omgochi

Hank — Privacy Policy

Last updated 8 September 2026

What Hank collects, why, and what you can do about it. Hank is a small independent project — we collect what's needed to run it and not much else.

1. What we collect

Account

Name and email address from Sign in with Apple. If you chose Hide My Email, we only receive Apple's private relay address.
A user ID we generate.
Your username and date of birth (date of birth is used to check the minimum age).

What you send the assistant

Your messages, prompts, and instructions.
Files, photos, and other content you upload.
Content the assistant produces for you.

Assistant activity

Tasks you asked for and their results.
Web pages the assistant opened at your request.
Facts the assistant remembers to give better answers later.
Reminders and scheduled items you created.

Connected accounts — only if you connect them

Nothing is connected by default. If you connect a third-party account (for example email or calendar), we store the access tokens needed to act in it, and the data needed to carry out the specific action you asked for.
You decide what to connect and what Hank can reach, and you can disconnect at any time. Choosing to connect an account that holds sensitive, confidential, or other people's information is your decision — see section 5 of the Terms.

Technical

Device and app version, crash and error logs, timestamps, IP address, and a push notification token if you enable notifications.

We do not collect: payment card numbers (Apple handles payment), precise location, contacts, health data, or your device's photo library beyond the specific images you choose to send.

2. Why we use it

To run the assistant and carry out what you asked.
To remember context so it works better over time.
To send you notifications about your tasks, if you allow them.
To keep the Service secure, prevent abuse, and enforce our Terms.
To fix bugs and improve reliability and quality.
To meet legal obligations.

3. Legal bases (UK/EU users)

Performance of a contract (running the Service you asked for); our legitimate interests (security, abuse prevention, improving the Service); your consent (notifications, connecting third-party accounts); and legal obligation.

4. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Every company below is bound by contract to protect your data to a standard equal to this policy, and to use it only to provide their service to us.

AI model and agent providers

These receive what you write, files and photos you attach, voice notes you record, the contents of pages the assistant opens at your request, and the setup details you gave when you started.

Google Cloud (Vertex AI), United States — runs the Anthropic Claude and Google Gemini models that generate replies, and performs speech transcription, text embeddings, and search grounding.
OpenAI, United States — generates some replies and images, and performs speech transcription and text embeddings.
Browserbase, United States — runs the remote browser the assistant drives when you ask it to use the web, and so receives the pages it visits for you.
Composio, United States — brokers the connection to any third-party account you explicitly connect, and passes through only the data needed for the action you asked for.
Pexels, United States — supplies stock photography for sites the assistant builds. Receives the topic of the site, not your identity.

Platform providers

Google Cloud Platform and Firebase, United States — hosting, database, authentication, and push notifications.
RevenueCat, United States — subscription status. Receives your user identifier, not your content.

We also disclose information to law enforcement or regulators where we are legally required, or to protect someone's safety or our legal rights; and to a buyer or successor if the business is sold or merged, in which case you will be told.

The app names these providers, and what is sent to them, in Settings under “ai & your data”.

5. AI training

We do not use your content to train AI models, and neither do the providers named in section 4 — their enterprise and API terms forbid it. This is a contractual commitment, not a setting.

6. How long we keep it

We keep your account data while your account exists. Messages, tasks, files, and remembered facts are kept until you delete them or delete your account. Logs are kept for a limited period for security and debugging. After you delete your account we remove your personal data within 30 days, except where we must keep something to meet a legal obligation or resolve a dispute. Backups are purged on their normal cycle.

7. Security

Data is encrypted in transit. Access to production systems is restricted. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data we will notify you and any regulator as required by law.

8. Your rights

Wherever you live, you can ask us to:

give you a copy of your data;
correct anything wrong;
delete your account and your data;
stop or limit certain processing;
withdraw a consent you gave.

You can delete your account in the app. For anything else, email hi@omgochi.com and we will respond within 30 days. If you are in the UK/EU you may complain to your local data protection authority. If you are in California you have rights under the CCPA/CPRA, including the rights above and the right not to be discriminated against for using them.

9. Children

The Service is not for children under 13 and we do not knowingly collect their data. If you believe a child under 13 has given us personal information, email hi@omgochi.com and we will delete it.

10. International transfers

We operate in Delaware, USA, and use providers that may process data in other countries. If you are outside the United States, your data will be transferred to and processed there. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism.

11. Changes

We may update this policy. Material changes will be notified in the app or by email, and the "last updated" date above will change.

12. Contact

omgochi — hi@omgochi.com — omgochi.com