Privacy

In short

• We never record or store call audio, video or screen shares. Direct calls go between Macs, encrypted end to end.
• Each Mac makes its own transcript with Apple’s speech recognition. Transcripts never reach our servers.
• Your team’s hub keeps chat, call history and the other things your team shares. We run it on Cloudflare.
• We don’t sell data, show ads or use what you share to train models.

Calls and screen sharing

Calls use WebRTC. Calls of 2 or 3 people are direct: audio, video and shared screens go from Mac to Mac, encrypted with DTLS and SRTP. Each Mac has its own P-256 key, kept in the Secure Enclave where the Mac has one and in the Keychain where it doesn’t. The key signs the call’s connection details, and a 30-digit safety number lets you check you’re talking to the right person. Founder Hud warns you when a person’s key changes.

When a network blocks direct connections, the call goes through a Cloudflare TURN relay. The relay passes encrypted packets and can’t read them.

From 4 people, calls go through Cloudflare’s Realtime SFU, a media server that forwards each person’s audio and video. The SFU can decrypt what it forwards, so Founder Hud marks these calls as not end-to-end. Our servers never receive call media, and neither we nor Cloudflare record it.

Transcripts, notes and replays

Transcription is off until someone in the call turns it on, with Transcribe in the Mac app’s call window or with the setting that starts it in calls they start. It is then on for everyone in the call, and anyone in it on a Mac can turn it off. Each Mac transcribes only its own person’s microphone, on the Mac, with Apple’s SpeechAnalyzer. A person in a browser is not transcribed. On a direct call, each line also goes to the other people in the call over the same encrypted connection, so everyone has the whole transcript. Transcripts are saved in a folder on each Mac and never go to our servers.

After a call, Apple’s on-device model writes notes from the transcript: a summary, decisions and to-dos. Founder Hud adds the to-dos to your team’s to-dos, so the hub keeps them. The summary stays on your Mac unless you turn on posting it to the call’s chat in Settings, or share the notes. Decisions stay on the Mac unless someone shares the notes.

While you watch a share, Founder Hud keeps still frames of it (at most one every 30 seconds) in the call’s folder on your Mac. They’re never uploaded. If that folder is in a place iCloud syncs, iCloud copies it like any other file.

Your team’s hub

Each team has a hub: a server we run on Cloudflare Workers, with its data in Cloudflare’s storage. Only members of the team can reach it. It keeps:

• Who you are. Your account ID, your name, a link to your photo, your role in the team, and when you first connected. The hub doesn’t keep your email address.
• Presence. Whether you’re online, away or in a call, and your status until it expires. If you turn on sharing what you’re working on, the front app, repository, branch and Claude Code sessions, deleted when you disconnect.
• Call history. Who called whom, who joined, and when calls started and ended. Never what was said.
• Chat. Messages, reactions and what you’ve read. The hub deletes files attached to messages after 90 days; the message keeps their name and size.
• What your team shares. Notes, to-dos, bookmarks and the files you publish. Deleted notes and files stay in the trash for 30 days.
• Call quality. Only if you turn it on: connection numbers such as packet loss and bitrate, kept for 30 days.
• Call traces. Only if you turn on sharing call traces: the steps and numbers each Mac writes about a call, never words or screen content. Only the people who joined that call can read them, and the hub deletes them 30 days after the first part arrives.
• Audit log. Who connected, joined or left a call, published or deleted files, joined or left the team, or got a new role, and when. Never content. Kept for 365 days. The team’s owner and admins can read it.

The Files part of Founder Hud works on your Mac. File contents reach the hub only when someone attaches, sends or publishes a file.

Your account

You sign in on this website, with Google or with your email and a password. The Mac app opens the website to sign in. Our account service, on Convex, keeps:

• Your name, email address and photo. With Google sign-in, they come from your Google account.
• Your password, hashed, if you sign in with one.
• The teams you’re in, your role in each, and the invites sent to your email.
• Your signed-in sessions, with the IP address and the browser or Mac each one came from.

Your team’s hub learns who is on the team from this service. It never sees your password or your Google account.

Billing

When a team’s owner starts a plan, we send Stripe the team’s name and the owner’s email address, and the owner pays on Stripe’s page. We never see the card. We keep the team’s plan and its Stripe IDs, and count who started or joined a call each month to work out the bill.

Ask in search

Ask, in Founder Hud’s search, runs Claude Code, Anthropic’s app, if you have it on your Mac. Claude Code reads files in your Founder Hud folder, transcripts and notes included, and sends what it reads to Anthropic under the account Claude Code is signed in with. We receive none of it.

Crash and hang reports

When Founder Hud crashes or hangs, macOS gives it a report. Sending reports starts off. Once you turn it on in Settings, Founder Hud sends each report to your team’s hub: the app and macOS version, the build, the kind of problem and where in Founder Hud’s code it happened. No content and no file paths. The hub writes it to our server logs with your account ID and doesn’t store it otherwise. A copy stays in ~/Library/Logs on your Mac.

The app has no analytics and no advertising or tracking libraries.

Updates

Founder Hud checks for updates with Sparkle, which reads the list of releases from downloads.founderhud.com. Downloads are served by Cloudflare, which keeps standard server logs.

This website and the waitlist

When you join the waitlist we keep your email address, which form you used, when you joined and whether you confirmed. We send one email to confirm the address, and then write when Founder Hud is ready for your team. Cloudflare Turnstile checks that the form is used by a person. We keep the address until you ask us to remove it.

The website counts page views with PostHog, and Cloudflare keeps standard server logs.

Who processes data for us

• Cloudflare runs this website, app downloads and updates, the team hubs, the media servers, the TURN relay and Turnstile, and stores profile photos you upload.
• Convex stores accounts, teams, invites, billing records and the waitlist.
• Google signs you in when you choose Google.
• Stripe takes payments and keeps the team’s billing details.
• Resend sends our emails: email checks, password resets, invites, billing reminders and the waitlist emails.
• PostHog counts page views on this website.

Transcription and notes use Apple’s on-device frameworks, which run on your Mac and send nothing to Apple or to us.

Your choices

You can turn off sharing what you’re working on, call quality reports, call traces and crash reports in Founder Hud’s settings. To see, change or delete what we keep about you, or to leave the waitlist, email info@lowsidelabs.com.

Changes

When Founder Hud starts keeping or sending something new, we update this page before the release that does it, and change the date at the top.