Last updated: March 25, 2026
Responsible for data processing on this website and within the browser extension:
Jasper Schmidt
Email: hello@hyphos.app
A user account is required to use hyphOS. We collect:
Legal basis: Art. 6 (1) (b) GDPR (Performance of a contract).
Retention period: Until account deletion upon request.
When you create memos or save AI analyses, the following data is processed:
Legal basis: Art. 6 (1) (b) GDPR (Performance of a contract).
Retention period: Until deleted by you or upon account deletion request.
When you explicitly trigger an AI function (e.g., "Summarize"), the text content of the current page is transmitted to our servers and forwarded to the Google Gemini API (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Legal basis: Art. 6 (1) (b) GDPR (Performance of a contract).
The optional "Research Path" feature, when enabled, collects:
Legal basis: Art. 6 (1) (b) GDPR (Performance of a contract).
Retention period: Until manually deleted by you or upon account deletion.
When you enable Cloud Sync, your memos are encrypted locally with AES-256-GCM before transmission and stored at Supabase (Supabase Inc., 970 Toa Payoh North, Singapore). We do not read your memos.
Legal basis: Art. 6 (1) (a) GDPR (Consent via enabling Cloud Sync).
Retention period: Until Cloud Sync is disabled or the account is deleted.
To ensure service quality and operate the credit system, we collect server-side:
This data is stored exclusively in our Supabase database and never shared with third parties.
Legal basis: Art. 6 (1) (b) GDPR (Performance of a contract).
Retention period: Until account deletion.
The extension requires the following permissions:
| Permission | Purpose | Data Transmission |
|---|---|---|
storage / unlimitedStorage |
Local storage of memos, settings, and Research Path data | No (local) |
tabs |
Session Manager: view, group, and close open tabs | No |
activeTab |
Extract text from active page for AI analysis (only on user action) | Only during AI analysis |
contextMenus |
Right-click menu: "Save as Memo" and "Explain with AI" | No |
webNavigation |
Research Path: track page visits for research trail | Local, optional cloud |
host_permissions |
Display sidebar on all websites (universal research tool) | No |
The extension does not collect data from the following categories of sites:
We do not use tracking tools such as Google Analytics, Facebook Pixel, or similar services.
Subscriptions are processed via Lemon Squeezy (Lemon Squeezy, LLC). Payment data is processed exclusively by Lemon Squeezy. We only receive a purchase confirmation and your email address to activate your subscription.
Legal basis: Art. 6 (1) (b) GDPR (Performance of a contract).
Processing by Google (AI API), Supabase (database), and Lemon Squeezy (payments) may involve transfer to the United States. All providers are either certified under the EU-U.S. Data Privacy Framework or use EU Standard Contractual Clauses (Art. 46 GDPR) to ensure an adequate level of data protection.
Under the GDPR, you have the following rights:
To exercise your rights, contact us at: hello@hyphos.app
For complete account deletion including all stored data, please contact us at the same address.
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR). If you are located in the EU, you may contact the supervisory authority of your country of residence.