Huno works because you tell it personal things, so we hold ourselves to three commitments: we do not sell your data, we do not show ads, and the AI never reads your conversations with other people unless you explicitly share an excerpt with it.
The data controller is Psychiatry Ink Ltd, registered in England and Wales, company no. 17275704, registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
• Account: your email address, display name, and birthdate (to confirm you are 18+ and show your approximate age in introductions).
• Profile: whatever you optionally add — a photo, a short bio, your city and country.
• Companion conversations: your messages with the Huno companion, including voice notes and photos you send it.
• Memory: structured things Huno learns from those conversations — interests, values, preferences, boundaries. You can review and manage saved memory items in You → What Huno knows. We also hold summaries and derived context; use Download my data or contact us for a broader access or correction request.
• Human conversations: messages, voice notes, and photos you exchange with people you connect with, one-to-one or in a Clan (a small group Huno forms). These are stored so we can deliver them — the AI does not read them (see section 4).
• Device: a push notification token, if you enable notifications.
• Safety and consent records: blocks, reports, and a history of the consents you have given or withdrawn.
• Safety notes: if a companion conversation suggests a risk of serious harm to you or someone else, we record the date and the kind of concern — never your words. Safety notes are reviewed by humans for safety purposes only, are never used for matching, and unlike memory cannot be viewed or edited in the app. They are deleted with your account.
• To run your companion: your companion conversations and memory give Huno the context to respond to you personally.
• To make introductions: matching uses only memory items you have allowed for matching — each item carries its own permission, and sensitive topics need your explicit per-item confirmation before they can ever influence matching.
• To form Clans: Huno uses the same matching-allowed items to find a small group of people who share ground with you on several dimensions. If you are invited, you see exactly how Huno would introduce you before you join, and only people who have already joined can see your first name, approximate age, city and photo. Nobody is added to a Clan without saying yes.
• For safety: to act on reports, enforce blocks, review safety notes, and keep the service working.
• To notify you: your push token is used only to deliver the notifications you have switched on.
Your human-chat text and voice notes are not routinely sent to the companion AI. Photos are subject to the separate PhotoDNA safety check described in section 6.
Ask Huno is an explicit sharing feature: you can select specific messages and explicitly send that excerpt to your companion for advice. The app shows you exactly what will be shared before you send it, and you can delete a share afterwards.
The same limits apply in Clans. Huno posts its introductions when a Clan opens and when someone joins — text you saw before joining — and then never reads the room.
• We never sell your data.
• We never show you ads.
• We never run analytics on the content of your private messages — our analytics records product events (like "onboarding completed"), never what you said.
• We never show your private conversations, with Huno or with anyone else, to another user. People you match with see only a minimal profile: first name, photo, approximate age, general location, and intro.
Supabase provides our authentication, database, private file storage and backend services. Your companion conversations — your messages, voice notes, and photos you send — are processed by our AI model provider, OpenAI, to generate replies, transcribe voice notes, and create voice replies. When you call your companion, live call audio streams directly from your phone to OpenAI, which powers the conversation in real time. Provider terms also govern security, abuse prevention and legally required processing. We may also disclose data where the law requires it.
Expo relays notifications to Apple and Google and distributes app updates. Push payloads may contain a sender name, a Clan title and routing identifiers, but not message content. Sentry processes crash diagnostics. Apple and Google also process sign-in and purchases when you use those features. Google Cloud hosts our public website.
Photos you upload, including profile, companion and human-chat photos, are sent to Microsoft PhotoDNA Cloud Service to compare them with hashes of known child sexual abuse material. Microsoft receives the image bytes for this safety check. This is separate from companion AI processing; photos without a successful safety check cannot be shared.
Your data is encrypted in transit and encrypted at rest by our infrastructure provider. Voice notes and photos live in private storage protected by access controls. Authorised service providers and operations staff may access data where necessary for their roles.
Human chats are not end-to-end encrypted. We will not claim security properties we have not built; if that changes, this policy will say so.
We keep your data while your account exists. When you delete your account, it is locked immediately, and permanent erasure is scheduled after a 14-day recovery window. It covers your profile, all conversations, everything Huno learned about you, your matches, and your uploaded files, including voice notes and photos.
Some things are removed sooner, automatically: photos and voice notes you send your companion after 90 days; live-call transcripts after 30 days; messages you shared through Ask Huno after 72 hours; introductions that were declined, expired or never answered after 90 days; your conversation history with your companion after 12 months (what Huno has learned from it stays in What Huno knows until you remove it); safety notes and reports 90 days after a person has reviewed them, unless the account concerned is still restricted; technical logs after 30 days, security logs after 90 days, and the record of staff actions after 12 months.
We retain the necessary record of purchases — amount, date, country and the store’s transaction reference — because tax and accounting law requires it. When your account is erased that record is detached from you: it no longer carries your Huno account, name or email. Store transaction references may remain identifiable to the store. Provider backups and legally required records follow their applicable retention periods.
• Review saved memory items in You → What Huno knows, and request access to other information we hold.
• Confirm, correct, or remove any of it; mark items private; or exclude any item from matching.
• Delete your account and all associated data: You → Settings → Delete account.
• Download a copy of your data at any time: You → Settings → Download my data.
EU/EEA and Swiss users: Psychiatry Ink Ltd has appointed Data Protection Representative Limited, trading as DataRep, as its Data Protection Representative in the EU/EEA under Article 27 of the EU GDPR and in Switzerland under the Swiss FADP. You may contact DataRep on our behalf: email datarequest@datarep.com (quoting "Psychiatry Ink Ltd" in the subject line), the online form at https://www.datarep.com/data-request, or post to DataRep at the country address in DataRep's representative contact summary. This appointment does not affect the responsibility of Psychiatry Ink Ltd as the controller.
You can also complain to a supervisory authority: the Information Commissioner's Office (ICO) for UK matters, or your local data protection authority for EU/EEA matters.
Huno is for adults 18 and over. We do not knowingly collect data from anyone under 18, and we remove accounts that turn out to be underage.
If we make material changes to this policy, we will tell you in the app before they take effect.
Privacy questions or export requests: data-protection@psychiatry.ink.