Privacy Policy

HAL is a personal assistant you use over text message. This policy explains what information HAL ("we", "us") collects, how we use and protect it, and the choices you have. By texting HAL or connecting an account, you agree to this policy.

Information we collect

• Messages you send HAL and HAL's replies, so HAL can help you and remember context.
• Basic profile details you tell HAL (e.g. your name, timezone, home/work area, saved contacts) and things you ask HAL to remember.
• Your phone number / handle, used as your account identifier.
• Google account data, only if you choose to connect Google (see below).
• Billing information is handled by our payment processor (Stripe); we do not store your card details.

Google user data

Connecting Google is optional and done from your own chat with HAL. If you connect, HAL requests only the access needed for the features you use:

• Google Calendar (read and create events) — to check your schedule and add events when you ask.
• Gmail (read messages, create drafts, send on your request) — to summarize or surface relevant email, draft replies, and send email only when you explicitly confirm.

HAL uses this data solely to provide these features to you, in response to your requests. We do not sell Google user data, use it for advertising, or use it to train generalized AI/ML models.

HAL's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your information

• To understand your requests and respond helpfully.
• To remember context and preferences so HAL improves over time for you.
• To send timely, useful proactive messages (which you can turn off).
• To operate, secure, and improve the service, and to process payments.

How your information is shared

We share data only with service providers who process it on our behalf to run HAL, under confidentiality obligations — not for their own purposes:

• AI model providers (e.g. Google Gemini, Anthropic) process the content of your requests to generate HAL's responses. These providers do not use API data to train their models.
• Infrastructure (Railway) for hosting and our database.
• Payments (Stripe) to process subscriptions.
• Look-up services you trigger (e.g. web search, maps, weather) receive only what's needed to answer that request.

We may also disclose information if required by law, or to protect the rights and safety of our users. We do not sell your personal information.

Data retention and deletion

You are in control of your data:

• Text "/clear" to erase your current conversation history.
• Text HAL "disconnect google" to immediately revoke and delete your stored Google tokens.
• Email privacy@tryhal.xyz to request deletion of your account and all associated data. We honor deletion requests promptly.

We retain data only as long as needed to provide the service or as required by law.

Security

Access tokens for connected accounts are encrypted at rest (AES-256). Data is transmitted over encrypted connections (TLS). Each user's data is siloed so it is not accessible to other users. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

HAL is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes to this policy

We may update this policy; material changes will be reflected by the "last updated" date above.

Contact

Questions or requests: privacy@tryhal.xyz.