Privacy Policy

• We don’t sell your data, show ads, train AI models on it, or track you across other apps and websites.
• Hullo shares a conversation with an AI agent only when you ask it to.
• When you connect WhatsApp or Instagram, Hullo stays signed in for you, so your chats keep syncing even when your phone is off.
• Your messages are stored on Hullo’s servers so you can read them on all your devices, encrypted on the way and on disk.
• Like Gmail or Slack, they aren’t end-to-end encrypted: Hullo’s servers need to read them to sync and show them. Only the people who run Hullo can reach those servers, and only to keep Hullo running, fix a problem you report, or meet a legal obligation.
• You can delete your account anytime, from Settings.

Hullo is run by Tastefully Inc. (“Hullo”, “we”, “us”). For any question about this policy or your data, write to support@hullo.computer.

Hullo is not affiliated with, endorsed by or sponsored by Meta, OpenAI, xAI, Cursor, Apple, Google, or any other company whose service or agent you connect. WhatsApp, Instagram, ChatGPT, iMessage and the agents named in this policy are trademarks of their owners.

Your Hullo account

• Your email address, and whether you’ve confirmed it.
• If you sign in with Apple or Google: the account ID Apple or Google gives us, and the email address they share. If you use Apple’s Hide My Email, that’s a relay address.
• When you ask for a sign-in code, even before you have an account: the email address, the IP address the request came from, and a one-way scrambled copy (a hash) of the code. We use them to send the code and to stop abuse, and delete them within a day. A code works for 10 minutes.
• For each device you sign in on: a name (like “iPhone”), what your browser or app reports about itself, the IP addresses it signed in and was last seen from, and when. You can see your devices, and sign them out, in Settings.

Services you connect

• The sign-in the service gives Hullo when you connect it, such as cookies or a token. Hullo needs it to keep your chats in sync.
• Your name, username or phone number on that service (for WhatsApp, your number), so you can see which account is connected.
• If you sign in by typing a password (Instagram on iPhone, for example), it goes through Hullo’s server to that service to sign you in. Hullo doesn’t save it.
• Some sign-ins reach more than Hullo uses. A ChatGPT sign-in for Dots works for your whole ChatGPT account, for example. Hullo uses it only for what it shows you.

Your chats

• The messages, photos, videos, voice messages and files in the chats of the services you connect, with the names and profile pictures of the people and groups in them.
• Recent history when you first connect: WhatsApp and Instagram send about the last 50 messages of each chat.
• What you send from Hullo. It goes through Hullo’s servers to the service.

Agents and tasks

• For each agent that’s on: its requests (like asking you to approve an action), your answers, and its status.
• Tasks you give an agent from Hullo: what you asked, the messages you sent with it, and the agent’s answer.

Notifications

• If you turn on notifications, a push token for your device: from Apple for the iPhone app, or from your browser for the web app.
• On iPhone, the notification Hullo sends through Apple has no message text and no names of the people you talk to. It says “New message”, or names the agent that needs your OK or has an answer ready, with “Open Hullo to review” in place of what it’s asking. The Hullo app on your phone then fetches the message from Hullo’s server and shows it. You can hide previews in your iPhone’s settings.
• Web notifications are encrypted so only your browser can read them.

On your Mac

• iMessage works only in the Mac app, and it runs on your Mac. Hullo reads Messages and Contacts there to show your chats. It doesn’t upload your iMessage chats to Hullo’s servers. A message leaves your Mac only if you ask an agent about it.
• If you choose Scan my browsers, the Mac app looks for sign-ins to supported services in the browsers on your Mac, and checks them with those services. A sign-in leaves your Mac only when you choose to connect that account.
• To update itself, the Mac app downloads new versions from downloads.hullo.computer. It sends no account information to check.

On hullo.computer

• The website has no sign-up form, sets no cookies, and uses no analytics or tracking tools.
• Its fonts and images are served with the site itself, not loaded from Google or any other company.
• Like any website, it receives your IP address and what your browser reports about itself when you visit. Its host keeps the logs described below.
• Get started and Log in take you to the web app at app.hullo.computer.

Server logs

Our servers, including the one that runs hullo.computer, keep technical logs to run Hullo and keep it safe: errors, and for each request its time, result and IP address, with internal IDs and, for connected services, account IDs such as your WhatsApp number. Our host, Fly.io, keeps them for as long as its platform logs last.

What Hullo doesn’t collect

No payment card details, no advertising IDs, no analytics or tracking tools, and no location. The iPhone app doesn’t read your contacts.

• To sign you in, and to keep your account and Hullo secure.
• To connect your services, keep your chats in sync, and send what you write.
• To show your agents’ requests and tasks, and send them your answers.
• To send the notifications you turned on.
• To answer you when you write to us, and to fix problems.
• To meet legal obligations.

We don’t use your data for advertising, we don’t sell or rent it, and we don’t use it to train AI models, ours or anyone else’s.

Agents are AI assistants you already use, like Muse, Dots, Grok Bot, Instinct or OpenClaw. They’re run by other companies, or by you, not by Hullo.

• Hullo turns on the agents it finds in your connected accounts and picks up their requests and status. It never reads your other chats for them. You can turn any agent off anytime in Settings › , then Agents on the web or the Mac. It stays off unless you remove its account and add it again.
• Hullo sends a conversation to an agent only when you ask it to. When you ask an agent about a message, Hullo sends that message and up to four just before it, as text: who said each one and when, the chat’s name, the app it’s from, and any note you add. A sender known only by a phone number or email address is called “Person 1”, “Person 2”, and a chat named that way is left unnamed. Numbers or addresses written inside the messages are sent as written. Before sending, Hullo shows what will go and lets you untick messages, until you choose “Don’t ask again” for that agent and that kind of chat (WhatsApp or iMessage, say) on that device. Asking with a note always shows it.
• When you approve or deny an agent’s request, Hullo sends your answer to the agent that asked. Hullo never answers for you.
• Once it’s sent, the agent’s maker handles it under its own terms and privacy policy.

The people you chat with may not use Hullo, but their messages, names and profile pictures pass through it when you connect your accounts. We treat their information the way we treat yours:

• we use it only to show it to you and to send your replies,
• we delete it on the same schedule as yours,
• and we never contact them, build profiles of them, or use their messages for anything else.

When you ask an agent about a chat, what you send includes their messages. Please share thoughtfully.

• Fly.io hosts Hullo’s servers, databases and backups, in the United States. It also stores the Mac app’s downloads and runs the website hullo.computer.
• Resend sends our sign-in emails. It gets your email address and the code.
• Apple runs Sign in with Apple and delivers iPhone notifications. It gets the push token and the notification, which has no message text.
• Google runs Sign in with Google, if you use it.
• Your browser’s maker delivers web notifications, encrypted, if you turn them on.
• The services you connect, such as Meta for WhatsApp and Instagram or OpenAI for ChatGPT, get what Hullo sends for you, and see Hullo’s server signed in to your account. Their own privacy policies apply.

We may also share data when the law requires it, and only what it requires, or to protect the safety of people, our users or Hullo. If Hullo is sold or merged, your data may move to the new owner, who must keep to this policy, and we’ll tell you first.

• Your account: until you delete it.
• Chats, messages and files: until you remove the account they come from, or delete your Hullo account. Disconnecting a service keeps its chats; removing it deletes them.
• Sign-ins to connected services: until you disconnect or remove that service, or delete your Hullo account.
• Devices you’ve signed in on: while you’re signed in, then 90 days. A sign-in ends after 60 days without use, and after a year in any case.
• Sign-in code requests, with their email and IP addresses: up to a day.
• Tasks: what a task sends is posted in your chat with the agent, so it stays there like any message (and with the agent’s maker). The task stays until you remove the agent’s account or delete your Hullo account, with its title (the first line of the newest message you asked about, up to 80 characters), where it came from, and a preview of the answer. Hullo’s separate working copy of what it sends is deleted 7 days after its last delivery update, whether it was delivered or not.
• Backups: our servers are backed up daily, and each backup is kept for 2 days. Deleted data is gone from backups after that.

Delete your Hullo account

Go to Settings › , then You › , then Delete account (on iPhone, Settings › , then Delete account). To check it’s you, Hullo emails you a 6-digit code. On iPhone, if you signed in with Apple, you can confirm with Apple instead. Deleting your account:

• signs you out on all your devices at once, and stops their notifications,
• removes every service you connected: Hullo signs out of it and deletes its copy of the sign-in, and of that account’s chats, files, agent requests and tasks,
• deletes your chats with their history, and every file you uploaded. A group chat another Hullo user is also in is left: your messages there stay, hidden from anyone who joins later,
• closes and erases your Hullo chat account,
• removes Hullo’s access to your Apple ID, if you signed in with Apple,
• and deletes your account data: your sign-in methods and email addresses, devices, settings, and the sign-in codes sent to you.

The rest runs on its own after you’re signed out, usually within a minute. A step that fails is retried: most for up to a day, and deleting your account data until it succeeds. It can’t be undone. Your accounts on WhatsApp, Instagram, Muse and the other services aren’t deleted: delete those in each app.

What’s kept afterwards: deleted data can stay in a daily backup for up to 2 days after the deletion finishes. We keep a record that the deletion finished, with no personal data, for 30 days. Server logs (see “Server logs” above) stay as long as Fly.io keeps them, and Resend keeps its records of the codes it sent under its own policy.

You can also ask us to delete your account by writing to support@hullo.computer.

Disconnect or remove one service

Go to Settings › , then Accounts, pick the account, then Disconnect or Remove.

• Disconnect stops syncing. Hullo signs out and deletes its copy of the sign-in, pauses that account’s agents, and cancels their waiting requests and tasks. Your chats stay in Hullo.
• Remove does that too, and deletes that account’s chats, files, tasks and agent requests from Hullo. Group chats stay for the other people in them.

Neither deletes anything in the service itself. For WhatsApp, Hullo also removes itself from Linked devices. Other services, like Instagram, ChatGPT, Muse and Grok, may still keep Hullo’s sign-in: to end it there too, sign it out in that service’s own settings, such as Instagram’s login activity.

• See and change your connected accounts, agents and devices in Settings. Turn notifications off in Settings or in your device’s settings.
• To get a copy of your data, or to correct or delete it, write to support@hullo.computer. We’ll reply within the time the law requires.

If you live in California

You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be treated differently for using these rights. We don’t sell your personal information, or share it for targeted advertising. To make a request, write to support@hullo.computer. We’ll check it’s you before acting on it.

Hullo uses encrypted connections (HTTPS) between your devices and our servers, and encrypted disks on them. We store sign-in codes and Hullo session tokens only as hashes. Only the people who run Hullo can reach the servers, and they look at your data only to keep Hullo running, fix a problem you report, or meet a legal obligation.

No system is perfectly secure. If a breach affects your data, we’ll tell you as the law requires.

During the beta, Hullo is offered only in the United States. Hullo’s servers, including the website’s, are in the United States (Fly.io, in Ashburn, Virginia), and your data is stored and processed there.

Hullo is for people 18 and older, and we don’t knowingly collect data from anyone younger. If you think someone under 18 has given us data, write to support@hullo.computer and we’ll delete it.

We’ll post any change here and update the date at the top. If a change matters, we’ll tell you in the app or by email before it takes effect.

Write to support@hullo.computer. See also our Terms of Service and Support.