What we keep. What we don't.

What we collect

Almost nothing on our servers. Skimmilk runs in your browser; the audio stream from a tab or your microphone is processed in real time and discarded.

• Audio: streamed to our transcription provider (Deepgram) and our reasoning provider (Anthropic) in small chunks. Never written to disk on our side. Never kept.
• Transcripts and receipts: stored in your browser's localStorage (or the equivalent on iOS). They never leave your device unless you turn on sync.
• Account email: only if you create one — to send your receipt, manage your subscription, or recover your data. Transactional only, never added to a marketing list.
• Waitlist email: if you ask to be notified before launch, your address goes to Loops (our email provider) so we can tell you when Skimmilk opens. Opt-in, and every email carries a one-click unsubscribe.
• Anonymous usage events: via PostHog, to know which features are used and which break. No conversation content. No transcripts. You can opt out (see "Your controls").

What we don't collect

• Audio recordings. Ever.
• The content of your transcripts, receipts, or notes.
• Browsing history outside the tabs Skimmilk is actively listening to.
• Contacts, calendars, or other apps' data.
• Anything Skimmilk doesn't need to render its own UI.

Where your data lives

Your sessions stay on the device they were captured on. The Chrome extension uses the browser's local storage. The iOS app uses the device's native local store. Neither sends conversation content to our servers by default.

If you turn on sync — explicitly, from the settings panel — your data is end-to-end encrypted before it leaves the device. Only your devices can read it; we cannot.

Third parties

Skimmilk relies on a few outside providers. The ones that handle your audio and transcripts process them and discard them; the ones for our waitlist and site analytics keep only what their job needs.

• Deepgram — speech-to-text. Audio chunks are streamed for transcription. Their privacy policy states no training on customer data.
• Anthropic — Claude API for highlight detection and recap synthesis. Transcript spans are sent for analysis. Their commercial terms state inputs are not used for training.
• PostHog — anonymous usage analytics. No transcript content sent. Opt-out lives in the extension's settings panel and on this site (clear localStorage to reset).
• Loops — email provider for the launch waitlist. If you give us your email, it lives there until you unsubscribe. See their privacy policy.
• Google Analytics — aggregate traffic on this marketing site (which pages, where visitors arrive from). No conversation content, and it does not run inside the product. See Google's privacy policy.

What we never do

• Sell your data. Not to advertisers, not to data brokers, not to anyone.
• Use your conversations to train any model. Yours stay yours.
• Add a bot to your meeting. Skimmilk listens from your machine; no extra participant in the call.
• Quietly throttle you if usage spikes. If something breaks the cost math, we write to you.

Your controls

• Delete a session: swipe or trash from the saved-sessions list, in the extension or the iOS app. Local delete is immediate.
• Export your data: Markdown or MCP from any session menu. Yours to take with you.
• Opt out of analytics: set localStorage.sm_analytics_optout = "1" in DevTools, or use the toggle in the extension's settings panel.
• Close your account: email hello@harkobject.co. We delete subscription records and the email tied to them within seven days.

Children

Skimmilk is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has used Skimmilk and you want their data removed, email hello@harkobject.co.

Changes to this policy

If we change something material, we'll change the effective date at the top and post a short note on the home page for thirty days. If you have an account, we'll also email you.