HashA home for your records
yoonspace
HASH PRIVACY

Where your records live,
explained.

Privacy Policy

From a quick note to events and tasks.
Here is how Hash uses your information and where it stores it.

Effective October 24, 2026Hash
On this page

At a glance

Hash (the “app”) is a personal record app that organizes notes, events and tasks using hashes (tags). This policy applies to Hash on iPhone, iPad and Mac, the connection and AI features of Hash for Windows, and this privacy policy website. The operator is Yoonspace (the operator of Hash).

Start on your device

Records are stored on your device by default. No separate Hash account is required.

Some features send data

iCloud, sharing, AI and link previews may send the information they need outside your device.

Manage it in settings

You can adjust sync, AI and permissions, and export or delete your records.

The operator does not collect your records for advertising or sale. The current app does not include advertising SDKs, analytics SDKs for tracking users, or a feature that collects records on the operator’s server.

What information is processed, and why?

Your records and settings

The app uses note text, hash names, colors and icons, events, deadlines, recurrence and completion history, reminder times and places, links, selected photos and attachments, themes and images, and creation and modification times to store, display, search, remind and sync. Some usage state, such as search queries and recently opened records and hashes, is kept on your device for search and rediscovery features.

Imported records

The app reads files you select on your device, including KakaoTalk self-chat exports, data files and photos from the previous Hash app, and AI kit responses, and converts them into records. It does not sign in to your Kakao account or retrieve conversations from Kakao’s servers. After import, records are processed according to your sync, sharing and AI settings.

Saved links and web pages

To create a link’s title, description, thumbnail and reading text, the app connects directly to the website and image URLs. These destinations may receive ordinary communication information such as the requested URL, IP address and browser identification information. Extracted content is saved with the link record and may be included in sync or AI input.

Device connections and inquiries

Hub connections use device names and identifiers, PC addresses, connection keys, model names and processing performance, and job status. If you email a privacy inquiry, we process your sender email address, message and any attachments you send to respond and handle your request. You do not need to include sensitive records that are unnecessary for resolving the issue.

Permissions are used where needed.

The permissions below are requested when you use an available feature. The current App Store release does not provide Hub or PC connections and does not use camera or local network permissions. If you decline, you can still use record creation and search features that do not require that permission.

Location
Location is used to remind you when you arrive at or leave a place you set, and to select nearby reminder places. Background place reminders may require “Always” permission. Your current location history is not sent to the operator’s server. A place name, coordinates and radius attached to a record are part of that record and may be included in iCloud sync or space sharing. Place search queries are sent to Apple’s map service.
Photos and files
Photos and files you choose are added as record attachments or used as theme images. Only items you choose in the photo picker are imported. Permission to add photos is requested when saving a lock screen wallpaper image to Photos.
Calendar
Event titles, start and end times, and calendar names from other calendars on your device are overlaid in Today and Calendar views. Although the operating system requests full access, the app only reads events and does not modify them. Overlaid external events are not automatically saved or synced as Hash records.
Notifications
Notifications display time and place reminders attached to records, and reading reminders you enable. Record content may appear in notification titles. You can control preview visibility in system settings.
Camera and local network
These permissions are not used in the current iPhone, iPad or Mac App Store release. Development builds with Hub enabled use the camera to read a PC connection QR code and the local network to exchange records and AI results with a connected PC. You can also enter the PC address and connection key manually.
Clipboard
When you copy or paste, the app reads or writes records, AI prompts and responses, images and other content involved in that action.

Record titles or content may appear in widgets, the Today card on the lock screen, notifications and Spotlight search. If you share a device, check what these features display.

Where does AI read your records?

Processing depends on device support and app settings. AI input may include the text of the record being processed, content extracted from links, a list of hashes and task instructions. Results may be saved as summaries, hash suggestions, tasks or drafts.

Apple on-device AI

On supported devices, the app uses Apple Intelligence’s on-device model for hash suggestions and summaries. Hash suggestions that run automatically when you save a record always use the on-device model only. Input processed by the on-device model does not leave the device.

Apple cloud AI

On supported devices running iOS, iPadOS or macOS 27 or later, when you request a summary, the app may process it with Apple’s Private Cloud Compute (PCC) if the text is long, combines many sections or items, or the on-device model could not process it. In that case the record text, the reader text extracted from its link and the task instructions are sent to Apple. Apple states that PCC uses requests only to produce the response, does not store them, and lets independent researchers verify these claims. The operator does not receive what is sent to PCC or its results.

PCC has a daily usage limit per iCloud account and is subject to the Apple Intelligence Terms and Conditions. Turning off “Switch to Apple cloud automatically” (on by default) in Settings → AI stops PCC use, and records in hashes with “Exclude from external AI and Apple cloud” turned on are never sent to PCC. Where a request was processed is shown in Settings → AI and in the summary confirmation.

Hub · Local AI on your PC

The current iPhone, iPad and Mac App Store release does not provide Hub or PC connections or automatic Hub analysis. The following describes Windows Hash and development builds with Hub enabled. A Mac connected through the same iCloud account or a directly paired Windows PC can analyze records using a local model. When “Automatically analyze long notes and tasks” is enabled, eligible records are processed automatically. In versions that provide Hub, this setting is enabled by default. Mac connections use iCloud sync; direct Windows connections use encrypted communication with the paired PC. Records, jobs and results sent to the PC are also stored there. You can turn off automatic analysis or disconnect the PC. Information already stored on the PC must also be managed on that PC.

An external AI service you choose

“Send to AI” and record and theme kits turn selected content into prompts or files you can copy or share. If you paste or share it with an external AI service, that service processes the information. Check the content you will send and whether it includes sensitive information. Retention, use for training and deletion after transfer depend on the policies and settings of the service you choose.

AI results are suggestions. The app displays summaries and recommendations separately, and saves drafts or plans as new records after you review them. The operator does not collect your records to train a separate AI model.

Who receives information?

iCloud sync and space sharing

When you enable iCloud sync, records, hashes, attachments, themes, some settings, AI results and identifiers needed for sync are stored in Apple CloudKit for use across devices with the same account. If you share a space or accept an invitation, its records and attachments, themes, participation permissions and information needed for sharing, such as the most recent editor, are visible to participants. Their ability to view or edit depends on the sharing permissions.

Turning sync off stops new syncing; it does not delete data already stored in iCloud. Ending sharing cannot retrieve content that another participant has separately copied or exported.

Apple

Provides iCloud and CloudKit sync and sharing, the Apple Intelligence on-device model and Private Cloud Compute (for summary requests; can be turned off in Settings), map search, and operating system notification, search and widget features.

Apple Privacy Policy

External websites and font CDN

Websites and image servers for saved links process preview requests. If you download additional fonts or apply a theme with downloadable fonts, jsDelivr receives font download requests and ordinary connection information. The default font is included in the app.

jsDelivr Privacy Policy

Cloudflare

Provides hosting and security for this policy page. Visiting the page may involve processing communication information such as your IP address, requested URL, access time, and device and browser information. This page does not upload or read your app records.

Cloudflare Privacy Policy

Google · Gmail

Used to send and receive the operator’s inquiry emails. Email addresses, message text and attachments you send are processed. This does not mean the Hash app includes Google advertising or analytics SDKs.

Google Privacy Policy

Third-party disclosure, service providers and international processing

Other than the sync, sharing, external service use and inquiry handling described above, the operator does not disclose your records to third parties at its discretion. Where required by law or covered by valid separate consent, information is processed within the necessary scope. Cloudflare is used to deliver and secure this website, and Google’s Gmail is used to handle inquiry emails.

Apple, Cloudflare, Google and other providers are overseas service providers. Information may be processed on infrastructure in South Korea or abroad when you use their features, visit this page or send email. See the policies linked above for each provider’s processing locations, retention practices and ways to exercise your rights. You can stop the corresponding transfers by disabling iCloud or cloud AI, or by not sending content externally or emailing an inquiry, but the relevant feature will then be limited.

How long is information kept, and how is it deleted?

  • Records on your device: Records are stored while you keep them. Deleted records remain in “Recently Deleted” for 30 days. After that period, they are permanently deleted when the app runs its cleanup. You can permanently delete records or empty Recently Deleted before that time.
  • iCloud and shared spaces: Records are synced while you retain them. If you delete a record with sync enabled, the deletion is reflected on connected devices and in the cloud. Network conditions and permissions may delay this. Deleting records, leaving a shared space or ending sharing depends on ownership and participation permissions.
  • Hub and AI jobs and results: Job input, analysis results and drafts may be stored on your device and connected PC. Stopping automatic analysis or disconnecting limits future processing. Existing PC data and records kept by model tools must also be deleted separately on that PC.
  • Imports, exports and backups: Imported records follow the same retention rules as other records. The previous Hash app’s original database read during an update is not automatically deleted. You must separately manage and delete original chat files, exports, photo and attachment copies, and device backups you keep. Deleting the app does not delete all iCloud data or copies held by sharing participants.
  • Inquiry emails: Inquiry information is deleted without undue delay once the purpose of responding and handling the request has been fulfilled. If retention is required by law, only the necessary information is kept separately for the legally required period and then deleted.
  • Information held by external services: Retention and deletion of connection information and other data processed directly by Apple, external AI services, websites, font CDNs, Cloudflare and Gmail depend on each provider’s policies and your settings.

Electronic information is removed through the app’s deletion features or the relevant storage service’s deletion procedures. The operator cannot delete external copies you create yourself; please also remove them from their respective storage locations.

You can manage your information.

Adjust permissions and visibility

In your operating system’s settings for Hash, you can change location, photo, calendar, camera, notification and local network access. Notification previews, widgets and lock screen cards can also be managed through system and app settings.

Change sync and AI settings

App settings let you control iCloud sync and on-device hash suggestions. You can also manage external AI exclusions for individual hashes and shared space permissions. In Settings → AI you can turn automatic switching to Apple cloud on or off and check your daily Apple cloud usage. The current App Store release does not provide Hub and PC connections. Development builds with Hub enabled and Windows Hash provide separate controls for automatic analysis and PC connections.

Export, edit or delete

Open a record in the app to edit or delete it. Use Settings → Export & Backup (내보내기·백업) to export Markdown files, and Settings → Recently Deleted (최근 삭제됨) to manage deleted records.

Contact the operator

Send requests to access, correct or delete personal information, stop processing, or withdraw consent to the email below. You may also submit a request through an authorized representative or legal guardian. If necessary, we verify your identity or the representative’s authority using only the information needed, handle the request according to applicable law and tell you the result. For device or personal iCloud records the operator cannot access, we explain how you can manage them yourself.

Withdrawing permission may limit the relevant feature. If the law limits a request, we explain why. You may also contact South Korea’s Personal Information Infringement Report Center for privacy advice or reports, or the Personal Information Dispute Mediation Committee for dispute mediation.

How is information protected?

The app uses the operating system’s app storage and access permissions. The app, widgets and share extension exchange the information they need within the same app group; ordinary records are not uploaded to a public database. Content synced through iCloud uses CloudKit’s encrypted fields, and large bodies of text and attachments are separately encrypted. Access to shared data follows CloudKit participation permissions.

Records and results sent over a direct Windows Hub connection are encrypted using the connection key. On iPhone, that key is stored in the device’s Keychain. This website is served over HTTPS. The operator restricts access to inquiry information and operational accounts to what is necessary.

Cookies, tracking and automated decisions

This policy page does not use its own cookies, advertising trackers, analytics scripts or browser storage. Hosting and security services may separately process ordinary connection information. The app’s AI assists with organizing records and writing; it is not used to make automated decisions that significantly affect your rights or obligations.

Have a question?

The privacy contact is Yoonspace (the operator of Hash).
Please send privacy inquiries and requests to exercise your rights to:

Including “Hash Privacy” in the subject helps us identify your inquiry.

Policy changes will be posted here.

This privacy policy takes effect on October 24, 2026. This update adds when summary requests use Apple Private Cloud Compute, what is sent, and how to turn it off. If the information processed, processing purposes, external transfers or other details change, we publish the effective date and changes on this page. Changes requiring separate notice or consent are handled according to applicable law.

October 24, 2026 · Apple Private Cloud Compute use added
October 14, 2026 · Release availability clarified
October 12, 2026 · First published