Legal
Privacy policy
Last updated: October 27, 2026. This policy covers the hexiel program, the Hexiel Remote service (remote.hexiel.tech) and the Hexiel phone app for iOS and Android, all run by JKagiDesigns LLC ("we", "us"). We do not sell your information, we do not show ads, and we do not share your data for advertising.
The short version
- hexiel runs on your own computer. Your code, files and chats stay there unless you choose a cloud AI model, in which case they go to that model's provider under your own account with them.
- Hexiel Remote passes traffic between your phone or browser and your computer. It keeps your account details, your machines and automations, and automation results, but it does not keep a copy of your chats.
- The phone app stores a sign-in token on the phone and, if you allow notifications, a push token on our relay.
hexiel on your computer
hexiel saves your settings, chat history and memory files on your own computer. We never receive them. When you use a cloud model (for example Anthropic, OpenAI or another provider you configure), your prompts and the files hexiel sends as context go directly from your computer to that provider, under your account and their privacy policy. With a local model nothing leaves your machine.
If you are signed in to Hexiel Remote, hexiel can send its own error reports to us so we can fix bugs. Paths,
keys and email addresses are removed first, and you can turn this off with error_reports = "off".
Hexiel Remote and the phone app: what we collect
- Account information: your email address, and optionally a display name, a contact email and an avatar. Sign-in is handled by our first-party authentication service; your password is stored there in hashed form, never in Hexiel Remote.
- Your machines and phones: the names you give your computers and phones, their platform (for example "ios" or "android"), when each was last seen, and hashed access tokens.
- Chats you drive remotely: messages pass through our relay, encrypted in transit, between your phone or browser and your computer. The relay shows each chat's title and whether it is busy, and does not store the conversation.
- Automations: each automation's name, schedule, time zone, instructions and settings, and the result of each run, so you can read it later on the web or in the app.
- Notifications: if you allow them, the push token Apple or Google gives the app, so we can tell you when an automation finishes or your computer is waiting for your approval. The notification's text goes to Apple Push Notification service or Firebase Cloud Messaging for delivery.
- Support: bug reports, feature requests, comments and votes you submit, and screenshots attached to them. Reports you make public appear in the public queue at hexiel.tech/support.
- Billing: subscriptions are paid on the web through our payment processor, Stripe. We keep a customer reference; your card details go to Stripe and never reach our servers.
- Website analytics: hexiel.tech uses cookieless analytics that we host ourselves to count page views. The phone app has no analytics or tracking.
Voice
When you tap the microphone, the app uses your phone's built-in speech recognition (Apple's or Google's) to turn speech into text, and the phone's own voice to read replies aloud. Only the resulting text is sent to your computer. We never receive audio.
How we use it
Only to run the service: signing you in, connecting your phone to your computers, running your automations, sending the notifications you asked for, billing, answering support requests and fixing bugs. We do not use your data to train AI models.
Who processes it
Our servers are hosted by a virtual server provider. Stripe processes payments, Apple and Google deliver push notifications, and a transactional email provider sends account emails. They act on our instructions only. We may disclose information if the law requires it.
Keeping and deleting your data
We keep your data while your account exists. You can remove a phone (Settings → Sign out of this phone) or a machine at any time. To delete your account and everything Hexiel Remote holds about you, email support@hexiel.tech from your account's address; we do it within 30 days. Records we must keep for tax purposes (payment references) are kept without your other data.
Your rights (EU, UK, Canada and US states)
You can ask to see, correct, export or delete your personal information, or object to how we use it, by emailing support@hexiel.tech. We process your data to provide the service you signed up for (performance of a contract) and, for error reports and security, our legitimate interest in keeping the service working. You may complain to your local data protection authority. Data is stored in the United States, and transfers from the EU, UK and Canada rely on the safeguards the law provides, such as standard contractual clauses.
Children
Hexiel is not directed to children under 16, and we do not knowingly collect their information.
Security
Everything between your devices, our relay and your computer is encrypted in transit (HTTPS and secure WebSockets). Access tokens are stored hashed. No system is perfectly secure, but we take reasonable measures to protect your information.
Changes and contact
If we change this policy we will update the date above, and tell you by email for significant changes. Questions: support@hexiel.tech, JKagiDesigns LLC, Kingston, Massachusetts, USA.