Legal
Privacy Policy
Last updated: September 23, 2026
Hlu is built so your workspaces stay yours. The Hlu app for iOS and Mac needs no account. Your data lives on your device and in your own iCloud. This policy covers the Hlu app (“the App”) and the website at hlu.app (“the Website”).
1. Your data in the App
You don't need to sign up or create an account to use the App.
Your Hlus, widgets, settings and other content are:
- Stored locally on your device
- Synced between your devices through your personal iCloud account, if iCloud is turned on
- Not sent to our servers
- Not accessible to us
Apple handles iCloud sync under Apple's Privacy Policy. You can turn iCloud sync off at any time in your device settings.
2. Your data on the Website
You can browse the Website without an account. You only need to sign in to join the community, share feedback, vote on the roadmap or keep a public profile.
Sign in with Google
Google is the only way to sign in to the Website. When you sign in, Google shares your name, email address and profile picture with us. We never see your Google password.
Information you provide
- Profile details such as your username, display name, bio, website and social links
- Images you upload, such as avatars and cover images
- Posts, comments, feedback, votes and reactions
- Your notification and privacy preferences
Your profile and anything you post in public areas can be seen by other visitors. To hide your profile from search and directories, turn on Private profile in Settings.
Technical information
We briefly process your IP address to rate-limit requests and protect the Website from abuse.
3. Analytics
In the App: PostHog
We use PostHog to collect anonymous usage data, such as which features you use and how the App performs. We don't link this data to your identity. We use it only to:
- Understand which features are used, so we can improve them
- Find and fix bugs, crashes and performance problems
- Keep the App stable and reliable
Analytics never include the content of your Hlus.
On the Website: Umami
We use Umami for privacy-focused website analytics. It records aggregate data such as page views, referring sites and device type. It uses no cookies and doesn't track you across other websites. We don't use Umami in the App.
4. Purchases and subscriptions
Apple handles all in-app purchases and subscriptions through the App Store.
- We don't receive or store your payment details
- Apple tells us only whether your purchase or subscription is active
- You can manage or cancel a subscription in your Apple ID settings. See Apple's Privacy Policy for details
5. Service providers
We rely on a small number of trusted providers to run Hlu:
- Apple: iCloud sync and App Store payments
- Google: signing in to the Website
- PostHog: anonymous App analytics
- Umami: cookieless Website analytics
- Supabase: Website accounts and database
- Vercel: Website hosting
- Cloudflare: storage for images you upload to the Website
- Upstash: rate limiting to prevent abuse
These providers process data only to provide their services to us. We do not sell your personal data, and we don't share it for advertising.
6. Your choices and rights
You're in control of your data:
- Delete App data: use Delete data in the App's Settings to erase all your App data. Uninstalling the App also removes the data on that device.
- Delete your Website account: go to Settings → Account on the Website. This permanently deletes your account, profile and the content you created.
- Control permissions: manage App permissions and iCloud sync in your device settings.
- Access or correct your data: edit your profile on the Website at any time. You can also email us for a copy of your data.
For any other privacy request, email support@hlu.app. We'll reply within 30 days.
7. Data retention
- App data stays on your device and in iCloud until you delete it
- Website account data stays until you delete your account
- After you delete your account, we may keep limited records, such as moderation reports and security logs, with your identity removed. We keep them to prevent abuse and meet legal obligations
8. Security
We encrypt data in transit and limit access to the systems that store Website data. No system is perfectly secure, but we work hard to protect your information.
9. Children
Hlu is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we'll delete it.
10. Changes to this policy
We may update this policy from time to time. When we do, we'll change the “Last updated” date above. We'll tell you about material changes in the App or on the Website.
11. Contact us
Questions about privacy or your data? Email us at support@hlu.app.