Privacy

Last updated: November 11, 2026

In short: HyperPowers runs on your computer. Your projects, transcripts and frames never reach us. In regular use, the plugin makes only three kinds of connections: a daily license check with Gumroad, a daily update check with this website, and the AI requests you start, which go straight to the provider you choose. Two optional engines are downloaded only when you press their install button (see section 1).

Who is responsible for your data

Julian Esteban Avila Panqueva, an individual based in Bogotá, Colombia, who makes HyperPowers ("we", "us"), is the data controller for the data described here. Contact: support@hyperpowers.app. This page is also our data processing policy under Colombian Law 1581 of 2012 and Decree 1377 of 2013.

1. The HyperPowers plugin

License check. Once a day, HyperPowers sends your license key and the product ID to Gumroad to confirm that your license is valid. Nothing else is sent. As with any internet request, Gumroad can see your IP address. The plugin uses Gumroad's answer only to check your license. This request goes to Gumroad, not to us.

Update check. Once a day, HyperPowers reads a public version file at hyperpowers.app. The request carries no license key and no personal identifier. Our hosting provider records it like any website visit (see section 2). You can turn it off in Settings.

AI features. When you use an AI feature, the transcript or frame it needs is sent directly from your computer to the provider you selected (Anthropic, OpenAI or Google), using your own subscription or API key. Nothing passes through our servers, and we never receive it. That provider's terms and privacy policy apply.

Stored only on your computer. Your API keys, your license key and the date of the last check, a random ID that keeps a reinstall from using a second activation, and your settings. API keys are stored as plain text in the panel’s local storage on your computer, so protect access to your computer. HyperPowers never sends them to us. Your HyperChat history (in the .chat-superpowers folder of your user folder) and the transcripts the plugin creates are also kept on your computer, outside the data folder. To remove everything, uninstall HyperPowers, delete its data folder and those files.

Engine downloads. HyperAudio’s Cleanup & stems engine is installed only when you press its install button. The installer downloads the open-source tools and models it needs from GitHub (including the uv installer and Python 3.11), PyPI, Hugging Face and Meta (dl.fbaipublicfiles.com, for the Demucs models), which see your IP address like any download. Nothing about you or your projects is sent.

Local transcription. When you press install in Settings › External tools, the Whisper model (ggml-large-v3-turbo, about 1.6 GB) is downloaded from Hugging Face (huggingface.co/ggerganov/whisper.cpp). The whisper-cpp program is installed with Homebrew or by you. After that, transcription is 100% local: your audio never leaves your computer.

No tracking. The plugin has no analytics, telemetry or crash reporting.

2. This website

This site does not use cookies, advertising or tracking scripts. It only stores your Night or Paper choice in your browser’s local storage (localStorage), which never leaves your device. Cloudflare, our hosting and network provider, processes standard request data, such as IP address, browser type, time and page requested, to deliver and protect the site.

3. Purchases through Gumroad

Gumroad sells HyperPowers as merchant of record and processes your payment under its own privacy policy. We never see your full card details. Gumroad shares with us: your name (if you give it), your email, your country and postal code (which Gumroad may estimate from your IP address), your purchase details and your license key.

We use this data to deliver and verify your license, answer support requests, process refunds, send you product updates and important notices about HyperPowers through Gumroad, and keep the tax and accounting records the law requires. You can unsubscribe from product emails at any time.

4. Support emails

When you write to support@hyperpowers.app, Cloudflare forwards your message to our mailbox, hosted by Google. We use your message only to answer you.

5. Legal bases

If the GDPR or UK GDPR applies to you, we rely on: performance of our contract with you (license, updates, support, refunds); legal obligation (tax and accounting records); and legitimate interests (security, preventing license abuse, and product emails to customers, which you can stop at any time).

6. Who we share data with

We do not sell or rent your data. We share it only with the providers that help us run HyperPowers: Gumroad (sales and licenses), Cloudflare (website, hosting and email forwarding) and Google (our mailbox). We also share it with authorities when the law requires it.

7. International transfers

We are based in Colombia, and our providers process data in the United States and other countries. We rely on the safeguards those providers offer for international transfers.

8. How long we keep data

Purchase and tax records: for as long as tax and accounting law requires, generally at least five years. Support emails: up to three years after our last exchange. Website request logs: for the period Cloudflare keeps them.

9. Your rights

You can ask to access, correct, update or delete your data, object to or restrict its use, receive a copy of it, and withdraw any consent you gave. Under Colombian law, you can also ask for proof of your authorization, ask how your data has been used, and file a complaint with the Superintendencia de Industria y Comercio. In the EU and UK, you can complain to your data protection authority.

Write to support@hyperpowers.app. We answer questions within 10 business days and complaints within 15 business days, as Colombian law requires, and in any case within one month. Data held by Gumroad or by your AI provider is also covered by their own policies, and you can contact them directly.

10. Security

We keep the data we hold to a minimum and protect the accounts that store it with strong passwords and two-factor authentication.

11. Children

HyperPowers is not intended for anyone under 16.

12. Changes

If we change this policy, we will update the date at the top. If a change materially affects data you have already given us, we will tell you by email.