HAUMM

legal — early access

Privacy Policy

Last revised November 11, 2026

Haumm is in early access and still changing. This short policy says plainly what happens to your information while we're in beta.

The short version

  • Your journal is private. No one else using Haumm can see it, and nothing in it is public unless you share it yourself.
  • We don't sell your data, show ads, or use your writing to train AI. Nothing you write is ever used for advertising.
  • You can export or delete everything, any time.
  • If Haumm is ever sold, these promises go with your journal. No one who takes Haumm over can train AI on your writing, and you'll hear from us first, with time to take your journal and go (more below).

What we collect

  • Your journal: entries and their dates, photos, videos, voice notes and transcripts, tasks, habits, gratitude, notes, Commonplace, and Quiet sessions.
  • Your account: email and password, or your Google sign-in details.
  • Your birth month and year, and where you live (country, and state in the US), asked once before your first page so Haumm can follow the rules where you live. We keep the date you agreed to these terms too.
  • Your email, if you join early access, so we can invite you in. If you tick the box, we'll also send Kit's occasional letters. Kit's letter is for adults: in the app, the box shows only once you're 18. Unsubscribe any time.
  • Basic technical info: things like IP address and browser type, which our servers log to keep Haumm running and secure.
  • Error reports: when something breaks in the app, a short report of what went wrong, where in Haumm's code, the page it happened on (without anything that points to an entry), and your browser and device type. Haumm cleans your writing and account details out before a report is sent, and Sentry is set not to keep your IP address.
  • How the app gets used: visits, and which parts of Haumm are opened (never what's in them), so we know what to improve.
  • Messages you send us, including beta feedback.

Photos are shrunk before they're saved, and can keep details from your camera, like where they were taken.

How we use it

To run Haumm and sync it across your devices, to fix bugs and improve the app during beta, and to email you about your account. We may contact beta testers to ask for feedback; just tell us if you'd rather we didn't.

Who helps us run Haumm

Your data is stored with Supabase. Each night a backup copy of your photos, videos and voice notes goes to Backblaze, made by a job that runs on GitHub. The files pass through a GitHub machine, which encrypts them, names included, before they leave, so Backblaze holds only scrambled files that only we can open. The app is hosted by Lovable, the website and the early-access list by Netlify, and Haumm's own AI does two jobs, and nothing else: turning voice notes and dictation into text, only when you ask (when you select Transcribe on a voice note, or when you dictate), and reading imported files to find where entries begin, their dates, and any headings you wrote (the first 160 characters of each paragraph, and the file's name, are sent). That content goes through Lovable's AI service to Google's Gemini models. Under their terms today (Lovable's privacy policy; Google's terms and usage policies), neither trains AI with it, except that Google may use it to train the systems that check for abuse. Our Lovable project is set not to keep it; Google may keep it for up to 55 days to check for abuse, then deletes it. We read their terms again whenever we change how this works. Error reports go to Sentry, so we can find and fix bugs. Haumm cleans the reports it sends of anything it can find that points to you or your writing, and our Sentry account is set not to keep IP addresses. Lovable, which hosts the app, also sees errors as they happen and which pages are opened, as part of running it. If you use Google sign-in or Google Drive import, Google is involved too (see Google data below). Haumm's fonts on this website load from Google Fonts, so Google sees your IP address and browser when a page opens. The app's fonts come from Haumm itself. Email you send to support@haumm.com is kept in Google Workspace.

If you connect an AI app, it can read your entries, and your Commonplace and Insights unless you keep them private. It sees your photos, videos and voice recordings only if you choose to share them (all of them, or only ones you've kept), and never letters you've sealed until a later date. You choose all of this in Settings → Connections. It can never change or delete anything you've put in Haumm. Your conversations happen in that app, under its own rules; Haumm doesn't see them. You can disconnect it in Settings → Connections. For now, Claude is the only AI app you can connect; we'll add others only after we've checked them. This is separate from the two jobs above: Haumm runs those itself through Gemini, which isn't connected to your journal and sees only what each job sends.

Beyond the services named here, your information goes only where you choose to send it, with one exception (below).

Google data

Haumm connects to Google only if you choose to.

  • Google sign-in gives us your name, email address, profile picture, and Google account ID. We use them only to create your account, sign you in, and fill in your first name, which you can change.
  • Google Drive import uses Google's file picker and the narrowest Drive permission available, so Haumm can open only the files you pick: Word, Google Docs, text, Markdown, photos, or videos. Nothing else in your Drive is visible to us.
  • How we use it: imported files become entries or media in your journal and are stored with the rest of your journal. We use them only to show you your journal.
  • What we store: only the imported content you confirm. Your Google access token stays in your browser tab and is never sent to or stored on our servers. We never write to, change, or delete anything in your Drive.
  • Sharing: we don't sell Google data, use it for ads, or use it to train AI models. To split an import into dated entries, the first 160 characters of each paragraph, and the file's name, go through Lovable's AI service to Google's Gemini models, as described above. Beyond that, like the rest of your journal, imported writing is shared with an AI app (Claude, for now) only if you connect one yourself.
  • Removing it: delete imported entries or your account in Haumm at any time. You can also revoke Haumm's access in your Google Account permissions.

Haumm's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and advertising

Inside the app: no advertising and no cookies that follow you around the web. Ever. To make Haumm better, we count visits and which parts of the app get used (like Insights or Commonplace), never what's in them: nothing you write is ever part of it. Nothing in the app ever records your screen. The app uses browser storage to keep you signed in and remember small settings. The app's host also sets three small cookies on app.haumm.com: two of Lovable's, one saying which version of the app to load (a day) and one holding a random number for 30 minutes to count a visit, and Cloudflare's bot check (30 minutes). None follows you to other sites, and none holds anything you write. It also keeps a copy of your journal on each device you use, so it opens fast and works offline. Signing out from the menu removes it.

On this website (haumm.com): we may count visits with a privacy-friendly analytics service that uses no cookies and doesn't follow you around the web.

Right now haumm.com uses no advertising cookies. If we start advertising Haumm on other sites (like Instagram), haumm.com may use an advertising cookie, such as Meta's pixel, to see whether an ad led someone here or to sign up. If we do:

  • It runs only on haumm.com, never inside the app, and never sees anything you write.
  • Where the law requires it, it loads only after you say yes, and you can change your mind any time.
  • Some US state laws, like California's, call this "sharing" personal information for advertising. You'll be able to opt out with a "Your privacy choices" link at the bottom of every page, and we'll treat a Global Privacy Control signal from your browser as an opt-out.

haumm.com uses no tracking that a Do Not Track signal would turn off; if that changes, we'll treat it like Global Privacy Control.

Beta honesty

  • Your data is encrypted in transit and on our servers' disks. Your writing and Commonplace are encrypted a second time, with Haumm's own key, before they're stored. We can still open it, so here's our rule: we only look at it if you ask us to (for example, to fix a problem) or if the law requires it.
  • Things may break. Export your journal now and then (Word, PDF, or text) so you always have a copy.

Your choices

You can edit, export, or delete your entries any time. Delete your whole account in Settings → Privacy, and your journal, every photo, video and voice note, and your account data are permanently removed right away. Copies in our backups are cleared within 30 days. Anything sent to Google's AI for a transcription or an import may stay with Google up to 55 days, as above. A page you delete, and earlier versions of every page, wait 30 days in Version history, sealed, so you can bring them back; then they're gone. A photo, video or voice note you remove from an entry is kept for 31 days, so bringing back an earlier version of a page brings it back too, then it's deleted. Depending on where you live (for example, the EU, UK, or California), you may have more rights over your data; email us and we'll help.

Haumm isn't for children under 13. If you're under 18, you can delete any page, photo or voice note, or your whole account, any time.

If someone asks for your journal

If we're ever legally forced to hand over anything, we'll give only what we must, push back on requests that go too far, and tell you first unless we're barred from it.

If Haumm changes hands

If Haumm is ever sold, merges with another company, or passes to someone else, the promises in this policy go with your journal, for everything written under them. Whoever runs Haumm next can't sell your writing, show ads with it, or use it to train AI. That includes anything made from your writing: summaries, an AI's notes about it, or the data an AI uses to search it. Your journal is never sold as data on its own.

Any new use of your writing, an AI that reads it included, asks you first, on its own: never folded into new terms, never switched on for you, and saying no changes nothing else. Before Haumm changes hands, we'll tell you, with at least 30 days to export your journal or delete your account if you'd rather go.

Changes to this policy

When we change this policy, we'll post the new version here with a new date. If a change affects how your journal is used, we'll tell you by email or in the app before it takes effect, and we'll never apply a new use to what you've already written without asking you first. The fuller policy for paid plans will follow the same rule.

Questions

Email support@haumm.com. A real person reads every message.