Privacy Policy

01

What we hold

Your account details (your name, address and role), the profile you fill in, your chats, the memories and the shared story built from them, the pictures and clips made for you, your relationships and their level, your credit balance and what you spent, and the app’s own safety notes and error logs.

02

What we do with it

We use it to run the app for you: to write replies, to let companions remember you, to make pictures and clips you ask for, to work out who is around and how a friendship is going, to count credits, and to keep the app safe — including checking for signs somebody may be under 18, or that a companion is being pushed past its limits.

03

The AI services behind it

Hallune is built and hosted on Base44, and every AI request goes through Base44’s built-in AI services. Your message, and the context a companion needs to answer it, are sent to write the reply. Replies are written by Anthropic’s Claude (Claude Sonnet 5 at the time of writing); memory reading, safety checks and other background reading use Google’s Gemini (Gemini 3.8 Flash); short video clips use Google’s Veo (Veo 3.1 Fast); and pictures are made by Base44’s image-generation service. An administrator can switch to another model Base44 offers (from Anthropic, OpenAI or Google) for testing. Spoken replies, and speech-to-text when you use the app’s own voice feature, are handled by ElevenLabs. Age checks are handled by Persona, which tells the app whether you are over 18. Each provider processes the content on our instructions to produce the answer.

[JEREMY TO CONFIRM: the provider behind Base44 image generation, where each provider processes data (country), and each provider’s own retention terms.]

04

Typing with your voice

If you use your keyboard’s mic to type, your phone or browser may process your speech (for example through Apple or Google) to turn it into text. If you use the app’s own voice feature, the audio is sent to ElevenLabs to turn it into text, and spoken replies are made by ElevenLabs too. Hallune doesn’t keep the audio you record.

05

What is never done

Your data is not sold, and it is not used for advertising. Your chats are private to you: nobody else in the app can read them, and the people who run it see usage totals and safety notes rather than transcripts. A safety note holds what kind of thing was seen and how often, at most three short excerpts of your own words, and never your name or address.

[Placeholder: whether anything is used to train or improve models, and the stance once decided.]

06

What is kept after you leave

When you delete your account, the app clears your personal records for: companions, chats, memories, stories, lives, relationships, gifts, credits, overrides, reports and your profile. What stays is anonymous — usage totals with your name and account id taken off them, so billing still adds up — and one line recording that an account was deleted. Safety records also stay, trimmed to the minimum: which account it was, what kind of thing it was, the signals as types and counts, the dates, the count, and what the app did about it. No excerpts, no companion and no name or address are kept, and where an account was closed because it could not be confirmed as an adult we also keep a one-way hash of the address, so the same person cannot simply sign up again and skip the check. Ordinary safety records are pruned on deletion; explicitly preserved evidence is the exception described below.

07

Safety, and the limits of privacy

This is not a confidential service in the way a doctor or a lawyer is. To keep the service safe and lawful, the app records safety notes about an account: what kind of thing was seen and how often, never a conversation, and at most three short excerpts of the person’s own words of up to 200 characters each. Messages are read automatically to pick up signs somebody may be under 18, or that a companion is being pushed past its limits, and refused attempts — explicit requests, attempts to get past the rules, asking to meet in real life — are counted over a rolling thirty days. Those notes are read only by the people who run the app, and every time one is opened that reading is itself written down. Repeated attempts quietly limit an account: first a note in the chat, then photographs and voice paused for a week, then suspension while a person reviews it. Where a message suggests a serious risk to life, the app points the person to real crisis lines for their country. The app does not contact anybody on their behalf. Where a request involves sexual content about a child, the account is suspended at once and the exact words are preserved, in one field only administrators can read, so they can be reported to the authorities; that record is kept even if the account is deleted.

[Placeholder: whether there is any other situation in which information would be disclosed, and to whom.]

08

Your choices

You can download everything held about you as a zip of JSON files, correct or clear your profile, take a companion out of your lobby, and delete your account entirely. None of it needs to be asked for by email.

09

How long things are kept

Your personal app records are kept while your account exists and are cleared by account deletion, apart from the anonymous totals and safety records described above. Deleting app records does not confirm immediate erasure of stored file copies, external provider records or backups, or revocation of every existing authentication session. Those retention and revocation arrangements must be verified before public launch. A safety record raised because an account could not be confirmed as an adult is kept for twelve months after it is closed, and then deleted. Preserved words in a case involving a child are kept until our lawyer says they may be deleted, even if the account is gone.

[JEREMY TO CONFIRM: AI usage and error logs are kept for 12 months and then deleted. Also confirm how long anonymous totals and operational backups are kept, and how backups are handled.]

10

Children

The app is for adults of 18 or over, and accounts are not knowingly created for children. Where an account turns out to belong to somebody under 18, it is closed and its data deleted.

11

Cookies, analytics and contact

The app signs you in with a session and keeps the small amount of state needed to work; it does not sell advertising or track you across other sites.

[JEREMY TO CONFIRM: the cookie and analytics wording, and the contact email for privacy questions.]

12

Who runs Hallune, and complaints

Hallune is run by [JEREMY TO CONFIRM: legal entity name] (ABN [JEREMY TO CONFIRM: ABN]), [JEREMY TO CONFIRM: registered address], Australia. Privacy questions and complaints go to [JEREMY TO CONFIRM: contact email]. If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).

13

If you need help now

In Australia: 000 in an emergency; Lifeline 13 11 14; Beyond Blue 1300 22 4636; Suicide Call Back Service 1300 659 467; Kids Helpline 1800 55 1800 (ages 5 to 25). All are available 24/7. The Crisis protocol page explains what the app does when a message suggests somebody is in crisis.

14

Changes to this policy

When this policy changes we will say so here, and where the change is significant we will tell people before it takes effect.

15

The beta waitlist on hallune.com

If you join the closed-beta waitlist on hallune.com, we keep the email address you give, and anything else you choose to add (first name, country, device and what draws you to Hallune), your confirmation that you are 18 or older and that you agreed to be contacted, and where you came from if the link you followed said so (for example a campaign tag). It is used only to contact you about the beta. The form is sent to the same Base44 backend as the app; your IP address is used briefly, in hashed form, to stop repeated submissions and is not stored with your sign-up. The site sets no cookies and has no analytics.

[JEREMY TO CONFIRM: how long waitlist entries are kept if somebody is not invited, and how to ask to be removed (e.g. email hello@hallune.com).]