Privacy Policy
Privacy by design: TizonAI runs no servers that receive your personal data. This page explains exactly what happens with your information on the site and in Milo.
1. The website
tizonai.com is a static site. It has no user accounts, no ads, and sets no tracking cookies. Our hosting provider (AWS) keeps standard technical request logs (IP address, user agent) for security and operation, as any web host does.
The site uses PostHog for anonymous product analytics: page views, which buttons and links get clicked, where on the page people click (heat maps and clicks that do nothing), anonymous session replays of how the pages are used (there are no forms to type into), page performance and technical errors. It runs without cookies or local storage, so each visit is anonymous and visits are not linked to each other. Data is processed by PostHog in the United States. It never includes anything from Milo.
2. Milo is local-first
Milo captures audio only during a session you explicitly start, and transcribes it on your Mac using Apple's on-device speech frameworks. Transcripts, answers, research and summaries are stored locally on your Mac (in Application Support) and auto-delete after 30 days. None of it is ever sent to TizonAI — we have no servers to receive it.
3. AI queries go through YOUR Claude
When you use an assist feature (catch-me-up, explain, suggest reply, research), the relevant text is sent to Anthropic Claude using your own claude CLI subscription or your own API key. That traffic is between your machine and Anthropic, under your agreement with them and Anthropic's privacy policy. TizonAI does not see, store or proxy those requests.
4. Sensitive information
We do not collect sensitive personal information — we do not collect personal information at all. Be mindful that what is said in your meetings may be transcribed locally; you control when Milo listens and can delete sessions at any time.
5. Analytics in the apps
Today Milo includes no analytics or telemetry. hyperui's opt-in telemetry is described in the next section.
Planned: we intend to add the same anonymous PostHog analytics to the apps to understand aggregate usage — feature usage counts, session counts and performance/stability signals. It will never include meeting audio, transcripts, questions or answers. Before enabling it, this policy will be updated and the change announced in the app.
6. hyperui telemetry (opt-in, anonymous)
hyperui, the Claude Code plugin, sends usage telemetry only if you turn it on during setup. It identifies your installation with a random ID generated on your machine, never with your name or account.
What is sent: that random install ID; the plugin version, your operating system (macOS or Linux) and your Claude Code version; and for each event its time, its type (a finished unit of work, feedback, a failed quality gate, a design critique, an update offer) and the skill it came from. Events can carry only these fields: the outcome you picked (continue, do all, fix, stop), the number of iterations, the highest severity found (0–4), a thumbs up or down, a short comment of up to 280 characters (anything containing paths, links or email addresses is rejected), your experience level (non-technical, developer, senior) and whether you accepted a suggestion.
What is never sent: your code, your prompts or Claude's answers, file names or paths, project names, your name or email. Our server drops any field outside the list above and does not forward your IP address.
Where it goes: tizonai.com/api/telemetry relays it to PostHog in the United States, the same analytics service the site uses.
How to turn it off: run /hyperui:setup --no-telemetry. To delete what is stored on your machine (the install ID and any events not yet sent), run scripts/telemetry.sh purge from the plugin.
7. Your rights and contact
Since we hold no personal data about you, there is usually nothing for us to access, correct or delete — your data lives on your Mac. For any privacy question: tivetind23@gmail.com.
8. Changes
We may update this policy; the current version always lives at this page with its date.