hakiPrivacy policy
haki was tested under the working name Behta. The Google sign-in screen may still show that name while the app is renamed. It is the same service, run by the same person, under this policy.
haki is an early, invitation-only test of an AI assistant that helps people in India with money problems, over WhatsApp. It is run by a small team of finance operators in Bengaluru, India ("we"). A small group of invited people use it. This page says what happens to your information, including the information we receive from Google when you connect Gmail.
What we collect
- WhatsApp details: your phone number and profile name, as WhatsApp gives them to us, and the text messages you send and the replies you get.
- Google user data, only if you connect Gmail: your Gmail address, and the content of emails and PDF attachments that haki reads to answer you (see below).
- Waitlist details, only if you join the waitlist on heyhaki.in: the WhatsApp number or email you enter, what you want haki to check first, the time, and which link brought you there. We use this only to invite you and to learn which problems people want solved. Ask us to remove it any time.
- Technical details of each reply: which tools the assistant used, how long it took, what it cost, and any error.
haki reads text messages on WhatsApp. If you send an image, voice note or document, it tells you it can only read text.
Google user data
When you tap the Google sign-in link, you choose whether to let haki access your Gmail. haki asks for three permissions:
| Permission | What we use it for |
|---|---|
| Your email address | To show which account is connected. |
| Read your mail (gmail.readonly) | To search and read emails and PDF statements from banks, card issuers, lenders, insurers, payment apps, credit bureaus and tax or provident fund bodies, so haki can find wrong charges, missed refunds and other problems and answer your questions. |
| Create drafts and send mail (gmail.compose) | To prepare an email to your bank and, only after you tap Approve, send it from your own Gmail. |
- Which mail haki reads. haki's software limits its searches to mail from financial senders. Google's permission itself covers the whole mailbox, so this limit is something haki's software enforces. We are improving the checks on it during the test.
- What we keep. We do not keep copies of your emails. We keep short findings written from them (for example a fee, its amount, the bank and a date), a list of your accounts by name, drafts you asked for, and your chat with haki.
- How the mail is processed. Email text that haki reads is sent to AI model providers, during the test mainly Anthropic's Claude models, through Vercel's AI Gateway, to produce your answer.
- What we do not do. We do not sell your data, use it for advertising, or use your Google data to develop or train AI models.
haki's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who can see your information
- People running the test. Stored conversations, findings and logs can be read by the people running the test, to fix problems and review how the assistant behaves. They can contain details taken from your mail. By accepting an invitation you agree to this. We do not browse your mailbox.
- Service providers that help us run haki, each under its own terms: Meta (WhatsApp), Vercel (hosting, storage and the AI gateway), Composio (holds your Google access token and relays Gmail requests), AI model providers, and a web search service the assistant can call.
- Authorities when the law requires it.
How long we keep it
- Your chat history (the last 30 messages), a log of the last 100 replies, findings, account names and drafts stay until you send /forget or the test ends, whichever comes first.
- Your Google access token stays with Composio until you disconnect Gmail or Google ends it.
- When the test ends we delete everything.
Your choices
- /forget on WhatsApp disconnects Gmail and erases your chat history, findings and drafts.
- /reset clears the current conversation only.
- You can remove haki's access at any time at myaccount.google.com/permissions.
- To have your data corrected or removed, including logs, message the person who invited you.
Security
Data travels over encrypted connections. Stored data sits in a private Vercel storage area under a key made from a hashed form of your WhatsApp number, and only the people running the test have access. No system is perfectly secure, and this is an early test, so please do not send card numbers, passwords, OTPs, PINs or ID numbers. haki never needs them.
Children
haki is for adults. It is not meant for anyone under 18.
Contact
Message haki on WhatsApp, or reply to the person who invited you to the test.
Changes
If this policy changes in a way that matters, the date above will change and invited testers will be told.