Hilma

Description Features Permissions Security & Compliance

Your team's updates are scattered across channels, threads, and meetings. Important context gets lost. You schedule standups that eat into focused work time. And you have no idea how your team is actually feeling.Hilma fixes this.How It WorksHilma sends friendly DM prompts to your team at the right time, in their timezone. Team members respond when it suits them — via modal or natural conversation. Then Hilma's AI synthesizes everything into a single, readable summary posted to your channel.Structured Check-ins That Actually Get Done • Daily Recaps — End-of-day reflections on accomplishments and blockers. Summarized for the next morning.
• Weekly Planning — Monday prompts help your team set intentions for the week. No kickoff meeting required.
• Bi-weekly Retros — Async retrospectives that capture wins, challenges, and improvements from everyone.
• Private Journal — Personal reflections only you can see, accessible via /hilma journal or the dashboard.Interactive RetrospectivesRun real-time collaborative retros without a meeting. Share a link, and your team can add notes, group themes, vote on priorities, and generate action items — all in one place. AI suggests groupings and recommends next steps.Wellness & Mood TrackingEvery check-in includes mood tracking plus two rotating wellness questions from validated frameworks. Hilma aggregates this anonymously — you see team trends across 8 wellness domains, never individual responses. Spot burnout risks before they escalate.AI CoachDM Hilma to chat about your wellness, mood trends, or work patterns. The AI Coach draws on your check-in history and journal to give personalized guidance. Team leads and managers can ask about team-level insights too.Need team insights in a channel? Just @Hilma with your question.AI-Powered SummariesStop reading 15 individual updates. Hilma's AI identifies themes, highlights blockers, and creates a summary your team can scan in 30 seconds. Generate on-demand or let scheduled summaries post automatically.Web DashboardYour command center at hilma.app/dashboard:
• Team analytics — mood trends, participation rates, health scores
• Personal journey — your check-in history, streaks, and pending items
• AI Coach — full chat interface with scope selection
• Summaries archive — browse and filter all generated summaries
• Retro management — create sessions, review past retros, export results
• Workspace settings — schedules, templates, wellness toggles, integrationsBuilt for Real Teams :white_check_mark: Timezone-aware prompts for distributed teams
:white_check_mark: Configurable templates — morning or evening, customize field labels
:white_check_mark: Privacy-first — individual data never exposed, only aggregates
:white_check_mark: Works across channels — different teams, different schedules
:white_check_mark: Goal tracking — set weekly goals, rate achievement in retros
:white_check_mark: Streak tracking — motivate consistent participation
:white_check_mark: Conversational check-ins — reply naturally instead of filling formsGet Started in 2 Minutes 1. Install Hilma to your workspace
2. Invite @Hilma to a team channel
3. Choose your check-in template (morning or evening)
4. Your team starts receiving prompts automaticallyNo complex setup. No training required. Your team already knows how to use Slack.AI Disclaimer: Hilma uses artificial intelligence to generate summaries, insights, and coaching recommendations. AI-generated content may occasionally be inaccurate, incomplete, or not fully reflect your situation. Always use your own judgment and verify important information. AI features are not a substitute for professional advice. Note: Hilma's AI Assistant uses Slack's AI Assistant container, which requires a paid Slack plan. All other Hilma features work on any Slack plan.

Hilma will be able to view:

Hilma will be able to do:

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General

Privacy & data governance

Data retention policy

Data Retention Policy Last updated: January 2026 This policy describes how Hilma (operated by Mindtrack AB) retains and manages Customer Data collected through our platform. 1. Retention Periods Hilma retains Customer Data according to the following schedule: Data Type Retention Period Check-in entries (daily recaps, weekly plans) Life of subscription* Retrospective sessions and notes Life of subscription* AI Coach conversation history Life of subscription* Wellness responses (CMWI) Life of subscription* Journal entries Life of subscription* AI-generated summaries Life of subscription* OAuth tokens (Slack/Teams) Until workspace disconnection Integration tokens (ClickUp, Linear, etc.) Until integration disconnection * Data is retained for the duration of your active subscription to enable historical trend analysis, AI-powered insights, and long-term wellness tracking. Data is deleted upon workspace removal or user request. 2. Why We Retain Data Hilma retains your data to provide maximum value from our platform: Historical trends: Wellness scores, team health, and check-in patterns are most valuable when viewed over time. AI context: The AI Coach uses your history to provide personalized, contextual guidance rather than generic advice. Retrospective insights: Long-term patterns help teams identify recurring issues and track improvement over time. 3. User-Initiated Deletion Users can request deletion of their data at any time: Journal entries: Users can delete individual journal entries immediately through the dashboard. AI Coach conversations: Users can delete conversation history through the dashboard. Full account deletion: Contact support@hilma.app to request complete deletion of all personal data. Requests are processed within 30 days. 4. Workspace Disconnection When a workspace disconnects Hilma (uninstalls the Slack/Teams app): OAuth tokens are deleted within 24 hours Workspace is marked as inactive All user data for that workspace is scheduled for deletion within 30 days Integration tokens for that workspace are deleted immediately 5. Backup Retention Database backups are maintained for disaster recovery: Daily automated backups with 7-day retention Backups are stored in the same region as the primary database Backups are encrypted at rest using AES-256 Deleted data may persist in backups for up to 7 days after deletion 6. Legal Obligations Hilma may retain certain data beyond standard retention periods when required by law, legal proceedings, or legitimate business interests (such as fraud prevention). In such cases, data will be retained only for the minimum period necessary. 7. Contact For questions about this policy or to request data deletion, contact us at support@hilma.app. Mindtrack AB Organization number: 559383-2859 Sweden Updated policy: https://hilma.app/policies/data-retention

Data archiving and removal policy

Data storage policy

Data Storage Policy Last updated: January 2026 This policy describes how Hilma (operated by Mindtrack AB) stores and protects Customer Data. 1. Data Storage Infrastructure Hilma stores Customer Data using the following infrastructure: Component Provider Location Primary Database Supabase (PostgreSQL) AWS eu-central-2 (Zurich) Application Hosting Vercel Global Edge Network, Functions: Stockholm (arn1), Frankfurt (fra1), Washington D.C. (iad1) Static Assets Vercel CDN Global Edge Network Database Backups Supabase Same region as primary database 2. Encryption 2.1 Data at Rest Database: All data stored in Supabase is encrypted at rest using AES-256. OAuth tokens: Slack and Teams authentication tokens are encrypted using AES-256-GCM before storage. Integration tokens: Third-party integration tokens (ClickUp, Linear, etc.) are encrypted using AES-256-GCM. Backups: Database backups are encrypted using AES-256. 2.2 Data in Transit All connections use TLS 1.3 encryption. HSTS (HTTP Strict Transport Security) is enforced. API communications with third parties (Slack, Teams, OpenAI) use TLS. 3. Access Controls Application-level authorization: All database queries are scoped to the authenticated user's workspace. Role-based access: Users can only access data they are authorized to view based on their role (employee, team lead, manager). Admin access: Administrative access is limited to authorized Mindtrack AB personnel. Audit logging: Database access is logged for security monitoring. 4. Data Segregation Customer data is logically segregated: Each workspace (Slack team or Teams organization) has a unique identifier. All queries are scoped to the workspace level. Cross-workspace data access is prevented at the application level. Individual user data within a workspace is protected based on role permissions. 5. No Local Storage Hilma does not store Customer Data on local servers or employee devices. All data processing occurs in our cloud infrastructure. No customer data is stored persistently outside of our designated cloud providers. 6. Third-Party Data Processing Some Customer Data is processed by third-party services: Service Purpose Data Retention OpenAI AI summaries, coaching, analysis Zero retention (API usage only, not used for training) Anthropic AI summaries, coaching, analysis Zero retention (API usage only, not used for training) Resend Transactional emails 30 days Paddle Payment processing As required by law For a complete list of sub-processors, see our Sub-processors page. 7. Security Measures Rate limiting: API endpoints are rate-limited to prevent abuse. Webhook verification: All incoming webhooks from Slack and Teams are cryptographically verified. CSRF protection: Cross-site request forgery protection on all form submissions. Security headers: Strict Transport Security, X-Content-Type-Options, X-Frame-Options, and other security headers are enforced. Input validation: All user inputs are validated and sanitized. 8. Incident Response In the event of a data breach or security incident, Hilma will: Investigate and contain the incident within 24 hours Notify affected customers within 72 hours as required by GDPR Report to relevant supervisory authorities as required Provide detailed incident reports upon request 9. Contact For questions about this policy or our data storage practices, contact us at support@hilma.app. Mindtrack AB Organization number: 559383-2859 Sweden Updated policy: https://hilma.app/policies/data-storage

Data center location(s)

Switzerland

Data hosting details

Cloud hosted, see Data storage policy.

Data hosting company

Vercel, Supabase

App/service has sub-processors

yes

Guidelines for sub-processors

https://hilma.app/sub-processors

App/service uses large language models (LLM)

yes

LLM model(s) used

OpenAI GPT-4o and GPT-4o-mini, Anthropic Claude Sonnet 4.5

LLM retention settings

Hilma uses zero-retention API tiers for both OpenAI and Anthropic. Prompts and responses are not stored by providers after processing. User content is never used for model training. hilma.app/policies/ai-llm

LLM data tenancy policy

AI features use OpenAI and Anthropic APIs (US-based, zero retention tier). User data is never used for model training. Prompts/responses are not stored beyond immediate processing. hilma.app/policies/ai-llm

LLM data residency policy

All LLM processing occurs in the United States via OpenAI and Anthropic APIs. User data remains within provider infrastructure only during request processing. No data is transferred to other regions. hilma.app/policies/ai-llm

Certifications & compliance

Security