Keeping an original recording
After capture, the local review panel can save the original browser-recorded file when you choose Download original recording. This does not upload the clip or consume an AI action. The download uses an in-memory browser URL that is revoked when the recording changes or the panel closes. Browser download behavior varies; check that your copy was saved. The downloaded file remains on your device after you leave, clear the workspace or delete your account, and must be managed through your device. Protect recordings that contain other people's voices or private information and obtain any required permission before recording, processing or sharing them.
Live microphone and shared-source capture
Capture begins only after you choose a source and your browser grants permission. The microphone request asks the browser to avoid voice enhancement when supported; device and browser processing can still differ. Shared-source capture requests a screen or tab permission stream, records only its audio tracks and uses a low requested video frame rate for the permission stream. Audio chunks stay in tab memory until you explicitly request AI analysis or a question. Stop and keep saves a local in-memory clip; Discard removes pending chunks. Changing the source tab ends capture and attempts to save it. Leaving the workspace or changing accounts discards unfinished capture and releases tracks; permission prompts already open may need to be closed in the browser, and late grants are immediately released. Recording offers 1, 5, 10 or 30-minute auto-stop timers, defaults to 5 minutes, and has a 100 MB size limit; background suspension or device interruptions can delay timers or interrupt recording. Long recordings use a simplified waveform to avoid unnecessary decoding. Browser memory is not durable storage; keep your own authorized original if the recording matters.
Password recovery and security notices
Password reset requests use the same public response for registered and unregistered addresses. Recovery email is queued through Floot email services. We store only the reset token hash, a fingerprint of the current password hash and a 30-minute expiry; the newest link replaces its predecessor and a successful reset consumes it. Reset codes are held in tab memory, removed from the address bar and excluded from browser backups. A reset changes the password, revokes existing sign-in sessions and sends a security notice without including the password. Keyed email hashes and aggregate counters enforce request limits; bounded cleanup removes counters older than two days when later requests arrive, so cleanup may be delayed. Email message identifiers and completion timestamps support delivery troubleshooting. Resetting a password does not erase browser-local work or change billing, free-use records or permanent access.
Optional downloadable-link conversion
When you choose Convert to WAV or Keep original audio, your browser requests the direct media URL from its host with browser CORS rules, no credentials and no page referrer. The host receives your IP address and the requested URL, including any signed query required for access. HearThis does not proxy these downloads through its server. Downloaded and converted files are held in the current tab's memory and excluded from workspace backups. The optional local audio preview loads only an in-memory file URL and starts when you press Play. Editing the URL or clearing the result removes that preview and revokes its URL; this does not remove a copy already loaded into the workspace or downloaded to your device. Downloading saves a copy on your device. Use in workspace explicitly replaces the active audio source; a later AI request follows the private audio-processing flow below. Requests, streaming size and WAV output are bounded, redirects are refused, and hosts that block browser downloads require an approved manual download/upload. Cancellation stops the download or discards conversion output; browser decoding already underway may finish before cancellation completes. Only use media you have authority to download and process.
Reporting inappropriate AI content
Use Report AI content in the app footer to flag unsafe, offensive or deceptive AI output. We store your submitted concern, optional quoted AI text, account ID and submission time for private developer investigation and safety improvements. Audio and your full workspace are not attached. Reports are not sent to the AI model. Account deletion removes the account link; the report text may remain for investigation. A bounded cleanup removes reports older than 90 days when later reports are submitted, so cleanup may be delayed. Contact syndicatehubllc@gmail.com for access or deletion requests.
Who operates HearThis
HearThis is operated by Syndicate Hub LLC. Contact syndicatehubllc@gmail.com or write to 487 Grey Swallow St., Brighton, Colorado 80601, United States. Our project directory is syndicate-hub.com.
What is processed and why
When you request Analyze, Ask Audio or A/B Compare, audio is uploaded privately and sent through Floot's AI services for the requested analysis or transcription. Filenames, listening goals, questions and preparation context may accompany the audio. Large sources may be converted into a smaller proxy or selected excerpts in your browser. Large speech recordings may use transcription. These features involve server and AI-provider processing.
What stays in this browser
Recent structured reports, Saved Moments, session titles and notes, custom presets, revision boards and decisions are stored in this site's localStorage under the signed-in account ID. The app displays only that account's workspace and resets active audio and workspace state when the account changes. Signed-out work remains in memory for that visit. Account separation is an interface safeguard, not encryption: anyone with access to this browser profile, site scripts or developer tools may still read stored data. Older unassigned browser data is preserved but hidden and is never imported into an account automatically. Restore only a backup you own. Audio files are excluded from backups; reports and notes can contain private information. Searching and editing Saved Moments stays in this browser. Saved note edits travel with session exports and workspace backups. Unfinished bookmark and revision-action drafts are cleared when the loaded source changes. If browser storage rejects a bookmark write, the app keeps the previous saved moments and does not report success. Export before clearing and keep backups secure.
Account, billing and service records
We store your email, display name, password hash, session records, login-attempt records, billing entitlement and completed-action usage records to provide access, protect accounts and administer the service. Email verification uses a random one-use code: only its hash and a 30-minute expiry are stored, with per-account resend limits. Verification messages are sent through Floot email services. Passwords are hashed. Stripe handles checkout and subscription management; HearThis stores Stripe customer/subscription references and status, rather than card details. Hosting and service logs may include request metadata and errors.
Reviewing and ending sign-in sessions
Account & Usage shows the current session's start and expiry and a count of other unexpired sign-ins created in the last 24 hours. It does not identify a device or location; tabs sharing one cookie count as one session. You can explicitly confirm signing out all other sessions for your account while keeping the current one. Revoked sessions lose access on their next server request. Revocation does not change your password, erase downloaded files or another device's browser-local reports, or recall requests already processing. Contact support about suspected credential compromise.
Temporary audio and retention limits
The app attempts to delete temporary uploaded audio after processing and on failed requests. On a later upload, it also checks a bounded batch of that account's older audio and attempts to remove objects older than 24 hours. This is not a guaranteed deletion deadline. A per-account upload-request counter limits bursts to protect the service. Cleanup is best effort: an interrupted upload, network failure or service error may leave a temporary object behind. A signed URL's expiry limits access through that URL; it does not delete the object. We do not promise immediate deletion from provider systems, logs or backups. Account, billing, security and usage records may remain while needed to operate the service, resolve issues or meet legal obligations. Contact us about deletion or retention questions.
Service providers and transfers
Floot provides hosting, storage, authentication infrastructure and AI-service integration; Stripe processes payments. The interface loads fonts from Google Fonts, so your browser contacts Google to retrieve those resources and may send ordinary request metadata. Audio and associated text can be processed by the AI providers used by Floot. Provider processing, retention and training terms may differ; those terms have not been independently verified here. Do not upload highly sensitive, regulated or confidential material unless you have authority and have assessed the providers' terms. Processing may occur outside your country.
Cookies and analytics
Sign-in uses a secure HttpOnly session cookie. Workspace features use browser storage to provide the functions you choose. Floot's built-in visitor analytics uses an in-memory session identifier, with no analytics session identifier written to device storage by the default configuration. It can send the page path, referrer, user agent, browser language and timezone-derived country; query strings and hashes are excluded by Floot's tracker. Browser preferences and any earlier consent choices may remain in site storage.
Your choices and requests
Use Account & Usage or the controls below to export, restore or clear this account’s local workspace. Browser site-data settings can remove all data for this site, including older unassigned data. Clearing local workspace does not delete your account or cancel billing. Self-service account deletion in Account & Usage requires your current password and explicit confirmation. End recurring subscriptions and let open checkouts expire first. Permanent Unlimited accounts are protected from accidental self-service removal; contact support for a verified deletion request. Accepted requests revoke all sessions and attempt immediate deletion of app account records and private audio, with later cleanup passes for interrupted uploads. If cleanup scheduling fails, the request is refused and your account is kept. Incomplete cleanup requires support follow-up. Downloaded exports, other-device browser data, provider financial records, logs and backups may remain under their retention rules. We retain a keyed hash of the normalized email and free actions already used for up to one year to prevent deletion/re-registration from resetting the allowance; it is not a sign-in credential and cannot recover deleted workspace data. Expired counters are ignored and pruned in bounded batches on later registrations. For access, correction, deletion or other applicable privacy requests, email syndicatehubllc@gmail.com from your account email. We may verify your request. Rights and exceptions depend on applicable law.
Children and updates
HearThis is not directed to children under 13. Do not submit a child's personal information without appropriate authority and compliance with applicable law. Contact us if you believe such information was submitted. This notice was updated October 21, 2026; material changes will be reflected here.
487 Grey Swallow St.
Brighton, Colorado 80601, United States