Privacy Policy

What Hypha is

Hypha is a local-first markdown knowledge app. The app works without an account, and your notes are ordinary files in the vault folder you choose. Hypha follows a zero telemetry policy and does not operate an analytics pipeline for the app or this site.

Data the local app handles

The app reads and writes the vault files you select so it can edit notes, build search indexes, render graphs, resolve attachments and run local agent tools. Those files remain on your device unless you explicitly enable Sync or share/export them yourself.

Rebuildable caches such as search indexes and local embedding indexes are stored locally. They can be deleted and rebuilt from your markdown files.

Sync beta

If you enable Hypha Sync, the client encrypts vault updates before they leave your device. The Sync service stores encrypted CRDT payloads, encrypted vault-key wraps, account identifiers needed to authenticate you, and subscription state needed to operate the service.

The Sync service is designed so the server does not receive note plaintext, filenames, vault keys, recovery words or decrypted metadata.

Payments

Paid Pro subscriptions are processed by the merchant of record or payment provider shown at checkout. Hypha receives the subscription state needed to grant service access; payment card data is handled by the payment provider, not by the Hypha app.

No telemetry by default

Hypha does not include product analytics, ad pixels, third-party tracking scripts or automatic crash-report uploads. If you choose to report a bug, only include vault content or logs you are comfortable sharing.

Deleting your account

If you signed in, you can delete your account and everything stored with it at any time — from Settings → Sync inside the app, or by email if you no longer have Hypha installed. Deletion is immediate and permanent, and it does not touch the markdown files on your own devices. Full instructions are on the account deletionpage.

Contact

Privacy questions can be sent to hello@hypha.md. Security reports should follow the process in the public security policy.