Privacy policy
Hasu is a private app for two people. This page describes what it stores, why, and how to get rid of it. There is no analytics, no advertising, and no tracking of any kind.
Who this is between
Hasu is operated by an individual, not a company. There is no analytics provider, no advertising network, no third-party SDK collecting anything, and no data broker. Nothing in the app is sold, rented, or shared for advertising.
The only third parties involved are Supabase, which hosts the database and authentication as a processor, and Apple, which delivers push notifications.
What is stored, and why
| What | Why | Where |
|---|---|---|
| Email address and password | So you can sign in. The password is stored only as a salted hash, never in readable form. | Supabase Auth |
| What you write about yourself | It is the substance of the app: it becomes the things your partner gradually learns. | Database, restricted to your couple |
| Financial goal names and amounts | Entered by hand. Hasu never connects to a bank and has no access to any account. | Database, restricted to your couple |
| Things you send each other, and what you mark as read or learned | To pace one item a day and keep a record of what you have done. | Database, restricted to your couple |
| The dates you were active | To drive the growth visual. A count of dates, with nothing about what you did on them. | Database, restricted to your couple |
| Device notification token | To send the one daily notification, if you leave it on. | Database, restricted to you |
| Display preferences, and which milestones you have seen | To keep the app looking how you set it. | Your device only, never uploaded |
There is no location data, no contacts access, no photo library access, no microphone, no camera, no advertising identifier, and no usage analytics.
What your partner can and cannot see
Both of you can see everything the couple shares: goals, the path, the day count, and items either of you sent.
Answers you write about yourself start private and stay private until the app surfaces one of them as part of the daily rhythm. This is enforced by the database, not by the app — a private answer is not sent to your partner’s device at all, rather than being sent and hidden.
Hasu does not record whether your partner opened anything. There are no read receipts.
Notifications
Notifications never contain the content of what is waiting. They say that something is there. This is deliberate: a fact about your family should not appear on a lock screen in front of other people.
You can turn them off in the app under Settings → Notifications, or in iOS Settings.
Sharing outside the app
Hasu has no feed, no friend graph, and no public profile. Nothing you write is visible to anyone but the two of you.
The one exception is the share button on a milestone screen, which you choose to tap. It produces a single flat image containing only the milestone — a lotus, or a goal’s name. It never includes either person’s name, any amount of money, or anything you wrote. Once you share that image, where it goes is up to whoever you sent it to and is outside our control.
How long it is kept
As long as your account exists. No archival copy is kept after deletion.
Encrypted backups of the database are retained by the hosting provider for a short rolling window as protection against data loss, and expire on their own.
Deleting everything
In the app: Settings → Delete account. It needs no email to anybody.
Because everything in Hasu is joint — the goals, the path, the days — deleting your account deletes the couple and its whole shared record, for both people. This is stated on the confirmation screen before you confirm, and confirming requires typing the word DELETE rather than tapping a button.
Your partner’s sign-in survives. They will find themselves unpaired, and can start again or delete their own account.
Deletion is immediate and permanent. There is no restore.
Children
Hasu is not directed at children and is rated 17+. It is intended for two adults in a relationship.
Security
- Every table is protected by row-level security: the database itself refuses to return another couple’s rows, rather than relying on the app to filter them.
- Traffic is encrypted in transit (HTTPS).
- Passwords are stored only as hashes.
- The app ships with a public client key only. The key that could bypass these protections exists only on the server.
Changes
If this policy changes in a way that affects what is collected, the app will say so before the change takes effect.
Contact
Questions, or a request about your data: hello@hasu.hu