Privacy

Beta version · Last updated 28 October 2026

Who we are

Hodi is made by Krysto Drym LLC, Lake St. Louis, Missouri, USA ("we", "us"). If you have a question about your privacy, email [email protected].

How Hodi works with your email

Hodi is an app that sits on top of the mailbox you already have, such as a business mailbox, Gmail, iCloud or Yahoo. When you sign in, Hodi connects to your email provider using the address and password (or app password) you type, and fetches your email so you can read, sort and send it.

• Your email. It stays on your provider's servers. Hodi passes it through to your screen while you use the app and doesn't store a copy on its own servers.
• Your password. It is kept only inside an encrypted cookie in your own browser, so Hodi can reach your mailbox while you are signed in. A session ends after 12 hours without use, or when you sign out. We can't read it from our side and we don't keep it anywhere else. The one exception is phone alerts, if you choose “Hodi checks for you” (see below).
• Your Hodi settings. Things like your signatures, brands, who you've let in or kept out, and two-step sign-in are saved in a folder called "Hodi" inside your own mailbox.
• Sign-in notes. To protect your account, Hodi remembers which browsers and devices you've signed in from (for example "Safari on iPhone") and can put a note in your inbox when a new one signs in. You can switch the notes off in Settings.
• Recovery email. If your mailbox is on Hodi's own server, you can add a recovery email in Settings → Security (or we add one for you when you join the beta). It is used only to send a “Forgot password?” link, good for 30 minutes and once. It is kept encrypted in Hodi's private storage at Vercel, filed under a scrambled code of your Hodi address. Remove it in Settings → Security at any time and it is deleted.

What we collect

• When you apply for the beta: the details you put in the form (name, email, business name, country and similar). The form sends them to us as an email.
• When you send feedback in Hodi: your message, which screen you were on and the kind of device. It is sent as an email from your address to [email protected].
• The Hodi Fortnight (newsletter): every other Monday Hodi puts a short newsletter into your own Inbox. Its personal parts (your numbers, what's still open, invoices and receipts) are worked out inside your mailbox from counts and subject lines; nothing personal is stored or sent to us. If you turned on “Hodi checks for you”, Hodi uses that same encrypted sign-in to put the issue in your Inbox on the day. Poll answers and “How was this issue?” taps are stored anonymously (one per person, under a scrambled code, never your address) so we can count them. If you tap “Get my invite link”, your Hodi address is kept encrypted under your invite code, so that when a friend applies through it we know who invited them. Switch the newsletter off in Settings or with the link at the bottom of each issue.
• Usage counts: anonymous counts of which pages and features are used, through Vercel Web Analytics. They use no cookies and contain no names, email addresses or email content. You can switch them off in Settings ("Share anonymous usage counts").
• Technical logs: when something goes wrong, our hosting keeps short-lived error logs (such as the time and the type of error) so we can fix it.

Phone alerts (Hodi app for iPhone and Android)

The Hodi app can buzz your phone when new email arrives from people you know. Alerts are off until you switch them on in Settings → Notifications, and each way below can be switched off at any time.

• Hodi checks for you, every minute. To look for new email while the app is closed, Hodi keeps your email address and password (or app password) on our server, encrypted (AES-256) in a private storage area at Vercel in the United States. It is used only to check your inbox for new email and is deleted at once when you switch this off, and within a minute after you sign out everywhere or change your password.
• Your mail server tells Hodi. For mailboxes on a cPanel server: a forwarder you set up sends Hodi who each new email is from and its subject. No password is kept.
• This phone checks now and then. A sealed key stays on your phone; nothing extra is kept on our server.
• To deliver an alert, Hodi keeps your phone's notification code (a random code from Apple or Google, not your phone number) and sends the alert, with the sender's name and the subject, through Apple Push Notification service or Google Firebase Cloud Messaging.
• Face ID / fingerprint lock. If you lock Hodi with Face ID, Touch ID or a fingerprint, your phone checks it. Hodi never sees or stores it.

Hodi Sign (e-signing)

When you use Hodi Sign to ask people to sign a PDF, the people signing don't use Hodi, so the document has to wait somewhere until everyone has signed. Here is what that means:

• What we keep while it's being signed: the PDF, its file name, your name and email, the names and email addresses of the people signing, your note to them, and each signer's signature (typed or drawn), the time they signed, their IP address and the kind of browser and device they used.
• Why: to show each signer the document, and to put a signing certificate at the end of the signed PDF that proves who signed, when and how.
• How it's kept: encrypted (AES-256) before it's stored, in a private storage area at Vercel in the United States. Each signer's link is unique; we keep only a fingerprint of it, not the link itself.
• How long: unsigned requests are deleted when their links expire after 30 days. Signed documents are deleted 30 days after the last signature, once the signed copy has been sent. The signed copy then lives only in your mailbox and the signers' mailboxes.
• Checking a signed document: the "Check a signed document" page works out the PDF's fingerprint in your browser and sends only that fingerprint, never the document.

AI features

Hodi uses AI from Anthropic, the company that makes the Claude AI, to help with your email. Most AI features run when you tap them, such as ✨ In short, quick replies, help writing, translation, Listen, the AI scam check and asking your inbox a question (then only the few emails that match your question are read). A few run by themselves to save you time: the short card at the top of an email you open, and 🧭 Radar, which reads your recent email about once a day while Hodi is open to list what you pay, what you and others promised, and kind words. When AI runs, the text of that email (or the text you're writing) is sent to Anthropic to produce the answer. When you ask Hodi to write or suggest a reply, a few short emails you sent recently go along too, so the reply sounds like you; they aren't stored. If you switch on 🛎️ Front Desk, each new email from a person is sent to the AI with the facts you wrote, to see whether those facts answer it; Front Desk is off until you switch it on. Anthropic does not use it to train its AI and keeps it only for a limited time under its own terms. Amounts and dates found by AI can be wrong, so check them before you pay or rely on them.

Speaking and listening. When you dictate an email or use Hodi Walk, your words are turned into text by your browser or phone's own speech service (for example Google in Chrome and Android, Apple in Safari and iPhone), under their terms.

Cookies

Hodi uses a small number of cookies that it needs to work: one that keeps you signed in, and one that recognises your device for two-step sign-in and sign-in notes. We don't use advertising or tracking cookies.

Who helps us run Hodi

• Vercel (USA) hosts the Hodi app and the gethodi.com website, and stores Hodi Sign documents (encrypted) until they're signed, and, if you switch on phone alerts, your phone's notification code and (for “Hodi checks for you”) your encrypted sign-in.
• Anthropic (USA) provides the AI.
• Apple (USA) and Google (USA) deliver phone alerts, only if you switch them on.
• Our email provider handles the [email protected] mailbox where applications and feedback arrive.
• InterServer (USA), only if Hodi gives you a new @gethodi.com mailbox. That email is stored on InterServer's servers in the United States.

We share information with these companies only so they can provide their part of Hodi. We don't sell your information to anyone, and we don't use it for advertising.

How long we keep things

Your email and Hodi settings live in your own mailbox, so you control them. Hodi Sign documents are deleted 30 days after signing, as described above. Your recovery email is kept until you remove it. Your encrypted sign-in for phone alerts is deleted when you switch “Hodi checks for you” off; your phone's notification code is deleted when that phone no longer has Hodi, or when you ask us. We keep beta applications and feedback for as long as the beta runs and up to 12 months after, unless you ask us to delete them sooner.

Your rights, wherever you live

You can ask us to show you, correct or delete the information we hold about you, or stop emailing you about the beta. Just write to [email protected] and we'll answer within 30 days. If you live in the European Union or the United Kingdom (GDPR), Canada (PIPEDA), South Africa (POPIA) or a US state with a privacy law, these rights apply to you, and you can also complain to your local data protection authority.

Hodi is run from the United States, so information we hold may be handled there.

Keeping it safe

Every connection to Hodi and to your email provider is encrypted. You can add two-step sign-in, see every device that's signed in, and sign out everywhere in one tap. No system is perfectly secure, so we also recommend a strong, unique password and two-step verification with your email provider.

Children

Hodi is not meant for anyone under 16.

Changes

If we change this page in a way that matters, we'll tell beta testers by email before it takes effect.