Privacy by design: why Hathi never trains on your messages

Most AI services say they care about privacy. Few build it into the design. We designed Hathi so that your messages cannot be used to train AI, ours or anyone else's.

What "privacy by design" actually means

Privacy by design is not a marketing slogan. It is a legal standard under GDPR, and it means privacy is considered at every stage of engineering, not added afterwards. For Hathi, this means we process your raw messages to generate a response and extract memories. We do not keep them in a form that could be used to train AI.

When you send a message, Hathi's own systems handle it. Our own AI, mostly, writes the reply and pulls out memories. We keep the message only for delivery status, and we never add it to a training set.

Where your messages are processed

Hathi's memory runs on our own systems. For some tasks we ask a third-party AI provider to help, and we choose providers whose terms keep your content private and stop them seeing what you send. DeepInfra is one example. Before anything leaves our systems, we strip or blur identifying detail, so the provider cannot rebuild what you sent. Your memory stays with us.

The result: a third party does not retain or log your data, or use it for training. You can see, export or delete everything Hathi remembers.

“Privacy starts with knowing exactly where your data travels. Hathi's memory runs on our own systems, and identifying detail is stripped before anything leaves them.”

Your rights, built in

Under GDPR, you have the right to access, correct, export, and delete your personal data. Hathi makes these rights practical, not theoretical. You can export your entire memory as a file with one click. You can delete individual memories, or delete everything when you close your account.

We also use the minimal data necessary. We mask phone numbers, store only what's needed for message routing, and keep logs only as long as required for security and fair-use enforcement.

Privacy is not a feature you opt into. It is the default, and it always will be.