Privacy Policy

Effective Date: July 13, 2026

1. Who We Are

Hushhh! is developed by an independent developer. This Privacy Policy explains how we collect, use, and protect your information when you use the Hushhh! app ("App").

2. What Hushhh! Does

Hushhh! is a companion app that helps parents organize information from their children's school WhatsApp parent groups. It connects to your personal WhatsApp account through WhatsApp's standard "Linked Devices" mechanism and uses AI to classify incoming messages into actionable categories (events, tasks, payments, reminders, etc.).

Hushhh! is not affiliated with, endorsed by, sponsored by, or supported by WhatsApp LLC, Meta Platforms, Inc., or any of their subsidiaries.

3. Data That Stays on Your Device

The following data is stored exclusively on your iPhone in a local SQLite database and never leaves your device:

• Your children's names and school information
• Classified events, tasks, reminders, and other items
• WhatsApp group membership and assignment to children
• App settings and preferences
• Your WhatsApp session credentials (encryption keys)

4. Data That Leaves Your Device

Message Classification (Anthropic API): When a new message arrives in a watched WhatsApp group, the message text (without your identity or phone number) is sent directly from your device to Anthropic's Claude AI for classification — it never passes through our servers. Anthropic does not use this data for training. See Anthropic's Privacy Policy.

Apple Sign-In: When you sign in, your Apple ID (email, name if you choose to share it) is sent to our server to create your account.

Operational Data: Content-free diagnostics — error logs, classification quality counters, and device health telemetry (counts and timestamps only, never message content; our server additionally refuses to store any content-bearing field) — may be sent to our server to keep the service reliable.

Push Notifications: If you use the app, your device's push notification token is registered with our server so we can deliver notifications. Background refresh pushes are generated by our server on a clock schedule only — they are never triggered by, and carry no information about, your WhatsApp messages. Their payloads contain no personal data. An optional "you've been away" reminder can be turned off in the app's notification settings.

5. Data We Collect on Our Server

• Your Apple ID identifier (sub), email address, and name (from Apple Sign-In)
• Classification quality metrics (error rates, feedback reports — no message content; corrections are matched by a one-way content hash, never the text itself)
• Error logs for debugging (no message content)
• Device health telemetry: app version, OS version, and counts-only pipeline statistics (no message content)
• Your device's push notification token

We do NOT store — and never even receive — your WhatsApp messages on our server. Classification happens directly between your device and Anthropic.

6. Third-Party Services

• Anthropic (Claude AI) — message classification. Data processed under Anthropic's commercial API terms (not used for training).
• Apple — Sign in with Apple for authentication; Apple Push Notification service for notification delivery.
• Expo/EAS — app updates delivery and push notification routing (receives only the device push token, never content).
• Sentry — crash and error reporting. Reports are scrubbed on-device before sending and contain no message content or personal identifiers.

7. Data Retention

On-device data persists until you delete the app or sign out. Server-side account data is retained while your account is active. You can delete your account and all associated server data directly in the app (Settings → Delete Account), or by emailing support@hushhh.app with the subject "Delete my account".

8. Children's Privacy

Hushhh! is designed for parents, not children. We do not knowingly collect information from children under 13. The children's names stored in the app are entered by the parent and remain on-device only.

9. Security

We use industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure token storage (iOS Keychain via expo-secure-store), and hashed credentials on our server.

10. Your Rights

You may: (a) request a copy of your server-side data; (b) request deletion of your account; (c) disconnect your WhatsApp at any time via app settings. For any privacy request, contact support@hushhh.app.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified in the app. The "Effective Date" at the top will be updated.

12. Contact

Hushhh! Team
Email: support@hushhh.app