This page is the practical version of our privacy policy — written for a parent trying to decide whether Haklo is safe for their family, not for a lawyer. The full legal text lives at /privacy; the two say compatible things, but this page is what you'd actually want to read first.
The short version:
- We don't sell your family's data.
- We don't use your family's conversations to train AI.
- The AI only sees what's necessary for the moment of generating a coaching message or summary, and your family's words leave us only for that one call.
- Children under 13 are never seen by the AI under their real names — and never see AI surfaces themselves.
- When you delete your account, what you wrote is deleted.
The rest of this page explains what each of those means in practice.
What Haklo collects from your family
Account information
When you sign up, we store your email and a hashed password — the standard for any app you can sign into. If you set a display name or pick an emoji for a family member, that's stored too. None of this is sold or shared with advertisers.
Gathering content
What your family shares during the weekly gathering — one things, priorities, goals, kindness commitments — is stored as the family's record. That record is private to your family. Other Haklo families can't see it. Haklo employees don't read it as a routine matter; access is restricted and logged.
Heard notes
Each Heard note is stored as private to the recipient until the recipient chooses to share it back into the family. The sender can't read it back after sending. Other family members can't see it unless the recipient opts to share it. See Heard for the full design.
App usage signals
We track aggregate behavioral signals — how many gatherings happen, where users drop off in onboarding, which features are used. These signals are about behavior, not content. We don't link them to what was said in any specific gathering.
What we don't do
Train AI on your family's data
This is the question parents ask most. The answer is no.
Your family's gatherings, Heard notes, and coaching-message history are not used as training data. Not for our own models, not for the model provider's models. The principle is direct: families only share what they really mean if they trust the space is theirs. The product fails if you suspect you're being observed for someone else's benefit.
Sell your data
We don't sell, rent, or share family content with advertisers, data brokers, or anyone else. We don't have an ad business. We don't have an "anonymized data" product.
The way Haklo makes money is through Plus subscriptions. That's the only way. If you ever see anything that looks like Haklo monetizing your family's data, that's a bug, and we want to know about it.
Push you with notifications
This is more of an anti-pattern position than a privacy point, but it lives nearby: Haklo doesn't send push notifications about gatherings, doesn't send streak-loss anxiety, doesn't send "your family member missed you" guilt prompts. The app waits for you to come back to it on your own.
The AI
What does the AI actually see?
For each AI-generated coaching message or gathering summary, we send the AI provider a small, scoped payload:
- The relevant family member's recent gathering content (priorities, goals, check-in)
- The family's name and other members' names
- For coaching specifically, contextual signals about what kind of message to generate (e.g. "Monday Kickoff vs. Midweek Check-in")
The AI provider sees this payload long enough to generate one response. That's it. They don't retain it for training. They don't see other Haklo families. They don't see your family between messages.
Where does the AI run?
On servers we control. The actual call to the AI provider happens server-side, never from your phone. The API key Haklo uses for the AI never leaves our servers. This means even if your phone is compromised, an attacker can't impersonate Haklo to the AI provider or read your family's interactions with it.
Which AI?
Anthropic's Claude. We use the model server-side via the Anthropic API. Anthropic is bound by their commercial terms — including not training on customer-submitted data — when we call them this way.
Is there a way to turn off the AI?
The AI surface is opt-in by tier: it only runs for families on Haklo Plus. If you're on the free plan, there's no AI processing of your family's data because there's no AI surface to power. See Haklo Plus for what the AI layer adds (and what stays free without it).
For Plus families: the AI generates coaching messages and gathering summaries when you tap the relevant surfaces or when a gathering completes. There isn't a separate "pause the AI" toggle today — but turning off Plus stops the AI processing.
Children under 13
This is the area where parents push hardest, and reasonably so. Haklo follows COPPA — the U.S. law that protects children's online privacy — and our architecture goes a step further than COPPA strictly requires.
Children don't have their own accounts
A child under 13 in your family is a profile, not an account. They participate in gatherings through a parent's device. They don't sign in. They don't see the Coaching tab. They don't see the paywall.
Parental consent is recorded explicitly
When you add a child to your family, you walk through a consent screen that explains what data is involved and asks for your explicit consent on the child's behalf. A receipt of that consent is stored with a version number, so we have a record of what you agreed to when.
Children's names are sanitized before reaching the AI
This is the protection that goes beyond what's strictly required. Before any prompt is sent to the AI provider, the names of every under-13 child in your family are swapped out for placeholder tokens (think child #1, child #2). The AI sees the placeholders, generates its response, and the placeholders are swapped back to real names only after the response returns to our servers.
The AI provider never sees your young children's real names. If their logs were ever exposed, your children's names would not be in them.
What does deletion look like for a child profile?
You can remove a child profile from your family at any time in Settings → Family Members. Removing the profile removes them from future AI processing immediately. The contributions they made through your device (recorded under your authorship as the parent) follow the multi-author deletion model described below.
Teens (13–17)
Teens can have their own accounts. They see their own coaching messages, their own Heard notes, their own settings. They never see the paywall (Plus is family-level, only an adult can subscribe).
A teen's data gets the same protections as adults' — it's part of the family record, never sold, never used for training. Their AI coaching messages are generated using prompts calibrated for their age. If a parent later removes a teen from the family, the teen's authored content is deleted along with their profile (subject to the multi-author deletion model).
Deletion — what happens when you remove things
This is the area where a family product needs to be more careful than an individual one, because what you wrote often refers to people who are still using the app.
When you delete your account
What you authored gets deleted. Your gathering responses, your Heard notes, your reflections, your kindness commitments — all of it.
Other family members' entries that mention you stay where they are, because those entries are their writing about their experience. We can't delete what someone else authored on your behalf.
If you want a specific mention of you redacted from another family member's entry, you can ask us at hello@haklo.app and we'll work with the author to honor that where reasonable.
When you delete a single entry
You can delete a Heard note you've received (it disappears from your archive). You can edit your own profile information (display name, emoji, role). Gathering entries themselves are part of the shared family record and not editable after the gathering completes — your family relies on them as accurate memory of what was actually said.
Account deletion process
To delete your Haklo account, go to Settings → Account → Delete Account, or visit /delete-account from this site. We confirm the request and proceed within a reasonable window. Once deletion is processed, the account and your authored content are removed from active systems.
Where your data lives
Storage
Family content is stored in a managed database (Supabase / Postgres) with row-level access controls that restrict reads to members of the relevant family. Backups are encrypted at rest by the storage provider.
Who has access at Haklo
Engineering access to production data is limited and logged. We don't browse family content as a routine activity. When we need to investigate a specific support case, that access is logged and scoped.
What about server logs?
Standard server logs (request paths, error traces, latency) are kept for operational purposes — they don't include the contents of your family's gatherings or Heard notes. AI-call payloads are not logged.
Within the family
What can other family members see?
The defaults are: gatherings are shared (everyone sees what each member shared, that's the point); Heard notes are private to the recipient; coaching messages addressed to a specific member are private to them; arc pages are visible to all adult and teen members of the family (because they're a synthesized read of shared gathering content).
If any of those defaults change, this page will be updated.
Can my family see Heard notes I send?
Only if the recipient chooses to share the note back into the family. The default is private. The sender doesn't get a notification when this happens.
What's not on this page
This page covers the operational picture as of the date in the frontmatter. The legal commitments — what we contractually promise, what your rights are under various data-protection regimes, how to file a complaint — live in the /privacy policy. If anything on this page conflicts with the legal policy, the legal policy is authoritative.
We also do not yet offer a self-serve data export — being able to download your family's full record as a file. It's something we want to build; it's tracked but not yet shipped. If you need an export today, email hello@haklo.app and we'll work something out.
Missing something or got a question this page didn't answer? Let us know — we update this page from real questions.