Hermes Privacy Policy

Effective date: July 14, 2026

Hermes is operated by Promptbox. This policy explains how the Hermes iOS app handles information when a user connects the app to a Hermes server that the user selects and controls.

Server configuration

The app stores the user-provided server address, port, and certificate SHA-256 fingerprint in local app preferences. The bearer password is stored in iOS Keychain. These settings are used to connect directly to the configured Hermes server and are not compiled into the app.

Conversations and attachments

Messages, recent conversation context, session identifiers, and user-selected image or text attachments are sent directly to the configured Hermes server to provide responses. The app stores a limited local conversation history on the phone so conversations remain visible between launches. Local history can be cleared in Settings.

The configured Hermes server may have access to tools, files, memory, and other services installed by its owner. Storage, logging, model-provider processing, and deletion on that server are controlled by the server owner, not by the iOS app or Promptbox. Users should connect only to a server they trust.

Microphone and voice services

When the user dictates or sends an audio attachment, the selected recording is sent to a Promptbox transcription service at promptbox.cn. The returned transcript is then sent to the configured Hermes server as the user's message. When Voice Replies is enabled, response text is sent to a Promptbox text-to-speech service to generate playback audio.

Promptbox and service providers used to fulfill transcription or speech requests process the submitted audio or text to return the requested result. Promptbox may retain limited request metadata and operational error or security logs as reasonably necessary to run and protect these services. The app does not activate the microphone unless the user initiates recording.

Photos and files

The app accesses only photos and files the user selects through Apple's system pickers. Selected content is sent to the configured Hermes server when the user sends the message. Selecting content does not give the app unrestricted access to the user's photo library or files.

Face ID

Face ID is used to lock access to the app. Biometric matching is performed by iOS. Hermes receives only the authentication result and does not receive or store facial images, face geometry, biometric templates, or other Face ID data.

Data collection and tracking

The app does not include advertising SDKs, third-party analytics, or cross-app tracking. Promptbox does not sell server settings, messages, attachments, audio, transcripts, or biometric information.

Retention and deletion

Local conversation history and preferences remain on the phone until the user clears them or removes the app. Clearing Server Information removes the address, port, fingerprint, and Keychain password from the phone after confirmation. Removing local data from the app does not delete copies retained by the configured Hermes server, its model providers, or other services selected by the server owner.

Security

The app requires HTTPS for Hermes requests, validates that the server host and port match the user's saved configuration, and pins the leaf certificate to the saved SHA-256 fingerprint. The bearer password is sent in the Authorization header. Users are responsible for protecting their password, maintaining the configured server, and updating the fingerprint after certificate replacement.

Children

Hermes is not intended for children under 13 and Promptbox does not knowingly collect personal information from children through the app.

User choices

Users can decline microphone or photo permissions, avoid attachments, turn off Voice Replies, clear local history, clear server information, or remove the app. Users should contact the owner of their configured Hermes server to request deletion of information stored by that server.

Contact

Questions, support requests, or privacy requests can be sent to adam3056712@gmail.com.