Privacy

The app collects nothing.

Hermes connects only to the Hermes Agent servers you add. We, Caffeinated Code, never see your conversations, your keys or how you use the app.

What the app does

• Hermes talks directly to the Hermes Agent gateways and backends you add, such as a Mac mini, a home server, or an address on Tailscale or HTTPS. Your messages, images and files go only there.
• API keys, session tokens and sign-in cookies for those servers are stored in the Apple Keychain on your device.
• Your settings stay on your device.

What the app does not do

• No accounts: there is nothing to sign up for.
• No analytics, advertising or tracking SDKs.
• No server of ours between you and your Hermes. The one service we run is the optional notification relay below, and it never sees what your notifications say.

Notifications

Hermes Agent can't reach Apple's push service by itself. If you add the hermes-app-push plugin to your gateway, the plugin seals each notification on your gateway for each of your devices, so only that device can open it. Our relay at push.hermesapp.dev hands the sealed notification to Apple, which delivers it to your device, where Hermes opens it.

• The relay accepts only sealed notifications with a generic title, such as "Hermes needs your OK". It can't read them.
• It keeps no content and no device list: only a record for each gateway that registered (an ID, a hashed secret, when it was last used and how many notifications it sent) and short-lived rate-limit counters.
• Its logs record only the kind of push and Apple's answer.

Updates on the Mac

The Mac app checks for new versions with Sparkle, which fetches the update feed and release files from GitHub. Those requests carry no personal information beyond what any web request does, such as your IP address, and are governed by GitHub's privacy policy.

Your Hermes server

What happens on the Hermes Agent server you run, including the models and services it calls, is up to you and that server's configuration. See the Hermes Agent docs.

This website

hermesapp.dev has no cookies, no analytics and no third-party requests. It is served by Vercel, which keeps standard server logs.

Contact

Questions? Write to support@caffeinatedcode.co. Caffeinated Code is the developer of Hermes.

Last updated October 17, 2026.