Privacy Policy

1. Overview

Privacy is a priority at Happai. We understand you may share sensitive information, and we take that responsibility seriously. This Privacy Policy explains how Happai, Inc. ("Happai," "we," "us," or "our") collects, uses, discloses, and protects information when you use our websites, applications, and related online services (collectively, the "Platform").

 

By using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.

2. Definitions

  • "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) to an individual.
  • "Sensitive Personal Information" / "Special Category Data" (terms used in certain jurisdictions) may include information about health, mental health, or similar sensitive topics.
  • "Journal Data" means the content you enter into Happai such as journal entries, reflections, prompts, and similar private notes.
  • "Conversation Data" means messages and content exchanged when you interact with in-app tools (including any chat or guided exercises), as applicable.
  • "Usage Data" means information about how you use the Platform, including device and analytics signals.

3. Information We Collect

A. Information You Provide

Account and Profile Information

    • Name (if provided)
    • Email address
    • Date of birth (if collected during signup)
    • Account identifiers associated with your account

 

Journal Data and Conversation Data

 

  • Journal entries, responses to prompts, reflections, and other content you choose to input
  • Messages you exchange with in-app tools or services

 

Support and Communications

 

  • Information you provide when contacting support (e.g., support@happai.com), including message content and any attachments you send

 

B. Information Collected Automatically

Device and Technical Information

    • IP address
    • Device type and operating system version
    • App version, language settings, and similar technical identifiers

 

Approximate Location

    • General region derived from IP address or device settings (e.g., city/region). We do not require precise GPS location for core functionality unless explicitly presented to you.

 

Platform Usage Data

    • Screens or pages viewed, time spent, feature interactions, session counts, and timestamps
    • Performance logs and crash diagnostics

 

C. Information From Third Parties

Sign-In Providers (Apple / Google)If you choose Apple Sign In or Google Sign In, we receive information from them such as:

    • A unique account identifier
    • Your name and/or email address (depending on your provider settings and what you choose to share, including Apple's private relay email option)

 

Payment Platforms (Apple App Store / Google Play)If you purchase a subscription, your payment is processed by Apple or Google (not Happai). We may receive:

    • Confirmation that you purchased or renewed a subscription
    • Subscription status, product identifiers, and transaction/receipt metadata necessary to provide paid features and customer support

We do not receive your full payment card number.

4. Biometric Authentication

If your device supports Face ID / Touch ID (or similar), you may choose to enable biometric authentication for convenience. Biometric templates remain on your device and are controlled by your device operating system. Happai does not receive, store, or process your biometric data.

5. How We Use Information

We use Personal Information for the following purposes:

 

Provide and Operate the Platform

 

    • Create and administer accounts
    • Provide features you request and maintain core functionality
    • Authenticate users and maintain session security

 

Improve, Maintain, and Secure the Platform

 

    • Debugging, quality assurance, analytics, and performance monitoring
    • Detecting fraud, abuse, or security incidents
    • Enforcing our terms and protecting rights and safety

 

Communications

 

    • Respond to support requests
    • Send essential service announcements (e.g., security or policy updates)

 

Subscriptions and Billing Administration

 

    • Confirm subscription status and entitlements
    • Provide customer support related to subscriptions

 

Marketing (Where Permitted)

 

Send product updates or promotional communications where allowed by law and consistent with your choices.

You can opt out of marketing emails via the unsubscribe link, and you can manage push notifications in your device/app settings.

 

6. Sensitive / Special Category Data (Health-Adjacent Information)

Happai may process content that relates to your emotions, mood, mental well-being, or similar topics. In some jurisdictions (including the UK/EU), this may be considered special category data (health data) depending on context and how it is used.

 

Where required, we will rely on an appropriate legal basis and, where applicable, obtain explicit consent to process such data for certain purposes.

 

You can withdraw consent at any time by contacting us or by discontinuing use of features that require consent (where such controls are offered). Withdrawal does not affect processing already performed before withdrawal.

 

7. AI Features, Profiling, and Automated Insights

Happai may provide insights such as mood/happiness scoring, pattern detection, or content suggestions. These can involve automated processing and may be considered profiling under certain laws.

 

We strive to design these features to be helpful and user-controlled.

 

Where required by law, we will provide additional notices and choices about automated processing.

 

No medical advice: Happai is not a medical device and does not provide medical diagnosis or treatment.

 

Important implementation note: If any feature requires your content to be processed outside your device (e.g., by cloud services or AI providers), we will (i) use appropriate safeguards, (ii) limit access, and (iii) describe that processing in our vendor disclosures and/or in-product notices. If your architecture is truly "zero-knowledge" for specific data types, those data types cannot be decrypted by Happai.

 

8. How We Disclose Information

We do not disclose Personal Information except as described below:

Service Providers and Vendors

We share information with service providers that help us operate the Platform (e.g., hosting, analytics, customer support tooling, identity/authentication, subscription management). They may process Personal Information only on our instructions and subject to contractual confidentiality and security obligations.

Affiliates

We may share information with corporate affiliates for operational purposes consistent with this Privacy Policy.

Legal and Safety

We may disclose information if we believe in good faith it is necessary to:

  • Comply with law, regulation, legal process, or governmental request
  • Protect the rights, property, and safety of Happai, our users, or others
  • Enforce our agreements and policies

Business Transfers

If we are involved in a merger, acquisition, financing, due diligence, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to reasonable protections.

9. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information.

Encryption and Access Controls

  • We use encryption in transit (e.g., TLS) and encryption at rest where appropriate.
  • We use access controls designed to restrict internal access to systems and data.

End-to-End Encryption / Zero-Knowledge (If Applicable)

If you use features that provide end-to-end encryption for Journal Data, that means your Journal Data is encrypted on your device before it leaves your device and is designed so that Happai cannot decrypt it without your keys. In such a design:

  • Only you control the keys, and Happai cannot access plaintext Journal Data.
  • If you lose access to your keys, you may lose access to end-to-end encrypted content.

Key Backup (If Enabled)

If your encryption keys are backed up using a platform service such as iCloud Keychain (or an equivalent mechanism), that backup is governed by your device/platform settings and the platform provider's policies. You can control whether such backups are enabled through your device settings (where supported). No system is 100% secure. Despite safeguards, we cannot guarantee absolute security.

10. Tracking Technologies and Analytics

We may use cookies, SDKs, pixels, or similar technologies ("Tracking Tools") to operate the Platform, understand usage, and improve performance. Depending on your jurisdiction, you may be able to control certain Tracking Tools through consent banners, in-app settings, or device settings. Disabling Tracking Tools may affect functionality.

11. Data Retention

We retain Personal Information for as long as reasonably necessary to:

  • Provide the Platform
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain security and prevent abuse

Retention periods can vary depending on the data type and purpose. Where technically feasible, you may request deletion (see below). Note: if Journal Data is end-to-end encrypted and you control the keys, deletion and recovery may depend on the design and your device/account controls.

12. Your Privacy Rights and Choices

A. Account Controls

Where available, you may:

    • Access, export, or delete certain data via in-app controls (e.g., "delete my data")
    • Update account information in settings
    • Opt out of marketing emails via unsubscribe links
    • Disable push notifications in your device settings

B. UK/EU (GDPR / UK GDPR) Rights (If Applicable)

Depending on where you live, you may have rights to:

    • Access, correct, or delete Personal Information
    • Object to processing or request restriction
    • Data portability
    • Withdraw consent (where consent is the basis)
    • Lodge a complaint with your supervisory authority (e.g., the UK ICO)

Legal bases (UK/EU): We typically process Personal Information based on one or more of the following:

    • Performance of a contract (to provide the Platform)
    • Legitimate interests (e.g., improve and secure the Platform)
    • Compliance with legal obligations
    • Consent (where required, including for certain marketing and certain sensitive/special category processing)

C. California (CCPA/CPRA) Notice (If Applicable)

If you are a California resident, you may have rights to:

    • Know the categories of Personal Information we collected, used, and disclosed
    • Request deletion of certain Personal Information
    • Request correction of inaccurate Personal Information
    • Opt out of "sale" or "sharing" of Personal Information (as those terms are defined under California law)
    • Limit the use/disclosure of sensitive personal information (in certain circumstances)
    • Non-discrimination for exercising your rights

 

Sale/Sharing: We do not sell Personal Information in the traditional sense. If we engage in practices that are considered "sharing" under California law (e.g., certain cross-context behavioral advertising), we will provide appropriate opt-out mechanisms.

D. How to Exercise Rights

Email us at support@happai.com with your request. To protect users, we may verify your identity before fulfilling requests.

13. International Data Transfers

We may transfer information to countries other than where you live (including the United States) for hosting and processing. Where required, we use appropriate safeguards for international transfers (such as contractual protections).

14. Children's Privacy

The Platform is not intended for children under 16, and we do not knowingly collect Personal Information from children under 16. If you believe a child has provided Personal Information, contact support@happai.com and we will take steps to delete it.

15. Links to Third-Party Sites

The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their policies.

16. Data Breach Notification

We maintain procedures designed to identify, investigate, and respond to suspected security incidents. Where required by law, we will notify users and/or regulators of certain breaches within required timeframes.

 

Important: If certain data is end-to-end encrypted in a zero-knowledge architecture, a security incident affecting encrypted storage may not expose readable Journal Data without user keys.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post updates on the Platform and revise the "Last Updated" date above. Your continued use of the Platform after changes means you accept the updated policy.

18. Contact Us

Questions or requests: support@happai.com

Last updated: March 2, 2026

© 2026 Happai.

Privacy Policy

1. Overview

Privacy is a priority at Happai. We understand you may share sensitive information, and we take that responsibility seriously. This Privacy Policy explains how Happai, Inc. ("Happai," "we," "us," or "our") collects, uses, discloses, and protects information when you use our websites, applications, and related online services (collectively, the "Platform").

 

By using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.

2. Definitions

  • "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) to an individual.
  • "Sensitive Personal Information" / "Special Category Data" (terms used in certain jurisdictions) may include information about health, mental health, or similar sensitive topics.
  • "Journal Data" means the content you enter into Happai such as journal entries, reflections, prompts, and similar private notes.
  • "Conversation Data" means messages and content exchanged when you interact with in-app tools (including any chat or guided exercises), as applicable.
  • "Usage Data" means information about how you use the Platform, including device and analytics signals.

3. Information We Collect

A. Information You Provide

Account and Profile Information

    • Name (if provided)
    • Email address
    • Date of birth (if collected during signup)
    • Account identifiers associated with your account

 

Journal Data and Conversation Data

 

  • Journal entries, responses to prompts, reflections, and other content you choose to input
  • Messages you exchange with in-app tools or services

 

Support and Communications

 

  • Information you provide when contacting support (e.g., support@happai.com), including message content and any attachments you send

 

B. Information Collected Automatically

Device and Technical Information

    • IP address
    • Device type and operating system version
    • App version, language settings, and similar technical identifiers

 

Approximate Location

    • General region derived from IP address or device settings (e.g., city/region). We do not require precise GPS location for core functionality unless explicitly presented to you.

 

Platform Usage Data

    • Screens or pages viewed, time spent, feature interactions, session counts, and timestamps
    • Performance logs and crash diagnostics

 

C. Information From Third Parties

Sign-In Providers (Apple / Google)If you choose Apple Sign In or Google Sign In, we receive information from them such as:

    • A unique account identifier
    • Your name and/or email address (depending on your provider settings and what you choose to share, including Apple's private relay email option)

 

Payment Platforms (Apple App Store / Google Play)If you purchase a subscription, your payment is processed by Apple or Google (not Happai). We may receive:

    • Confirmation that you purchased or renewed a subscription
    • Subscription status, product identifiers, and transaction/receipt metadata necessary to provide paid features and customer support

We do not receive your full payment card number.

4. Biometric Authentication

If your device supports Face ID / Touch ID (or similar), you may choose to enable biometric authentication for convenience. Biometric templates remain on your device and are controlled by your device operating system. Happai does not receive, store, or process your biometric data.

5. How We Use Information

We use Personal Information for the following purposes:

 

Provide and Operate the Platform

 

    • Create and administer accounts
    • Provide features you request and maintain core functionality
    • Authenticate users and maintain session security

 

Improve, Maintain, and Secure the Platform

 

    • Debugging, quality assurance, analytics, and performance monitoring
    • Detecting fraud, abuse, or security incidents
    • Enforcing our terms and protecting rights and safety

 

Communications

 

    • Respond to support requests
    • Send essential service announcements (e.g., security or policy updates)

 

Subscriptions and Billing Administration

 

    • Confirm subscription status and entitlements
    • Provide customer support related to subscriptions

 

Marketing (Where Permitted)

 

Send product updates or promotional communications where allowed by law and consistent with your choices.

You can opt out of marketing emails via the unsubscribe link, and you can manage push notifications in your device/app settings.

 

6. Sensitive / Special Category Data (Health-Adjacent Information)

Happai may process content that relates to your emotions, mood, mental well-being, or similar topics. In some jurisdictions (including the UK/EU), this may be considered special category data (health data) depending on context and how it is used.

 

Where required, we will rely on an appropriate legal basis and, where applicable, obtain explicit consent to process such data for certain purposes.

 

You can withdraw consent at any time by contacting us or by discontinuing use of features that require consent (where such controls are offered). Withdrawal does not affect processing already performed before withdrawal.

 

7. AI Features, Profiling, and Automated Insights

Happai may provide insights such as mood/happiness scoring, pattern detection, or content suggestions. These can involve automated processing and may be considered profiling under certain laws.

 

We strive to design these features to be helpful and user-controlled.

 

Where required by law, we will provide additional notices and choices about automated processing.

 

No medical advice: Happai is not a medical device and does not provide medical diagnosis or treatment.

 

Important implementation note: If any feature requires your content to be processed outside your device (e.g., by cloud services or AI providers), we will (i) use appropriate safeguards, (ii) limit access, and (iii) describe that processing in our vendor disclosures and/or in-product notices. If your architecture is truly "zero-knowledge" for specific data types, those data types cannot be decrypted by Happai.

 

8. How We Disclose Information

We do not disclose Personal Information except as described below:

Service Providers and Vendors

We share information with service providers that help us operate the Platform (e.g., hosting, analytics, customer support tooling, identity/authentication, subscription management). They may process Personal Information only on our instructions and subject to contractual confidentiality and security obligations.

Affiliates

We may share information with corporate affiliates for operational purposes consistent with this Privacy Policy.

Legal and Safety

We may disclose information if we believe in good faith it is necessary to:

  • Comply with law, regulation, legal process, or governmental request
  • Protect the rights, property, and safety of Happai, our users, or others
  • Enforce our agreements and policies

Business Transfers

If we are involved in a merger, acquisition, financing, due diligence, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to reasonable protections.

9. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information.

Encryption and Access Controls

  • We use encryption in transit (e.g., TLS) and encryption at rest where appropriate.
  • We use access controls designed to restrict internal access to systems and data.

End-to-End Encryption / Zero-Knowledge (If Applicable)

If you use features that provide end-to-end encryption for Journal Data, that means your Journal Data is encrypted on your device before it leaves your device and is designed so that Happai cannot decrypt it without your keys. In such a design:

  • Only you control the keys, and Happai cannot access plaintext Journal Data.
  • If you lose access to your keys, you may lose access to end-to-end encrypted content.

Key Backup (If Enabled)

If your encryption keys are backed up using a platform service such as iCloud Keychain (or an equivalent mechanism), that backup is governed by your device/platform settings and the platform provider's policies. You can control whether such backups are enabled through your device settings (where supported). No system is 100% secure. Despite safeguards, we cannot guarantee absolute security.

10. Tracking Technologies and Analytics

We may use cookies, SDKs, pixels, or similar technologies ("Tracking Tools") to operate the Platform, understand usage, and improve performance. Depending on your jurisdiction, you may be able to control certain Tracking Tools through consent banners, in-app settings, or device settings. Disabling Tracking Tools may affect functionality.

11. Data Retention

We retain Personal Information for as long as reasonably necessary to:

  • Provide the Platform
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain security and prevent abuse

Retention periods can vary depending on the data type and purpose. Where technically feasible, you may request deletion (see below). Note: if Journal Data is end-to-end encrypted and you control the keys, deletion and recovery may depend on the design and your device/account controls.

12. Your Privacy Rights and Choices

A. Account Controls

Where available, you may:

    • Access, export, or delete certain data via in-app controls (e.g., "delete my data")
    • Update account information in settings
    • Opt out of marketing emails via unsubscribe links
    • Disable push notifications in your device settings

B. UK/EU (GDPR / UK GDPR) Rights (If Applicable)

Depending on where you live, you may have rights to:

    • Access, correct, or delete Personal Information
    • Object to processing or request restriction
    • Data portability
    • Withdraw consent (where consent is the basis)
    • Lodge a complaint with your supervisory authority (e.g., the UK ICO)

Legal bases (UK/EU): We typically process Personal Information based on one or more of the following:

    • Performance of a contract (to provide the Platform)
    • Legitimate interests (e.g., improve and secure the Platform)
    • Compliance with legal obligations
    • Consent (where required, including for certain marketing and certain sensitive/special category processing)

C. California (CCPA/CPRA) Notice (If Applicable)

If you are a California resident, you may have rights to:

    • Know the categories of Personal Information we collected, used, and disclosed
    • Request deletion of certain Personal Information
    • Request correction of inaccurate Personal Information
    • Opt out of "sale" or "sharing" of Personal Information (as those terms are defined under California law)
    • Limit the use/disclosure of sensitive personal information (in certain circumstances)
    • Non-discrimination for exercising your rights

 

Sale/Sharing: We do not sell Personal Information in the traditional sense. If we engage in practices that are considered "sharing" under California law (e.g., certain cross-context behavioral advertising), we will provide appropriate opt-out mechanisms.

D. How to Exercise Rights

Email us at support@happai.com with your request. To protect users, we may verify your identity before fulfilling requests.

13. International Data Transfers

We may transfer information to countries other than where you live (including the United States) for hosting and processing. Where required, we use appropriate safeguards for international transfers (such as contractual protections).

14. Children's Privacy

The Platform is not intended for children under 16, and we do not knowingly collect Personal Information from children under 16. If you believe a child has provided Personal Information, contact support@happai.com and we will take steps to delete it.

15. Links to Third-Party Sites

The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their policies.

16. Data Breach Notification

We maintain procedures designed to identify, investigate, and respond to suspected security incidents. Where required by law, we will notify users and/or regulators of certain breaches within required timeframes.

 

Important: If certain data is end-to-end encrypted in a zero-knowledge architecture, a security incident affecting encrypted storage may not expose readable Journal Data without user keys.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post updates on the Platform and revise the "Last Updated" date above. Your continued use of the Platform after changes means you accept the updated policy.

18. Contact Us

Questions or requests: support@happai.com

Last updated: March 2, 2026

© 2026 Happai.

Happai logo

Privacy Policy

1. Overview

Privacy is a priority at Happai. We understand you may share sensitive information, and we take that responsibility seriously. This Privacy Policy explains how Happai, Inc. ("Happai," "we," "us," or "our") collects, uses, discloses, and protects information when you use our websites, applications, and related online services (collectively, the "Platform").

 

By using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.

2. Definitions

  • "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) to an individual.
  • "Sensitive Personal Information" / "Special Category Data" (terms used in certain jurisdictions) may include information about health, mental health, or similar sensitive topics.
  • "Journal Data" means the content you enter into Happai such as journal entries, reflections, prompts, and similar private notes.
  • "Conversation Data" means messages and content exchanged when you interact with in-app tools (including any chat or guided exercises), as applicable.
  • "Usage Data" means information about how you use the Platform, including device and analytics signals.

3. Information We Collect

A. Information You Provide

Account and Profile Information

    • Name (if provided)
    • Email address
    • Date of birth (if collected during signup)
    • Account identifiers associated with your account

 

Journal Data and Conversation Data

 

  • Journal entries, responses to prompts, reflections, and other content you choose to input
  • Messages you exchange with in-app tools or services

 

Support and Communications

 

  • Information you provide when contacting support (e.g., support@happai.com), including message content and any attachments you send

 

B. Information Collected Automatically

Device and Technical Information

    • IP address
    • Device type and operating system version
    • App version, language settings, and similar technical identifiers

 

Approximate Location

    • General region derived from IP address or device settings (e.g., city/region). We do not require precise GPS location for core functionality unless explicitly presented to you.

 

Platform Usage Data

    • Screens or pages viewed, time spent, feature interactions, session counts, and timestamps
    • Performance logs and crash diagnostics

 

C. Information From Third Parties

Sign-In Providers (Apple / Google)If you choose Apple Sign In or Google Sign In, we receive information from them such as:

    • A unique account identifier
    • Your name and/or email address (depending on your provider settings and what you choose to share, including Apple's private relay email option)

 

Payment Platforms (Apple App Store / Google Play)If you purchase a subscription, your payment is processed by Apple or Google (not Happai). We may receive:

    • Confirmation that you purchased or renewed a subscription
    • Subscription status, product identifiers, and transaction/receipt metadata necessary to provide paid features and customer support

We do not receive your full payment card number.

4. Biometric Authentication

If your device supports Face ID / Touch ID (or similar), you may choose to enable biometric authentication for convenience. Biometric templates remain on your device and are controlled by your device operating system. Happai does not receive, store, or process your biometric data.

5. How We Use Information

We use Personal Information for the following purposes:

 

Provide and Operate the Platform

 

    • Create and administer accounts
    • Provide features you request and maintain core functionality
    • Authenticate users and maintain session security

 

Improve, Maintain, and Secure the Platform

 

    • Debugging, quality assurance, analytics, and performance monitoring
    • Detecting fraud, abuse, or security incidents
    • Enforcing our terms and protecting rights and safety

 

Communications

 

    • Respond to support requests
    • Send essential service announcements (e.g., security or policy updates)

 

Subscriptions and Billing Administration

 

    • Confirm subscription status and entitlements
    • Provide customer support related to subscriptions

 

Marketing (Where Permitted)

 

Send product updates or promotional communications where allowed by law and consistent with your choices.

You can opt out of marketing emails via the unsubscribe link, and you can manage push notifications in your device/app settings.

 

6. Sensitive / Special Category Data (Health-Adjacent Information)

Happai may process content that relates to your emotions, mood, mental well-being, or similar topics. In some jurisdictions (including the UK/EU), this may be considered special category data (health data) depending on context and how it is used.

 

Where required, we will rely on an appropriate legal basis and, where applicable, obtain explicit consent to process such data for certain purposes.

 

You can withdraw consent at any time by contacting us or by discontinuing use of features that require consent (where such controls are offered). Withdrawal does not affect processing already performed before withdrawal.

 

7. AI Features, Profiling, and Automated Insights

Happai may provide insights such as mood/happiness scoring, pattern detection, or content suggestions. These can involve automated processing and may be considered profiling under certain laws.

 

We strive to design these features to be helpful and user-controlled.

 

Where required by law, we will provide additional notices and choices about automated processing.

 

No medical advice: Happai is not a medical device and does not provide medical diagnosis or treatment.

 

Important implementation note: If any feature requires your content to be processed outside your device (e.g., by cloud services or AI providers), we will (i) use appropriate safeguards, (ii) limit access, and (iii) describe that processing in our vendor disclosures and/or in-product notices. If your architecture is truly "zero-knowledge" for specific data types, those data types cannot be decrypted by Happai.

 

8. How We Disclose Information

We do not disclose Personal Information except as described below:

Service Providers and Vendors

We share information with service providers that help us operate the Platform (e.g., hosting, analytics, customer support tooling, identity/authentication, subscription management). They may process Personal Information only on our instructions and subject to contractual confidentiality and security obligations.

Affiliates

We may share information with corporate affiliates for operational purposes consistent with this Privacy Policy.

Legal and Safety

We may disclose information if we believe in good faith it is necessary to:

  • Comply with law, regulation, legal process, or governmental request
  • Protect the rights, property, and safety of Happai, our users, or others
  • Enforce our agreements and policies

Business Transfers

If we are involved in a merger, acquisition, financing, due diligence, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to reasonable protections.

9. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information.

Encryption and Access Controls

  • We use encryption in transit (e.g., TLS) and encryption at rest where appropriate.
  • We use access controls designed to restrict internal access to systems and data.

End-to-End Encryption / Zero-Knowledge (If Applicable)

If you use features that provide end-to-end encryption for Journal Data, that means your Journal Data is encrypted on your device before it leaves your device and is designed so that Happai cannot decrypt it without your keys. In such a design:

  • Only you control the keys, and Happai cannot access plaintext Journal Data.
  • If you lose access to your keys, you may lose access to end-to-end encrypted content.

Key Backup (If Enabled)

If your encryption keys are backed up using a platform service such as iCloud Keychain (or an equivalent mechanism), that backup is governed by your device/platform settings and the platform provider's policies. You can control whether such backups are enabled through your device settings (where supported). No system is 100% secure. Despite safeguards, we cannot guarantee absolute security.

10. Tracking Technologies and Analytics

We may use cookies, SDKs, pixels, or similar technologies ("Tracking Tools") to operate the Platform, understand usage, and improve performance. Depending on your jurisdiction, you may be able to control certain Tracking Tools through consent banners, in-app settings, or device settings. Disabling Tracking Tools may affect functionality.

11. Data Retention

We retain Personal Information for as long as reasonably necessary to:

  • Provide the Platform
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Maintain security and prevent abuse

Retention periods can vary depending on the data type and purpose. Where technically feasible, you may request deletion (see below). Note: if Journal Data is end-to-end encrypted and you control the keys, deletion and recovery may depend on the design and your device/account controls.

12. Your Privacy Rights and Choices

A. Account Controls

Where available, you may:

    • Access, export, or delete certain data via in-app controls (e.g., "delete my data")
    • Update account information in settings
    • Opt out of marketing emails via unsubscribe links
    • Disable push notifications in your device settings

B. UK/EU (GDPR / UK GDPR) Rights (If Applicable)

Depending on where you live, you may have rights to:

    • Access, correct, or delete Personal Information
    • Object to processing or request restriction
    • Data portability
    • Withdraw consent (where consent is the basis)
    • Lodge a complaint with your supervisory authority (e.g., the UK ICO)

Legal bases (UK/EU): We typically process Personal Information based on one or more of the following:

    • Performance of a contract (to provide the Platform)
    • Legitimate interests (e.g., improve and secure the Platform)
    • Compliance with legal obligations
    • Consent (where required, including for certain marketing and certain sensitive/special category processing)

C. California (CCPA/CPRA) Notice (If Applicable)

If you are a California resident, you may have rights to:

    • Know the categories of Personal Information we collected, used, and disclosed
    • Request deletion of certain Personal Information
    • Request correction of inaccurate Personal Information
    • Opt out of "sale" or "sharing" of Personal Information (as those terms are defined under California law)
    • Limit the use/disclosure of sensitive personal information (in certain circumstances)
    • Non-discrimination for exercising your rights

 

Sale/Sharing: We do not sell Personal Information in the traditional sense. If we engage in practices that are considered "sharing" under California law (e.g., certain cross-context behavioral advertising), we will provide appropriate opt-out mechanisms.

D. How to Exercise Rights

Email us at support@happai.com with your request. To protect users, we may verify your identity before fulfilling requests.

13. International Data Transfers

We may transfer information to countries other than where you live (including the United States) for hosting and processing. Where required, we use appropriate safeguards for international transfers (such as contractual protections).

14. Children's Privacy

The Platform is not intended for children under 16, and we do not knowingly collect Personal Information from children under 16. If you believe a child has provided Personal Information, contact support@happai.com and we will take steps to delete it.

15. Links to Third-Party Sites

The Platform may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their policies.

16. Data Breach Notification

We maintain procedures designed to identify, investigate, and respond to suspected security incidents. Where required by law, we will notify users and/or regulators of certain breaches within required timeframes.

 

Important: If certain data is end-to-end encrypted in a zero-knowledge architecture, a security incident affecting encrypted storage may not expose readable Journal Data without user keys.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post updates on the Platform and revise the "Last Updated" date above. Your continued use of the Platform after changes means you accept the updated policy.

18. Contact Us

Questions or requests: support@happai.com