Skip to content

Privacy

What we know about you, which is very little.

Human RM is built so that the private thing stays private by architecture rather than by promise. This page explains exactly what that means in practice.

Who this is

Human RM is published by ADJAH LLC and built by Lawrence E. Adjah. Questions about anything on this page go to support@humanrm.com and are answered by a person.

Your contacts stay on your Mac

Human RM reads your Address Book locally and writes everything it knows into a single file inside your own user folder. Names, numbers, email addresses, photos, groups, the text of every message you have sent and the record of how each one went — all of it lives on your machine.

There is no contact upload, no sync, and no account required to send a message. We could not produce your address book if we were asked for it, because we have never had it.

How messages are sent

Texts are sent by driving the Messages app already signed in on your Mac, so they travel exactly as they would if you had typed them yourself. Nothing about a text passes through us.

Email is sent through your own Gmail account over Google’s API, using a token stored encrypted in your macOS Keychain. We never see your password, and the token never leaves your Mac.

Optional email tracking

If you turn on open and click tracking, and only then, outgoing emails carry a small invisible image and their links are routed through our redirect service. That service receives the recipient address, subject, and tracked link destinations for that specific message. When an image loads or link is opened, it records roughly when, the connecting IP address and approximate location, the mail client or browser user agent, and which link was clicked.

What it does not receive is your address book, message body, attachments, Gmail password, or Gmail authentication cookies. Turn tracking off and no tracking record is created.

If you create remote dashboard access, we store cryptographic hashes of the access code and session token. The dashboard session is kept in a secure, HTTP-only cookie and expires after 30 days. Access codes expire after one year. You can explicitly connect access codes from two Human RM installations to combine their tracking views without sharing either installation’s private signing key.

You can delete tracking records at any time by asking, and they are removed for good.

Payments

Payments are processed by Stripe. Your card details go to Stripe directly and are never seen by, or stored on, anything we run. We receive a record that a plan was purchased and the email address on the receipt.

Analytics

This website measures aggregate page views so we know which pages are worth writing. It does not build a profile of you, follow you to other sites, or sell anything about you to anyone.

Getting in touch

For anything about your data — a question, a deletion, a correction — write to privacy@humanrm.app and a person will answer.

Last updated September 2026