HAB PRIVACY NOTICE Seller: Habpal Ventures LLC, a Michigan limited liability company. Business address: 3008 Elmhurst, Royal Oak, MI 48073. Contact: hab.aisupport@gmail.com Last updated: 31 October 2026 SHORT VERSION: HAB runs on your own PC. Your chats, accounts, memories, voice, pictures and mailbox stay on your PC. The seller does not keep them (what the seller does keep is listed below), and nothing is used for advertising or ad tracking. The only time your messages leave home is when you allow an online brain (see below); HAB asks you first. WHAT STAYS ON YOUR PC - Accounts and passwords (passwords are stored only as salted hashes), chats, what HAB remembers about you, the mailbox, family messages, pictures and videos, notes, your Library files, helpers, settings, logs, and smart-home settings. - The Business tab (HAB Business or Everything): the money log, imported sales files, worker accounts, job runs and work screenshots all stay on your PC. The seller never receives them. When you import an Etsy Sold Orders file, HAB reads it on your PC and keeps only, for each order, the date, the order number, the amounts worked out from it (the order value less discounts plus shipping, Etsy's card processing fee, and an estimate of Etsy's other fees) and whether it was cancelled or refunded. It does not keep the original file or any buyer names or addresses. It also keeps a short import history: when, who, the file's name, how many lines were added and the sales total. Other CSV files are read the same way (date, amount and description only). - If you add workers, you decide what they can see, and you must tell them what is recorded. - Contractor paperwork (the maker's own copy only; customer copies don't have it): for people who work for the owner's business as contractors, HAB keeps their legal name, business name, address, tax number (SSN or EIN), tax type, how they want to be paid (for example a PayPal or Zelle handle), the signed agreement and their tax form choice. The tax number is locked with Windows on that PC and is never stored as plain digits. Only the owner sees everyone's paperwork; each contractor sees their own. The tax pack and 1099 copies show only the last 4 digits of a tax number, except the copy the owner saves to a flash drive for the tax preparer, which has the full numbers. None of it is sent to the seller. - Your voice: talking to HAB is turned into text on your own PC (the microphone is only used while you have the mic on). Voice ID keeps a short voiceprint (numbers, not a recording) on your PC, only if you teach HAB your voice. When HAB hears a voice he doesn't know, he may ask "who's talking?"; the answer saves that voice's voiceprint under the name given, on that PC only. When HAB is sure a known voice is talking, he may keep a few more voiceprints of it (up to 8, still numbers, not recordings) so he knows that voice when it sounds excited, tired or upset. A voiceprint can be deleted by that person, by whoever taught it, or by an admin, in Settings -> Voice & talking -> Who's talking. - What HAB remembers: HAB keeps short facts about each person (likes, family, routines, health needs like allergies) to help them better. You can see, add, delete and put back your own in Settings -> People & safety -> Memory (or Menu -> What HAB remembers). A deleted or changed fact stays in a short "put back" list (the last 30) on your PC until newer ones push it out; deleting your account removes it all at once. The owner of your HAB can see and manage everyone's, so tell HAB nothing you wouldn't want the owner to know. - Safety counts: when someone mentions suicide or self-harm, HAB shows the 988 Suicide & Crisis Lifeline and notes on the PC that a referral happened (the time and the account, never the words), so the yearly count some states ask for can be made. If you turn on the Sweet & flirty personality, HAB notes on the PC when you confirmed you're 18+. - Trusted phones: for each phone you trust, HAB keeps on the PC a scrambled copy of that phone's secret, its name and type, and when it was added and last used, plus how long it stays unlocked. Remove a phone in Settings -> Trusted phones. - The Icon Cup (habpal.com/pick-icon, while the vote for HAB's icon is open): it keeps your picks, how far you got, and the name you type (optional), plus a scrambled fingerprint of your internet address (keyed, so it can't be turned back into the address) to count one vote per person. Votes inside the HAB app are tied to your account instead. It's used only to pick HAB's icon and is deleted when the cup closes. - Reports you send with "Report this reply" go to the owner of your HAB (in their inbox), on the same PC. - The owner's chat log: every chat with HAB is also kept in a log on the home PC (logs/chatlog) so the owner can look after the family. Only the owner can open it, and only after typing his or her password again. It never leaves the PC. - A recovery email, only if you add one (Settings -> Account & devices). HAB keeps the address on your PC and uses it only to email you a 6-digit code to check it is yours and, if you forget your password, to let you reset it: never for marketing, never shared. The code is sent from HAB's own email address (a mail account set up by the owner, or by the seller on HAB Cloud copies), so that mail service handles that one message. WHAT CAN LEAVE YOUR PC, AND WHEN - Web lookups: when HAB looks something up for you (web search, reading a page, Wikipedia, research papers, weather, maps, prices and stock), the search words or page address go to that website, as when you browse. - HAB Brain (the online brain that comes with HAB): only if the owner switches it on (a PC set up with the online brain and a paid plan has it on from the start) AND you allow it (HAB asks each person first, and the same yes covers the online builder brain used by the Workshop and Build with HAB). Then the messages you send go through the seller's HAB Brain service to the AI provider it uses (through OpenRouter) to be answered. The service passes them on without storing them; it keeps only counts (when, which copy of HAB, how many words) to share the cost fairly. The AI provider handles them under its own privacy terms. - Other online AI brains: only if the owner connects one (OpenRouter, OpenAI, Google Gemini, Anthropic, xAI, DeepSeek or Mistral) in Settings -> AI brain. Then the messages sent to it go to that service, under its own privacy terms. Free OpenRouter brains are run by providers that may keep or learn from what is sent to them; the owner can limit that in the privacy settings of the OpenRouter account. "Offline mode" stops that at any time. - Online video (Runway): only if you add your own Runway key. The words of your video request, and a start picture if you pick one, go to Runway to make the video. - Product photos: if the owner adds a Google Vision key, photos you ask HAB to identify for shopping go to Google. - Phone notifications: only if you turn them on for a phone (Settings -> Account & devices). Then a short note (a title and a preview of about 140 characters, never whole messages; private items only say "Something new in HAB") goes from your PC through your browser's push service (Microsoft, Mozilla, Google or Apple, depending on your browser or phone) to that phone. It is end-to-end encrypted, so they pass it on but can't read it. - Bug reports and ideas: only if the owner of your HAB ticks "Send bug reports and ideas to HAB's maker" (Settings -> Account & devices; off to start). Then the words of a 🐞 report or an idea, the screen it was on, the kind of device, recent app errors, HAB's version and this copy's licence key go to the seller, so they can be fixed. The licence key identifies the copy, and so the buyer, to the seller. The report holds no person's name, chats or passwords. - Helper PCs: chats can be processed by other PCs in your home that the owner added as helpers. - Phone access away from home: only if the owner turns on "Use HAB away from home" (HAB Relay) or sets up Tailscale. With HAB Relay, your phone's connection passes through the seller's relay server to your PC, end-to-end encrypted: the encryption ends on your own PC, so the relay can't read anything. It only sees which HAB address was asked for, when, and how much data passed. With Tailscale, traffic goes through Tailscale, encrypted. Your family's web address (for example smiths.habpal.com) gets its own security certificate, and every certificate is listed in public certificate logs, so the address itself is public. Pick a name that isn't your surname if you prefer. - Licence check: if a copy of HAB runs without a valid key, or with a key from another PC, it sends the seller a short alert (through the ntfy.sh notification service) containing ONLY the key's id (if there is one) and HAB's version number. No names, chats or other data. - Updates: when HAB checks for updates, it asks the seller's update address (habpal.com/updates) for the newest version number. It sends nothing about you, only what any web request carries (your PC's internet address). - Downloads: HAB downloads AI models, voices and tools from their makers' sites (Hugging Face, GitHub, Ollama). Those sites see the download like any web request (your PC's internet address); HAB sends them no account or chat data. THE PHONE APP - The HAB app on your phone is a window onto the HAB on your PC. It keeps your login and a few display preferences on the phone; everything else is on your PC. It asks for the microphone only for talking to HAB, and for your local network only to find your HAB PC. - The seller collects no data through the app: no analytics, no advertising identifiers, no tracking. CHILDREN - HAB is for adults (18 and over). It is not meant for children, and the seller does not knowingly collect information from anyone under 18. Making an account asks you to confirm that you are 18 or older. - If you think a child has used HAB, the owner of that HAB can delete the account (Settings -> Family & safety -> People), or write to us at the address below. WHAT THE SELLER KEEPS - If you buy HAB Plus, HAB Business or Everything: the name and email PayPal gives us, the plan, the PayPal subscription id and your licence key's id. We use them to send your key, to switch the paid features off when a subscription ends, and for our tax records. Kept 7 years (tax law). - If you ask for a free key: the name and email you send us, the key we issue and its id, kept as long as the key is active and then up to 12 months. Used only to send and support your key; you can ask us to delete it. - HAB Brain usage: for each copy, how many messages and words (counts, never the words themselves) per month, to keep the monthly allowance fair. Kept 12 months. - Licence checks: once a day a copy asks the seller "is this key still good?" and sends the key's id and a one-way fingerprint of your PC (not your name, files or chats). The seller keeps up to 20 fingerprints per key, to stop one key being shared on many PCs, and deletes them when the key ends or you ask. - Bug reports and ideas (only if the owner switched them on), and emails you send us: kept 12 months, then deleted. - To see or delete what we keep about you, email hab.aisupport@gmail.com. Purchase records we must keep for tax are kept for the time the law requires. - HAB Brain sends messages through OpenRouter to AI providers that agree not to keep or train on them. KEEPING AND DELETING - Your data stays until you delete it. In the app you can delete a chat, a memory, a voice, or your whole account: Settings -> Account & devices -> Delete my account. That deletes your account and everything HAB keeps about you (chats, memories, settings, voice, mail and family messages, pictures and videos, helpers and Library collections), straight away and for good. It also removes your lines in the owner's chat log, reports you made, bug reports you sent, the safety log, and bug reports still waiting to go to the seller. - The owner account can't use Delete my account: the owner removes HAB and everything in it by uninstalling it from the PC. CONTACT: hab.aisupport@gmail.com