HeyEmma

Privacy Policy

Last updated: May 8, 2026

At a glance

Emma runs locally on your computer. Your OpenAI API key, transcriptions, conversations, settings and history never leave your device for our servers — we operate no server that receives your data. When you use Emma, audio, text and any screenshots are sent directly from your computer to OpenAI's API using your own key. We receive nothing about the content of your use. This also means your communication with OpenAI is subject to OpenAI's terms and US law. As a user, you are responsible for assessing this before sending personal, confidential or work-related information through Emma.

How your data flows

1. You speak or take a screenshot on your computer. 2. Emma sends the audio or image directly from your device to OpenAI's API (api.openai.com) using your own API key. 3. OpenAI returns the transcription or response directly to your device. 4. The result is shown and stored locally inside Emma — on your own computer. No part of this flow passes through our servers. We run no backend that receives, logs or analyzes your prompts, audio, transcriptions or screenshots. Our servers are used solely for the website (tryheyemma.com) and for license and purchase handling via Stripe.

Who we are

HeyEmma is a product of Juncher Group (CVR DK29886393). We develop and sell Emma — a native voice assistant for macOS and Windows that runs locally on your computer. This policy describes how we handle personal data in connection with our website and app.

What data we collect

The Emma app collects no data at all. It runs locally on your computer, and we have no access to your files, transcriptions, conversations or screen recordings. On our website we collect minimal data to improve and optimize the user experience. We use essential cookies to remember your language preference and cookie consent. With your consent, we may additionally use third-party marketing and analytics tools (e.g. Meta/Facebook Pixel) to measure the effectiveness of our marketing and improve our ads. You can withdraw your consent at any time via our cookie settings. For purchases and license administration, we store the information needed to deliver the product, send your license key and provide support — typically name, email and purchase details from Stripe.

Local data storage and deletion

All data — including transcriptions, settings, dictionary and history — is stored exclusively on your device in a SQLite database. We have no server, no cloud service and no database that receives your information. Files are placed at the following paths: • macOS: ~/Library/Application Support/com.heyemma.desktop/ • Windows: %APPDATA%\com.heyemma.desktop\ The data is kept for as long as you choose to keep it. You can delete history and transcriptions from inside the app at any time, or delete the entire data folder above manually to remove everything. When you uninstall Emma, the data folder may remain on disk — delete it manually if you want to remove all traces. The files are protected by your operating system's file system encryption (FileVault on macOS, BitLocker on Windows), provided you have it enabled. You are responsible for protecting access to your computer.

Your API key

To use HeyEmma, you provide your own OpenAI API key. The key is stored locally on your device and is only sent to OpenAI's servers for transcription and text processing. We as developers never have access to your key.

Audio recordings

When you record speech, the audio is sent directly from your device to OpenAI's API for transcription. Audio recordings are not permanently stored — they only exist temporarily in memory during processing.

Screen vision (Emma Sees)

If you use Emma's vision feature, a screenshot of your screen is taken and sent to OpenAI's API. The image is not saved on your device and is deleted from memory immediately after sending. A screenshot is only taken when you actively ask for it — e.g. by saying "Hey Emma, look at my screen." Emma never monitors or records your screen on its own.

Third parties

HeyEmma uses OpenAI's API for transcription and text processing. Your use of OpenAI's services is subject to OpenAI's own terms of use and privacy policy. We are not responsible for OpenAI's processing of your data.

No tracking or analytics in the app

The Emma app collects no usage data, analytics, crash reports or other telemetry. The app only communicates with OpenAI's API and any webhook endpoints you configure yourself.

What HeyEmma does NOT do

To make it completely clear what we as a vendor do not have access to or do: • We run no server that receives your prompts, audio, transcriptions or screenshots. • We have no access to your OpenAI API key. • We do not log, read or analyze the content of your use. • We do not train models on your data — and cannot, as we never receive the data. (OpenAI also does not use API data for training by default; see OpenAI's API Data Usage Policy.) • We send no telemetry or crash reports from the app. • We do not share or sell user data to any third party. • We do not record your screen, microphone or keyboard in the background — Emma is only activated when you ask for it.

Use in a work or business context

HeyEmma is designed for personal productivity. If you use Emma as part of your job, or if your employer is considering deploying HeyEmma, it is your or your organization's own responsibility to ensure that this use is compatible with: • Your employer's IT, security and data processing policies. • GDPR and other applicable data protection rules — particularly if personal data about customers, colleagues, patients, clients or other third parties is processed. • Any confidentiality and professional secrecy obligations (e.g. in healthcare, legal, financial or public sector contexts). • OpenAI's own terms of use, which govern the actual AI processing. Because prompts, audio and screenshots are sent to OpenAI, as a rule of thumb you should avoid sending particularly sensitive information (health data, classified material, customer data without legal basis, personal information about third parties, etc.) through Emma — unless your organization has a separate agreement with OpenAI (e.g. Enterprise or Zero Data Retention). Such an agreement is not something HeyEmma enters into or administers on your behalf. If you as an employer are in doubt, we recommend having the use assessed by your own DPO or legal advisor before rolling Emma out across the organization.

Jurisdiction and data responsibility

HeyEmma as software and this website are governed by Danish law. Our own legal setup, customer relationships and purchase terms fall under Danish and EU law, including GDPR. When you use your own OpenAI API key through Emma, you additionally enter into a direct relationship with OpenAI. Processing of audio, text and images sent via the API takes place on OpenAI's infrastructure and is subject to OpenAI's terms, OpenAI's privacy policy and US law. We are neither data processor nor joint controller for that flow — you as the user are. We recommend that you read OpenAI's API terms and data usage policy before sending sensitive information. We are working on supporting alternative AI providers in the future, including European ones, so you can increasingly choose a provider that fits your compliance requirements.

Cookies on this website

We use essential cookies to save your language preference and remember your cookie consent. These cookies are necessary for the site to function correctly. With your consent, we may also use third-party marketing and analytics cookies/pixels — including Meta/Facebook Pixel — to measure and improve our advertising. These are only activated after you accept them in the cookie consent, and you can withdraw your consent at any time.

GDPR

We do not act as a data processor for your use of the Emma app, as all data processing happens locally on your device and directly between your device and OpenAI. The limited information we receive in connection with purchases and license administration is processed as data controller, solely for the purpose of delivering the product and providing support.

Your rights

Under GDPR you have the right to access, correct and delete any information we may hold about you. Contact us if you wish to exercise your rights or have any questions about privacy.

Changes

We reserve the right to update this privacy policy. Significant changes will be communicated via our website.

Contact

If you have questions about the privacy policy, you can contact us at hello@tryheyemma.com.