Privacy Policy

Hālau ("we", "us") is an organizational-health platform for nonprofits and mission-driven teams. This policy covers the Hālau web application, the Hālau Growth mobile app, and the emails we send. It applies to account holders and to people responding to surveys.

• Account information: your name, email address, time zone, language, and optional profile photo.
• Content your organization creates: surveys and responses, commitments, metrics, meeting agendas and notes, policies, and similar workspace records. Your organization controls this content.
• Billing details: handled by Stripe. Card numbers never touch our servers; we store only your plan, billing status, and Stripe references.
• Technical basics: session cookies to keep you signed in, and first-party usage analytics (pages visited, features used).

Our analytics are first-party and privacy-hardened. IP addresses are masked before storage, we honor your browser's Do-Not-Track setting, we don't use third-party advertising trackers, and anonymous survey-response pages are excluded from analytics entirely.

When a survey is anonymous, responses are never shown with respondent identity — not to organization admins, not in exports, not anywhere.

Beyond that, any result segment with fewer than three respondents is suppressed everywhere results appear (screens, PDFs, spreadsheets, and AI summaries), so a small group's answers can never be narrowed down to a person.

• To run the product — everything above exists to power features your organization uses.
• To send transactional email (invitations, digests, reminders) through our email provider, Postmark.
• To process subscriptions through Stripe.
• We never sell your data, and we never use it for third-party advertising.

Some features (like the Weekly Read and survey debriefs) send aggregated, anonymity-gated content to Anthropic's Claude API to generate a narrative. The anonymity suppression above is applied before anything is sent, and under our provider agreement this data is not used to train AI models.

Application data is stored in a managed PostgreSQL database and uploaded files in Cloudflare R2 object storage, encrypted in transit. Access is limited to the platform operator and your own organization's authorized members.

Your organization's admins manage its members and content. When your account or organization is deleted, associated personal data is removed from the live database; short-lived backups age out on a rolling basis. Email us to exercise a deletion or export request.

The Hālau Growth app signs in to the same account and shows the same data as the web app. It adds no additional data collection and contains no third-party analytics or advertising SDKs.

If we make material changes we'll note the new effective date here and, where appropriate, tell you in the product.