Privacy policy

1. Who we are

Haplo, LLC (“Haplo,” “we,” “us”) makes the apps listed below and runs the website at haploapp.com. This policy explains what each one collects, what it doesn't, and what rights you have. It replaces our previous privacy notice dated May 27, 2025.

Haplo, LLC · 1402 N Steiwer Ln, Newberg, OR 97132 · support@haploapp.com

2. What each app collects, at a glance

“Nothing” means exactly that: those apps have no Haplo server to send your content to. They do make ordinary network requests to third parties for specific features, which are listed in Section 6.

3. The website

haploapp.com runs no analytics, no advertising trackers, and no third-party tracking scripts. We do not use cookies to profile you. If you create an account or sign in, we set a session cookie that keeps you signed in; it is strictly necessary and expires when your session does.

Our web host records standard server logs, including IP address, request time, and user agent, for security and reliability. Some pages load app icons, screenshots, and ratings directly from Apple's iTunes API, so Apple receives those requests.

If you contact us, sign up for an update list, or submit a support request, we keep what you send us so we can respond.

4. Health and fitness data

Cinder and Haplo AI can read from and write to Apple Health (HealthKit) with your permission. Cinder uses heart rate, calories, workouts, and route data to show live metrics and track training. Haplo AI can read health data so you can ask questions about it in conversation.

Haplo never receives your health data. It stays on your device and in Apple Health. We do not upload it, store it on our servers, sell it, share it with advertisers or data brokers, or use it for advertising, marketing, or model training. Apple's HealthKit rules prohibit those uses and we follow them.

You can review or revoke health permissions at any time in Settings → Privacy & Security → Health, or inside the Health app. Revoking access does not delete data already written to Apple Health; you can delete that in the Health app.

If you connect Strava in Cinder, that is a direct link between your device and your own Strava account, authorised by you through Strava's sign-in. Data you push goes to Strava under Strava's privacy policy, not to us. You can disconnect it in Cinder's settings or from your Strava account.

5. Location, photos, microphone

Location. Cinder uses precise location while in use to record running and cycling routes and calculate distance. Routes are stored on your device and in Apple Health. We do not receive them. Location is only accessed while you have an outdoor workout active and you have granted permission.

Photos. Bilbo can scan your photo library's location metadata, on your device, to award passport stamps for landmarks you have already visited. It reads metadata only, the scan runs locally, and neither your photos nor the results are transmitted anywhere.

Speech. Bilbo can transcribe videos you share with it to pull out places and plans. Transcription runs on your device.

Every one of these is permission-gated by iOS. You can grant or revoke each independently in Settings, and the app keeps working without them, minus that feature.

6. Third parties our apps contact

• Wikipedia / Wikimedia (Bilbo) — Bilbo sends a place name to fetch that location's photograph. Wikimedia sees the request and your IP address, so it can see which places appear in your itinerary. It does not receive your itinerary, your account (there isn't one), or anything else.
• Hugging Face (Haplo AI) — hosts the AI models you choose to download. It sees the download request and your IP address, not your prompts.
• Google Search and other tools (Haplo AI) — Haplo AI's language model runs entirely on your device. If you explicitly turn on a tool for a message — web search, browser, maps, or calendar — that specific request is sent to the relevant service. Your other conversation content is not. Tools are off unless you select them.
• Financial Modeling Prep (Haplo AI Investing) — supplies market data and quotes.
• Strava (Cinder, optional) — see Section 4.
• Apple — handles all purchases, subscriptions, and refunds. We never see your payment details. Apple gives us anonymised sales and subscription reports.
• Google AdMob (Barrier only) — see Section 7.

7. Advertising

Barrier is the only app that shows ads. It uses Google AdMob to serve rewarded ads as part of how the app works. AdMob may collect device and usage identifiers and use them for ad personalisation under Google's policies. You can limit this in Settings → Privacy & Security → Tracking and Settings → Privacy & Security → Apple Advertising, and through Google's ad settings.

No other Haplo app contains advertising or an advertising SDK. Bilbo, Cinder, Haplo AI, and Haplo AI Investing contain no analytics or tracking SDKs of any kind.

8. AI processing

The AI features in Bilbo, Cinder, and Haplo AI run models locally on your device. Your prompts, chats, itineraries, workouts, and generated images are processed on the device and are not sent to Haplo. We do not use your content to train any model. The exception is the optional tools described in Section 6, which send only the request you invoke them with.

9. What we do not do

• We do not sell or share your personal information, as those terms are defined under California law, and we have not in the preceding twelve months.
• We do not sell, share, or monetise health, location, or photo data — ever.
• We do not train AI models on your content.
• We do not knowingly collect information from children under 13. If you believe a child has provided us information, email support@haploapp.com and we will delete it.

10. Retention

For Haplo AI Investing, we keep your account details and watchlist for as long as your account is active. Delete your account in the app or email us and we will delete the record. Support emails are kept as long as needed to resolve the issue and for a reasonable period afterwards. Server logs are kept short-term for security. Content that never leaves your device is under your control — deleting the app deletes it.

11. Your rights

Everyone. Email support@haploapp.com to access, correct, export, or delete anything we hold. We will not charge you or treat you differently for asking.

California (CCPA/CPRA). You have the right to know what we collect, to delete it, to correct it, to opt out of sale or sharing (we do neither), and to limit use of sensitive personal information. We do not use sensitive personal information for anything beyond providing the features you asked for.

EU, UK, EEA and Switzerland (GDPR). You have rights of access, rectification, erasure, portability, restriction, and objection, and the right to complain to your local data protection authority. Where we process data, our lawful bases are performing our contract with you (running your account), consent (device permissions, which you can withdraw at any time), and legitimate interests (security and reliability).

Washington, Nevada, and other consumer health data laws. Health and fitness data handled by our apps stays on your device and in Apple Health. We do not collect, receive, store, share, or sell consumer health data, so there is nothing on our side to disclose, delete, or opt out of. You control the data through iOS permissions and the Health app.

12. Security

Keeping data on your device is the main protection here — most of what our apps handle never exists on a server we run. For Haplo AI Investing, account data is transmitted over TLS, passwords are stored hashed, and credentials on device are held in the iOS Keychain. No system is perfect, and we cannot guarantee absolute security.

13. International transfers

Our servers are in the United States. If you use Haplo AI Investing from outside the U.S., your account data is transferred to and processed there, with appropriate safeguards including Standard Contractual Clauses where required.

14. Do Not Track

We do not track you across sites, so there is nothing for a Do Not Track signal to turn off. We do not respond to DNT headers.

15. Changes

We will update this policy as the apps change. The effective date at the top will change, and we will flag material changes in the app or by email where we have your address.

16. Contact

Haplo, LLC
1402 N Steiwer Ln, Newberg, OR 97132
Email: support@haploapp.com