Privacy policy
Deti Chat is an iPhone app made by hstation for working with Deti, the AI agent your company runs on its own server. This page explains what data goes where when you use the app.
Summary
- Your messages, files and approval decisions only travel between your iPhone and your company's Deti server, over an encrypted connection (HTTPS / WSS).
- Push notification content is end-to-end encrypted. hstation's notification relay and Apple cannot read it.
- hstation collects no personal data, does no tracking, shows no ads, and does not sell or share your data.
- The app contains no third-party analytics, advertising or crash-reporting tools.
Data on your company's Deti server
When you pair your iPhone with Deti using the QR code on the admin page, the app talks directly to the Deti server your company runs. Your messages, photos, attachments, voice messages, approval decisions and device name are stored there, as your company has configured it.
hstation does not operate that server and cannot access the data on it. Your company decides how long data is kept; ask your company's Deti administrator.
Data on your iPhone
- Sign-in: your sign-in tokens and device keys are kept in the iOS Keychain, on this iPhone only, and never go into iCloud backups. The app may keep a temporary copy of recent conversations so they open quickly and stay readable offline.
- Camera: only used to scan the pairing QR code. Camera images are processed on the iPhone and are neither stored nor sent anywhere.
- Microphone: only used when you record a voice message; the recording is sent to your company's Deti server.
- Photos and files: only what you choose to attach, sent to your company's Deti server.
- Face ID: handled by iOS. The app only learns whether it succeeded and never receives any face data.
Push notifications
Apple only accepts notifications for an app through its APNs service, signed with the developer's key, so your company's Deti server sends notifications through a relay operated by hstation.
Before sending, Deti encrypts the title and body separately for each iPhone with that device's public key; only your iPhone can decrypt them. The relay only sees the APNs device token, the encrypted payload and a hashed thread id, uses them to hand the notification to Apple, and stores no content. If your iPhone cannot decrypt a notification yet (for example right after a restart, before the first unlock), you see a generic line instead of the content.
The update server and this website
The app updates itself from deti.hstation.net. Each time it checks for an update it sends technical information: the platform (iOS), the native version, the id of the update it is running, and a random installation id generated by the update library. None of this is linked to your name, email or account, and the server does not store the random id.
Like any website, the server keeps technical access logs (IP address, time, path) to operate and to prevent abuse. Logs are deleted automatically after at most 14 days and are not used to identify or track you.
This website uses no cookies and no tracking code; fonts and images are served from this server itself.
Diagnostics and crash reports
The app currently sends no diagnostic or crash data to hstation. If that ever changes, the feature will be off by default, only turned on with your consent, and this page will be updated first.
Beta versions are distributed through Apple's TestFlight. Under TestFlight's terms, Apple may share crash reports and any feedback you choose to send with hstation. Apple handles that data under Apple's privacy policy.
Deleting your data
- Remove an iPhone: in the app, go to Settings → Sign out (the session is revoked on the server before it is removed from the Keychain); or an administrator removes the device on the Deti admin page → Devices. Deti then stops sending notifications to that device.
- Delete the app: removes the app's data from your iPhone. Sign out first so the session is also revoked on the server.
- Delete your account and history: your Deti account is managed by your company. Ask your company's Deti administrator to delete your account and data.
- At hstation: hstation holds no account or content of yours. The relay drops a device token when the device is removed or when Apple reports it as no longer valid; technical logs are deleted after at most 14 days.
Children
Deti Chat is meant for people working at companies that use Deti. It is not directed at children.
Changes to this policy
When this policy changes, hstation updates this page and the date at the top.
Contact
For privacy questions or requests, contact hstation through the channels at hstation.net. For data on your company's Deti server, your company's Deti administrator handles requests directly.