Privacy Policy

Hyplr is an app for Mac that finds bills, deliveries and deadlines in your files and mail. This policy explains what Hyplr does with your information, and what information reaches us, Digitaleria S.L.

1. The short version

• Hyplr reads your files, Apple Mail and Gmail on your Mac.
• Hyplr keeps what it understood (amounts, dates, senders, subjects), never copies of documents or email bodies. It keeps them on your Mac, encrypted, with the key in your Mac’s keychain.
• Your Gmail goes from Google straight to your Mac; our servers never see it or your sign-in.
• Hyplr can’t change, delete or send your mail.
• Hyplr connects to the internet for Gmail, to check for updates and your license, and — only if you turn it on — to send a weekly usage record. It never sends your files, your mail or what it found in them.
• We don’t sell your information, we don’t show ads, and we don’t use your data to train AI models.

2. Who we are

Hyplr is made by DIGITALERIA S.L. (“we”, “us”), a company registered in Spain (Registro Mercantil de Valencia; tax ID (NIF) B13942461), with its registered office at Calle Centelles 30, 46006 Valencia, Spain. Write to us at support@hyplr.com.

We are the controller — the one responsible under data protection law — for the information that reaches us (section 7). What Hyplr finds stays on your Mac, under your control: we never receive it, so we don’t handle it, for ourselves or for you.

3. What Hyplr reads, on your Mac

Files. Your Desktop, Documents and Downloads (and your screenshots folder, if it’s somewhere else), and folders you add — each only after you allow it. Hyplr never reads or keeps code projects, app libraries or app folders. Files kept in iCloud but not on your Mac aren’t downloaded; Hyplr sees only their name, size and dates.

Hyplr doesn’t move, rename or delete your files. The one exception is Tidy up, which runs only when you start it: after you’ve seen and approved a preview, it moves loose bills, orders and contracts from your Desktop, Downloads and screenshots folder into Documents › Hyplr, adding a number to a file’s name only when that name is already taken there. It never deletes a file or moves one to the Trash, and Undo puts files back where they were.

Apple Mail. New mail reaches Hyplr through Mail’s own extension, which you turn on in Mail › Settings › Extensions. Older mail, from the last 90 days, is read only if you choose to add it, from the mail you point Hyplr to. An optional deep mode, with Full Disk Access, reads every mailbox, read-only. When Hyplr isn’t running, the extension holds new messages in a queue on your Mac — each one encrypted, deleted as soon as Hyplr has read it, and all of it gone within 72 hours.

Gmail. Only if you connect a Gmail account. Section 5 covers it in full.

How Hyplr reads. Everything happens on your Mac: the text in PDFs, text recognition for scans and screenshots, and Apple Intelligence. Hyplr uses Apple’s on-device model, never Apple’s cloud: see Privacy & Security › Apple Intelligence Report. Hyplr never loads images or other remote content inside emails.

4. What Hyplr keeps on your Mac

Hyplr keeps what it understood (amounts, dates, senders, subjects), never copies of documents or email bodies. In detail:

• For the files and emails behind a bill, a delivery or a contract: the file’s name or the email’s subject, the sender, the date, and what Hyplr found in them — amounts, due dates, invoice and order numbers, tracking numbers, the supplier’s name and bank details.
• For every other file and email: only an ID, the type, the size and dates — and, for an email, its sender — so Hyplr doesn’t read it twice.
• Your decisions, such as “not a bill” or “ignore this sender”.
• A record of what you opened in Hyplr, for 90 days.
• Your own names, tax IDs and bank details only in a scrambled form that Hyplr can compare against but can’t turn back into the original. Card numbers are never kept.

Hyplr doesn’t keep the text of your documents, email bodies, attachments or thumbnails. The one exception is the Apple Mail queue in section 3.

All of it is encrypted on this Mac, with the key in this Mac’s keychain, and kept out of Spotlight. Hyplr leaves the part it can rebuild out of your backups; your decisions are backed up. Copies in your backups follow your backup schedule.

Hyplr’s notifications show counts, never amounts or names.

5. Gmail

This section is about the information Hyplr gets from Google (“Google user data”). Google asks us to describe it on its own.

What Hyplr asks for. When you connect a Gmail account, Google asks you to let Hyplr “View your email messages and settings”, in Google’s words. This is Google’s read-only Gmail permission, gmail.readonly. Hyplr asks for nothing else.

What Hyplr accesses, and why:

• the list of your messages from the last 90 days, then new messages as they arrive — to find the ones that matter;
• message headers: sender, recipients, subject, date, the message ID, and the checks that show whether the sender’s address is genuine — to tell a real supplier from an impostor;
• the text and attachments of every message of the last 90 days, and of each new one, likely bills, receipts, payment confirmations and delivery notices first — because amounts, due dates, invoice numbers and tracking numbers are in the text and in the attached PDF;
• your Gmail address — to show which account is connected.

Hyplr skips Spam, Trash and Drafts. Hyplr can’t change, delete or send your mail.

How Hyplr uses it. To show you bills to pay, deliveries and deadlines; to link each one to the emails and files it came from; and to close a bill when its payment confirmation arrives. For nothing else.

Where it goes. Your Gmail goes from Google straight to your Mac; our servers never see it or your sign-in. You sign in on Google’s own page, so Hyplr never sees your Google password. Hyplr keeps your sign-in only in this Mac’s keychain.

What Hyplr stores from Gmail. What section 4 lists, on your Mac, encrypted: for the emails behind a card, the sender, the subject, the date, Gmail’s ID for the message, and what Hyplr found in it. Never the message itself or its attachments.

Sharing. Hyplr shares your Gmail data with no one. We don’t receive it, so no one at Digitaleria S.L. can read it. Hyplr doesn’t transfer it, use it for ads, sell it, use it to judge credit, or use it to train or improve AI models. The weekly usage record, if you turn it on (section 6), holds only counts of what you tap in Hyplr — nothing from your messages.

Google’s Limited Use requirements. Hyplr’s use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. In the words Google sets for Gmail: “The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.”

Disconnecting Gmail.

• In Hyplr: Settings › Sources › your Gmail account › Sign Out…. Hyplr removes its access at Google and forgets what came only from that account. Google removes the access for every copy of Hyplr, so this also disconnects that account in Hyplr on your other Macs. If your Mac is offline, Hyplr removes its access when it’s back online; it doesn’t read that account again in the meantime.
• At Google: remove Hyplr from the apps with access to your Google Account (myaccount.google.com/permissions). Hyplr then can’t read your Gmail. What it already found stays on your Mac until you sign out in Hyplr or use Forget Everything.
• If your free week or your plan ends, Hyplr stops contacting Google until you choose a plan.

Step by step, with what each way deletes: hyplr.com/delete-your-data.

6. What connects to the internet, and what it sends

Google. To sign you in and download your Gmail, Hyplr connects to Google. Google sees these requests — for example, which messages to download — and handles them under its own privacy policy.

Updates. Hyplr asks our update server whether a new version exists. Like any request on the internet, it shows your IP address; it also carries Hyplr’s version number, and nothing else about your Mac. Every update is checked against Hyplr’s signature before it’s installed. You can turn automatic checks on or off in Settings › General.

Buying, and your license. You pay on a checkout page run by Stripe, our payment provider, in your browser. To open it, Hyplr asks our license server for a checkout with the plan and currency you chose, a random install ID and — if you still have free days — the day billing should start; the page’s address carries none of your information. Stripe collects your email address, your country (and your postcode where a tax needs it) and your payment details, and handles them under its own privacy policy. Stripe passes us your email address, your country, the plan, the price and tax paid, whether the payment went through, and its own IDs for you and the purchase — for your receipt and invoice, taxes, refunds and sending your key again. We never receive your full card number. Stripe sends your receipt; we send your license key by email through Zoho ZeptoMail, in its EU data centre. If you ask for your key again on hyplr.com, we look the address up at Stripe and send the key only to that address; the page answers the same whether or not that address bought Hyplr.

To check your license, Hyplr sends our license server a signed license token and a random install ID, nothing else. When you activate Hyplr with your key, it sends the key you entered and that install ID. Hyplr checks the token on your Mac, so it keeps working offline until the end of your paid period plus 14 days. The install ID exists for your license only: it isn’t the one in the weekly usage record, and the two are never sent together.

The weekly usage record — off unless you turn it on. If you switch on Settings › Privacy › Share a weekly usage record, Hyplr sends, once a week, how often you open Hyplr and what you tap, in rough ranges — never amounts, names or counts of bills. It goes with a random install ID that you can reset, and isn’t linked to your license. Settings › Privacy shows the exact record, as it would be sent, even while sharing is off. Our server keeps each record for 13 months and doesn’t keep IP addresses.

Crash reports. Hyplr has no crash-reporting service and sends us no crash reports. If you write to support about a problem, we may ask for a diagnostics file: Hyplr makes it on your Mac and shows it to you in full — versions, counts and error codes, never names, amounts or paths — and you decide whether to attach it to your email.

Links. When you open a bill, an email, checkout or a help page from Hyplr, it opens in the app or website it belongs to. Hyplr puts none of your content in those links.

7. What we receive

• For purchases, from Stripe: your email address, your country (and postcode where a tax needs it), the plan, the price and tax paid, whether the payment went through, and Stripe’s IDs for you and the purchase — never your full card number (section 6).
• On our license server: for each license, its ID, the plan, its state, the date it’s paid through and Stripe’s IDs; for each Mac it’s active on, a scrambled form of the random install ID, the day it was activated and the day it last checked in. No email address, name, card details, IP address or Mac name.
• To email your license key: your email address reaches Zoho ZeptoMail, our email service, to send that email; we don’t keep it. ZeptoMail keeps a log of each email it sends for 60 days, without its content.
• Usage records, only if you turn them on (section 6).
• Your emails to us, if you write to support@hyplr.com: your address and what you write. We’ll never ask you to send your documents or emails.
• Visits to hyplr.com, and downloads. hyplr.com sets no cookies and loads no trackers, and we run no analytics on it. We see only totals: how people find hyplr.com in Google Search (Google Search Console’s figures), and how many times each version of Hyplr was downloaded each day. Cloudflare hosts hyplr.com, our downloads, and our update and license servers. To deliver them and protect them from attacks, Cloudflare handles each request, including your IP address. It doesn’t keep a log of every request for us; it keeps traffic statistics, and a record of the requests its security checks flag or block — with their IP address, browser and country — which we can see for up to 31 days. How long Cloudflare keeps its own logs of these requests is set by its privacy policy (cloudflare.com/privacypolicy), which names no fixed period.

We never receive your files, your mail, or anything Hyplr found in them.

8. What Hyplr never does

• Sell your information, or share it for advertising.
• Show ads.
• Use your files, your mail or anything it found to train or improve AI models.
• Change, delete or send your mail.
• Pay anything, or open links found in your mail for you.
• Use your data to judge your credit, or for lending.
• Let anyone at Digitaleria S.L. read your files or mail.

9. How long things are kept, and how to delete them

On your Mac, Hyplr keeps what it found until you remove it:

• Remove a folder in Settings › Sources: Hyplr forgets what came only from that folder.
• Remove an Apple Mail address in Settings › Sources: Hyplr stops reading mail sent to that address and forgets what it found only there. Your mail stays in Mail.
• Sign Out of a Gmail account: section 5.
• Forget Everything, in Settings › Privacy, removes everything Hyplr found and your decisions, signs you out of Gmail — Hyplr’s access at Google is removed, on all your Macs; if your Mac is offline, when it’s back online — and clears mail waiting to be read and Hyplr’s notifications. Your files and mail stay untouched. Forget everything removes it all from Hyplr. Copies in your backups follow your backup schedule. Two things stay on this Mac: your license, if you have one, and the date this Mac’s free week started, with whether its free Tidy up was used — so the free week and the free Tidy up aren’t offered again.
• Removing Hyplr: use Forget Everything first, with “Also move Hyplr to the Trash” selected. It also deactivates your license on this Mac, so you can use it on another one; the date this Mac’s free week started stays in its keychain. If you only drag Hyplr to the Trash, its encrypted data folder stays on your Mac, and Google keeps Hyplr’s access until you remove it in your Google Account. Google also ends access that hasn’t been used for six months.
• Hyplr’s record of what you opened is kept for 90 days; the Apple Mail queue for at most 72 hours.

On our side:

• license records on our license server: while the license can be used, then 90 days after it ends (a Deep review doesn’t end); a Mac’s record, until it’s deactivated or its license record goes;
• which payment events from Stripe we’ve already handled (only Stripe’s event IDs): 30 days;
• purchase records — in Stripe and in our accounts — for six years, as Spanish law requires of a company’s records;
• the log of each license-key email, at Zoho ZeptoMail: 60 days;
• usage records, if you turned them on: 13 months;
• your emails to us: two years after our last exchange, or longer when a purchase or a legal claim needs them;
• visits and downloads: no logs of ours; Cloudflare as section 7 says.

Step by step, with what each way deletes: hyplr.com/delete-your-data.

10. Your rights

What stays on your Mac is yours to control: you see it in Hyplr, correct it with Fix…, and delete it as section 9 explains. We can’t see it, so we can’t hand it over or delete it for you.

For the information we hold (section 7), you can ask us at support@hyplr.com to tell you what we have, correct it, delete it, or stop using it. For a usage record, send us the install ID shown in Settings › Privacy — without it we can’t tell which record is yours. We’ll answer within one month. If you ask us to delete the records of a license that’s still in use, that license ends: Hyplr can’t check it any more, and pauses on your Macs. Purchase records stay for as long as the law requires, even after you ask us to delete them.

If you’re in the EU, the EEA or the UK: you can also ask for a copy of your data in a portable form, object to how we use it, restrict it, and withdraw consent at any time. You can complain to the data protection authority where you live, or to ours, Spain’s Agencia Española de Protección de Datos (aepd.es). Our legal bases:

Who helps us. Stripe (payments), Cloudflare (our website, downloads, and update and license servers), and Zoho (our support mail, and ZeptoMail for license keys, both in Zoho’s EU data centre) handle information for us, only to provide their service. Stripe and Cloudflare are US companies: where your information leaves the EEA, the transfer is protected by the EU–US Data Privacy Framework, under which both are certified, or by the European Commission’s standard contractual clauses.

If you’re in California or another US state with a privacy law: you can ask to know, correct and delete the personal information we hold. We don’t sell or share personal information as those laws define it, and we don’t use sensitive personal information to infer anything about you. Using these rights never changes the service you get. You may ask through an authorized agent.

11. Children

Hyplr is meant for adults: you must be 18 or older to use it. We don’t knowingly collect information from anyone younger. If you think a child has written to us, tell us and we’ll delete it.

12. How Hyplr protects your information

• What Hyplr found is encrypted on this Mac, with the key in this Mac’s keychain.
• Your Gmail sign-in stays in this Mac’s keychain.
• Hyplr’s connections to Google and to our servers are encrypted (HTTPS). As with Gmail in a browser, a network set up to inspect encrypted traffic — common on company Macs — can see what passes through it.
• Hyplr installs only updates signed by Digitaleria S.L.
• Hyplr’s logs carry counts and error codes, never names, subjects, senders or amounts.
• If a breach of the information we hold puts your rights at risk, we tell Spain’s data protection authority within 72 hours of learning of it, and we tell you without undue delay when the risk to you is high.

13. Changes to this policy, and its languages

We’ll post every change on this page with a new effective date. If a change matters — and always before Hyplr uses Gmail data in a new way — Hyplr will tell you in the app and ask you to agree first.

This policy is published in English and in Spanish. Both say the same; if they ever differ, the version more favorable to you applies.

14. Contact

DIGITALERIA S.L., Calle Centelles 30, 46006 Valencia, Spain · support@hyplr.com

Google and Gmail are trademarks of Google LLC. Apple, Mac, macOS and Apple Intelligence are trademarks of Apple Inc., registered in the U.S. and other countries and regions.