Privacy policy

Last updated 1 January 2026

Hathi Ltd is a UK-registered data controller. This policy is written in plain English because privacy is the whole point of Hathi, not a footnote.

The promise

We never use your messages to train AI models — ours or anyone else's. Your conversations are used only to answer you and to build your memory, which you can view, export or delete at any time from your dashboard.

What we store

• Your account email and subscription status (via Stripe).
• The channels you connect (WhatsApp, iMessage) and a masked phone number.
• The memories Hathi forms from your requests — visible and deletable on the Memory & data page.
• Message counts for fair-use accounting. We count messages, never their content.

Your rights (GDPR)

You can export a machine-readable JSON copy of everything Hathi remembers from the Memory & data page. You can delete any single memory instantly, or purge everything at once.

Deleting your account triggers a cascading erasure — memories, channels, usage records and your Stripe customer are removed, completed within 30 days, as required by GDPR Article 17. Your subscription is cancelled immediately with no further charges.

Fonts and third parties

We self-host our fonts, so no EU user data is sent to Google Fonts. We use Stripe for payments and Supabase for authentication and storage; both act as processors under our instructions.

Contact

Questions or a data request? Contact us and we'll respond promptly.