Privacy Policy

Account information. When you create an account by signing in with Google or Apple, we receive your email address and, where your provider shares them, your name and profile picture. If you continue as a guest, we create an anonymous account and collect no email or name; if you later upgrade a guest account, your saves are linked to your new account.

Content you save. When you share a reel or video to Hako, we store the link you shared, publicly available metadata about that content (such as its caption, creator handle, and thumbnail), and the results of our AI analysis of it (such as a detected recipe, location list, or workout). We also store the collections you create and your search queries, which are processed to run your searches.

Approximate region. We derive your country from your device's language/region setting (for example, "en_PH") to show region-relevant results such as local streaming availability. We do not collect GPS or precise location data.

Push notification tokens. If you enable push notifications, we store your device's push token so we can send them. You can turn notifications off at any time in your device settings.

Purchase information. Payments for Hako Premium are processed by Apple (or Google Play on Android). We never receive your card number or payment credentials. We receive your subscription status (such as active, expired, or trial) through our subscription-management provider, RevenueCat.

Usage analytics. We collect information about how you use the app, such as which features you use, basic device information, and crash and error reports, through our analytics provider, PostHog.

Feedback. If you open the in-app feedback board (provided by UserJot), your account ID and, for signed-in users, your email, name, and profile picture are shared with it so your feedback is attributed to you.

We do not collect sensitive personal information (such as health, biometric, or financial account data), we do not buy information about you from data brokers or marketing partners, and we do not use your information for targeted advertising.

We use your information to:

• Create and manage your account and keep you signed in
• Analyze and organize the content you save, and make it searchable
• Generate experiences (recipes, itineraries, workouts, shopping lists) from your saves
• Enforce plan limits and manage your subscription
• Send push notifications you have enabled
• Respond to support requests and feedback
• Understand how the app is used so we can fix problems and improve it
• Keep the Services secure and prevent abuse
• Comply with legal obligations

We share information only with service providers that we use to run Hako, and only what each needs to do its job:

• Supabase, for our database and authentication
• Railway, for API hosting
• Google (Gemini), OpenAI, and Perplexity, for AI analysis of the content you save (see Section 5)
• Apify, for retrieval of publicly available metadata for the social media links you save
• RevenueCat, for subscription management; Apple and Google process payments
• PostHog, for usage analytics
• Firebase Cloud Messaging (Google), for push notification delivery
• UserJot, for the in-app feedback board
• Resend, for transactional email (for example, if you joined our waitlist)

We do not sell your personal information, and we do not share it with advertisers or data brokers. We may disclose information if required by law, or in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.

Our website (usehako.app) does not set cookies and does not use analytics or tracking technologies. It is a static informational site. If this changes, we will update this policy and, where required, ask for your consent first.

Hako's core feature is AI analysis of the content you save. When you save a reel or video, its publicly available content and metadata, such as video frames, captions, and on-screen text, are processed by third-party AI providers (Google Gemini, OpenAI, and Perplexity) to classify it, extract details (such as ingredients, places, or exercises), and generate embeddings that power search. Your search queries are also processed by OpenAI to run semantic search.

The content sent to AI providers is the public social media content you chose to save and your search queries, not your name, email, or account details. To stop this processing, stop saving content, or delete your account (see Section 10).

You can sign in with your Google or Apple account. When you do, we receive basic profile information from that provider, typically your email address, name, and profile picture. We use it only to create and identify your account. Your use of Google or Apple sign-in is also governed by that provider's own privacy policy. With Sign in with Apple, you can choose to hide your real email address.

We keep your personal information for as long as you have an account. When you delete your account (see Section 10), it is deactivated immediately and permanently deleted after a 30-day grace window, during which you can restore it by signing back in. After the grace window, your profile, saves, collections, push tokens, and other personal records are permanently deleted.

Because the same public reel may be saved by many users, our analysis of public social media content is stored once and shared across the users who saved it. Deleting your account removes your connection to that content; the analysis of the public content itself, which contains no information about you, may be retained.

We use appropriate technical and organizational measures to protect your information, including encrypted connections (HTTPS), row-level security on our database so users can only access their own records, and access controls on our infrastructure. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

The Services are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us personal information, contact us at [email protected] and we will delete it.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. We honor these rights for all users regardless of location:

• Delete your account and data: in the app, go to Profile and choose Delete Account. This starts the deletion process described in Section 7.
• Access, correct, or export your data: email us at [email protected] and we will respond within a reasonable timeframe consistent with applicable law.

If you are in the European Economic Area or the UK, you also have the right to lodge a complaint with your local data protection authority.

Some browsers and mobile operating systems include a Do-Not-Track ("DNT") setting. No uniform standard for honoring DNT signals has been finalized, and we do not currently respond to them. Our website does not track visitors in any case (see Section 4).

Yes, we will update this policy as needed to stay accurate and compliant. The "Last updated" date at the top reflects the latest revision. If we make material changes, we will notify you in the app or by other prominent notice.

Email: [email protected]

Post:
Jhudiel Bayotlang
Legazpi St. Legazpi Village
Makati, Metro Manila 1229
Philippines