Privacy Policy

Account information. When you create an account we collect your email address and a hashed password. We never store your password in plain text. Account creation and account email changes currently do not require email verification, and we do not send signup or email-confirmation messages as part of those flows.

Recovery information. When you create an account we generate a one-time 16-word recovery phrase and show it to you once. We store only a cryptographic hash of that phrase so it can be used to help recover access to your account later. We do not store the recovery phrase itself in plain text.

Subscription and billing. Payment is processed by Stripe. We store a record of your subscription status and plan. We do not store full card numbers or sensitive financial data — those remain with Stripe. Refund requests are handled directly by us via email at support@hov3r.app and are not processed through Stripe's dispute or refund system.

Usage data. We may collect limited, anonymised information about how you interact with the Service (e.g. feature usage, crash reports). This data does not identify you personally.

Device and network information. When you sign up, our servers may log your IP address for abuse prevention and rate limiting. We do not build profiles from IP addresses.

Communications. If you contact us by email we retain the content of that correspondence to assist you.

Permissions-based feature data. If you enable voice-triggered shortcuts, Hover requests microphone and speech recognition access on your Mac and processes detected phrases locally on-device to match the wake words you set. If you enable keyboard shortcuts or automation features, Hover may use macOS accessibility or input-monitoring permissions so it can detect your configured global shortcuts and execute actions. We do not send microphone audio, recognized phrases, or captured keystrokes to our servers.

• To create and manage your account and subscription.
• To generate, hash, and verify your 16-word recovery phrase for account recovery.
• To support optional app features such as wake-word shortcuts, microphone-based trigger detection, and global keyboard shortcuts.
• To detect and prevent fraud, abuse, or violations of our Terms of Service.
• To respond to support requests.
• To improve the reliability and performance of the Service.
• To comply with legal obligations.

We do not sell your personal data. We do not use your data to serve third-party advertising.

We share your information only in the following limited circumstances:

• Service providers — companies that help us operate the Service (e.g. Supabase for database and authentication, Stripe for payments). These providers act as data processors on our behalf and are contractually bound to protect your data.
• Legal compliance — if required by law, court order, or a valid governmental request.
• Business transfer — in the event of a merger, acquisition, or sale of assets, your data may transfer to the successor entity. We will notify you in advance.
• With your consent — any other sharing we will ask for your explicit permission first.

We retain your account data for as long as your account is active or as needed to provide the Service.

Account deletion. You can delete your account from your account settings page. Any active subscription or free trial must be cancelled before a deletion request can be submitted. After confirming with your password, your account enters a 24-hour grace period during which you can cancel the request. Once the grace period expires, we permanently delete your account credentials, device activation records, and associated billing data. Your Stripe subscription (if any) is cancelled at the same time.

We retain anonymised audit logs (action type, timestamp, IP address) for up to 90 days after deletion for fraud prevention and legal compliance. These logs do not contain your email address or other directly identifying information after your account is removed. We may also retain data we are legally required to keep beyond that period.

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — request that we delete your personal data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to certain types of processing (e.g. direct marketing).
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at support@hov3r.app. We will respond within 30 days.

Hover may request certain macOS permissions only when you enable related features.

• Microphone and Speech Recognition — used for optional wake-word shortcuts you configure in the app. Audio is processed locally on your device for phrase detection.
• Accessibility and Input Monitoring — used for optional automation features and global keyboard shortcuts so Hover can detect configured shortcut presses and control supported actions.
• Apple Events — used when you explicitly configure shortcut actions that open or control other applications.

You can revoke these permissions at any time in macOS System Settings. Disabling them may prevent the related Hover features from working.