HintFlow Privacy Policy
We take your privacy seriously. This policy explains how HintFlow ("we") collects, uses, and stores your data when you use the Product. Please read it carefully.
1. Data Overview: Three Tiers
We group data into three categories, explaining where each goes, why, and for how long. Core principle: whatever can stay on your machine, stays on your machine; whatever must go to the cloud is used only for the immediate task and then discarded.
① Always on your own device — we never see it
- Audio stream: audio captured during a session is used only for live transcription display. It is never recorded to a file, never written to disk, and never uploaded to our servers;
- Knowledge base files: resumes, past answers, notes, and other files you upload to your personal knowledge base;
- Full history: the complete transcript, generated answers/hints, and review reports for each session are stored only in local storage on your own computer.
We keep no copy of this content on our servers and cannot access it.
② Sent to third-party AI providers during a session, to generate answers
While a session is in progress, the following is sent to third-party AI providers to generate real-time reference answers (relayed/forwarded as request content — not retained on our servers):
- Transcript snippets: the current question and the recent turns of context needed to answer it (not the full history — only what's needed for that one answer);
- Job information: the company name, role title, and JD highlights you entered (so the AI can tailor its answer to the role).
Categories of third-party providers involved:
- Speech-recognition providers (convert your audio to text, e.g. Deepgram and similar services);
- Large-language-model providers (generate answers from the transcript, e.g. Cerebras, DeepSeek and similar services).
These providers' servers may be located outside mainland China, or within mainland China, depending on which provider and routing we use at the time. We send data to them only to the extent necessary to generate that specific answer or report, without attaching unrelated personal information.
③ Stored on our own servers
Our own servers (not the third-party AI providers) store the following, for account and billing management purposes:
- Account information: your registration email;
- Device fingerprint (for single-device binding and abuse prevention);
- Session balance and top-up/purchase records;
- Billing metadata such as session duration (not the transcript content itself — only start/end times, duration, and similar numbers used for billing).
About post-session report generation (important, please note): after a session ends, in order to generate a structured review report, the full transcript and job information (company/role/JD) are sent to a large-language-model provider to produce the report. Once generation is complete, the resulting report is sent back and saved on your own device; our servers do not retain the full transcript or the generated report — both are discarded server-side once that processing is complete, and are not stored in our database.
2. Purpose of Use: A Single Commitment
We collect and process the data described above solely to provide the HintFlow Service itself (account management, billing, generating answers and reports, etc.). We:
- do not sell any of your data;
- do not share your data with any third party unrelated to providing the Service;
- do not use your transcripts, resumes, or reports to train our own models, or for any form of advertising.
3. Third-Party Providers
The speech-recognition and large-language-model providers we integrate with act only as technical pipelines that process your data to complete transcription/generation tasks; their handling of data is governed by their own terms of service and privacy policies. We prioritize providers with reasonable data-protection commitments when selecting vendors, but we cannot fully control the internal data-handling practices of third-party providers.
4. Cookies
Our website (hintflows.com) uses only cookies strictly necessary for the site to function (e.g., language preference). We do not use advertising cookies and do not use third-party tracking cookies.
5. Your Rights
- You may request account deletion at any time by emailing [email protected];
- Upon account deletion, we will delete all data related to your account stored on our servers (account information, session balance, purchase records, billing metadata, etc.);
- Transcripts, history, and knowledge-base files stored locally on your device are unaffected by account deletion; you may delete them yourself at any time;
- If you have any questions or requests regarding how we handle your data, please contact us at the email above.
6. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app announcement or email. Continuing to use the Service after changes take effect constitutes your acceptance of the updated policy.
7. Contact Us
If you have any questions about this Privacy Policy, please contact [email protected].