple must retain.
7. Your rights
Depending on your location, you may request access, a copy, correction, deletion, restriction or portability of personal data; object to processing, including marketing; withdraw consent; and exercise applicable sale/sharing or targeted-advertising opt-outs. Contact info@remione.ltd. We do not unlawfully discriminate for exercising these rights. Under GDPR, we respond without undue delay and normally within one month, with notice and reasons if a lawful extension is needed. Other applicable statutory deadlines and appeal rights are respected.
You may complain to your local authority or the Cyprus Commissioner for Personal Data Protection without contacting us first.
8. International processing and security
Remione LTD is based in Cyprus. Cloud, AI, purchase and analytics providers may process data in the United States and other countries outside your country of residence. Transfers covered by EEA, UK or Swiss rules require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and necessary supplementary measures. Contact us for information about applicable safeguards and how to obtain a copy.
The chat endpoint uses HTTPS. Access controls and other safeguards must be appropriate to the information and risks. Conversations are readable by the backend and AI provider during processing; they are not end-to-end encrypted against those services. No system is entirely secure. Protect your device, Apple Account and diagnostic attachments.
9. Children
The service is not directed to children under 13. A higher minimum age or parental authorization may be required by local law. Hermes does not ask for a date of birth, and an App Store content rating is not consent to analytics, tracking, purchases or AI sharing. If you believe a child has supplied information without required authorization, contact us so we can investigate and take appropriate deletion or restriction steps.
10. These pages and changes
Opening a legal page sends ordinary connection information, including your IP address, to our web host. The Hermes Terms and Privacy pages can be read without an account or JavaScript and do not load the website's analytics script. Other Remione pages and external sites may have different analytics or cookie practices.
We may update this policy when practices or legal requirements change. The date above identifies this revision. Material changes require appropriate notice and fresh consent where applicable; posting a new notice or continued use does not itself authorize processing that requires separate permission. See the Hermes Terms & Conditions for service and purchase conditions.