SommoHermes privacy policy

Last updated: November 3, 2026

This policy describes SommoHermes for Android (cc.sommomi.sommohermes), developed by Michele Tagliabue. For questions about privacy or data related to a support request, contact mikitg.michele@gmail.com.

Your server

SommoHermes is a client for a Hermes or hermes-webui server you choose and configure. The app does not provide a SommoHermes account, a hosted agent or a developer-operated AI service. Server-connected features require a reachable host and any credentials its operator requires. The interface preview does not connect to a server.

The app contains no advertising, analytics SDKs, tracking systems or automatic crash reporting services. Conversations are not automatically sent to the developer. You can choose to send an excerpt of a reply using the reporting feature described below.

Data transmitted when you use app features

Requests go to the server you select. Depending on the features you use, they may include:

• usernames, passwords, access tokens and custom headers needed to authenticate to your server or its proxy;
• messages, text recognized during voice conversation, answers to questions and approvals, chat and bot names and settings you choose to submit;
• files and their names or metadata that you select and attach to a conversation;
• searches, workspace paths and requests concerning projects, tools, scheduled jobs, Git and other server features;
• an audio recording, only when you explicitly use server dictation.

The server, the network services that make it reachable and any proxies also receive the normal technical data required for a connection, such as the device’s IP address. SommoHermes does not use that data to infer your location.

Your server’s operator determines the AI models, providers, tools, plugins and retention rules used by the host. These systems may also process data through external services configured on the server. The app does not control their activity: review their policies and your host’s settings before sending sensitive data. The SommoHermes developer does not receive a copy of ordinary requests to your server. Reporting a response is separate and requires your explicit action.

AI response reports

Report response on a chat reply or a bot reply in a group opens an in-app form. You can review and edit the selected text and choose a reason. Only tapping Send report sends the text currently in the form and the reason to the developer’s service at https://hermes-review.sommomi.cc/app-reports. This transfer uses HTTPS.

Your server address, credentials, chat or bot identifiers, reasoning, tool output and conversation history are not automatically added. The selected text may still contain information you want to remove before sending. Opening or canceling the form sends no data.

The developer uses reports to review potentially unlawful, dangerous or inappropriate content and address app safety. The service keeps the text, reason, timestamp and report identifier in a store separate from Hermes data. It does not forward content to other services or retain IP addresses or authentication headers. Reports are automatically deleted after 30 days; when the 10,000-report limit is reached, the oldest reports are removed first. For questions concerning a report, contact the address at the start of this policy.

Microphone and voice

Microphone access is optional and requires Android permission. The microphone activates when you start a recording or voice conversation feature.

On-device voice conversation. When available, the app uses Android’s local speech recognition and a speech voice that does not require the network. It does not automatically replace the local recognizer with a cloud recognizer. During an active voice conversation, recognized text is sent to your selected server as an ordinary message. Availability and languages depend on your phone and installed voice resources.

Server dictation. This is a separate feature. After recording a message, the transcription command sends audio to your selected server. The server may use its own speech recognition provider, including an online one. Returned text is placed in a draft for review, without automatically sending it as a message. The recording is temporarily kept in the private cache and deleted in the normal flow when dictation is closed, canceled or completed.

Data stored on your phone

Saved connections, credentials, access headers, preferences, drafts and local conversation copies are kept in the app’s private storage and encrypted with AES-GCM using an Android Keystore-managed key. Android backup of app data is disabled. Each server’s data is isolated from other configured connections.

Temporary dictation recordings and copies made to open, export or share files may be stored unencrypted in the private cache. They are not covered by conversation and credential encryption. Residual temporary files may remain in the cache until the app, Android or the user clears it.

Local notifications may show a run’s title and status. A foreground service maintains updates for work you started or opened when the app goes into the background, within Android’s limits. It does not independently start or resend work to the server. You can manage notification visibility, including on the lock screen, in Android settings. The widget does not store chat text, server addresses or credentials.

Connections and transport security

HTTPS and WSS connections use TLS with certificate verification. The app also supports user-configured HTTP and WS addresses, for example for hosts on a local network. Those connections do not encrypt data in transit. Use an HTTPS address for connections that require transport protection. SommoHermes does not claim that all connections are encrypted or that transmitted data uses end-to-end encryption.

Sharing, links and device services

You can choose files using Android’s document picker, share content from other apps and save, open or export content to an app or document provider you select. Recipients may receive and retain their own copies under their settings and policies. Links opened in a browser are also subject to the visited site’s rules.

SommoHermes does not request access to location, contacts, camera, calendar, SMS or the phone’s entire storage. Microphone and notification permissions can be managed in Android settings. Android, the app distributor and installed voice services may have their own policies for activities they perform independently of this client.

Retention and deletion

• Clear offline data in app settings deletes the selected server’s local cache; it does not delete credentials or server sessions.
• Remove server deletes the saved connection, its credentials, drafts and local cache from your phone. Sessions and files on the server remain on that host.
• Deleting a chat is a separate server-directed operation requiring confirmation in the app. Data retained by the host and its providers is subject to their rules and the operator’s backups.
• Uninstalling the app or clearing app data in Android settings removes private local data. Copies already saved or shared outside the app are not deleted by SommoHermes.

There is no SommoHermes account created in the app to delete. To delete an account or data on your configured server, contact its operator. If you contact support, your email address and information you choose to include are used to handle your request. Avoid sending passwords, tokens or confidential conversations.

Updates

This policy may be updated to reflect changes to features and data processing. The date at the beginning identifies the current version.