Privacy Policy

Hashchats is a collaborative AI chat platform designed to enhance how individuals and groups interact with artificial intelligence. By using, visiting, or interacting with Hashchats via its applications or websites, you agree to this Privacy Policy. This privacy policy is part of our Terms of Service.

Hashchats is a worldwide service owned and operated by Nunuworks, Inc. When we refer to Hashchats (“we”, “us, or “our”) in this policy, we refer to the Hashchats website, applications, and services only, not any other services owned or operated by Nunuworks, Inc. When we refer to users (or you), we mean all users and visitors of Hashchats.

By using Hashchats, you agree that the personal information that you provide directly to us, or that we collect through your use of the service, may be transferred to and stored in Canada or the United States and handled as described in this Policy.

This is information that you provide to us through various input methods, such as text fields, Text-to-Speech input, microphone input for voice messages, hashtags, uploaded images, videos, files, or account details. For Hashchats users, we collect personal information such as names, email addresses, and login credentials to create and manage your account.

We only store the information you directly provide or consent to us collecting while using Hashchats. This includes content you input into AI-only chats, direct messages, or group chats, as well as service records such as message transcripts, images, videos, or attached files. You have control over your data and can delete private AI chats from the AI tab or Chat Options. Your own messages sent with @ai off can be deleted from their message menu. Account Management provides Delete Account; shared messages and media can remain visible to recipients with your identity removed.

We only store the information you directly provide or consent to us collecting while using our service.

We may also collect information via service integrations if you consent to it. These service integrations can include your authentication details with your device OS (such as Google or Apple Login).

On builds supporting VCF contact sharing, you review the supported contact fields before upload. Only the fields kept in that review are serialized and shared; photos, notes, birthdays and hidden properties from the source contact are removed. This sharing flow does not browse your address book or request a new Contacts permission. Ordinary contact sharing with AI off does not call an AI model. Asking AI to create a contact file processes the details supplied for that request.

When you explicitly paste a supported image link for attachment, Hashchats downloads and stores that public image. The source link, including any signed query parameters, is kept temporarily on your device to recover interrupted imports. This does not monitor your clipboard or start an AI request.

Any files you upload to Hashchats, such as images, videos, or documents attached to prompts for analysis or generation, are used solely to process your request and enhance the AI's response. For images, a vision model transcribes their content into text, extracting relevant details to provide context for generating accurate outputs. For other file types, such as PDFs or text documents, the content is similarly processed to inform the AI's response, ensuring it aligns with your input. This allows the AI to understand and address your request effectively, whether you're seeking text analysis, image generation, or video-based insights.

Recent AI conversation context, message search and unread summaries use basic message details such as visible card information, public quiz scores, link descriptions and short existing attachment excerpts. They do not automatically include full hidden file contents or extracted webpage bodies. A current prompt, explicit reply or clearly identified source for a follow-up can provide fuller artifact details and supported attachment analysis. Other participants' private quiz attempts, drafts and study bookmarks are not supplied as your AI context. Spoken words already transcribed in the message text are not duplicated by processing their recording again merely for recent context.

Uploaded files are stored securely as part of your interaction history, but you maintain control over them, private AI chats, including any associated uploads, can be deleted at any time through your AI chats tab. Deleting a chat permanently removes the uploaded files and their processed content from our systems, unless retention is required by law. Hashchats does not use uploaded files beyond the scope of fulfilling your specific request within the platform.

When you engage with Hashchats, whether in AI-only chats, direct messages, or group chats, we collect data essential to delivering and refining the service. This includes chat transcripts, hashtags you create or use, any personal information shared during the chat, IP addresses, device information, authentication data (e.g., via Google or Apple Login, Email Login), and cookies. This information enables real-time collaboration, powers the hashtag ranking system, and helps the AI select the best models and configurations for your needs.

When you play chat audio in the native iPhone or Android app, system media controls can display the chat title followed by / Hashchats, including on the lock screen. Leaving the chat or stopping playback removes its active playback session.

When you explicitly use Read Along for an older generated narration without caption timing, its existing audio can be sent to a transcription provider to prepare text and timing. The recovered transcript and timing are stored for shared reuse with the narration. This does not regenerate the speech or start automatic caption recovery for other audio.

Hashchats uses microphone access only when you choose features that require audio, such as voice messages or recording videos with sound. Your device may ask for microphone permission before these features can work.

A user is someone who interacts with the Hashchats website, web apps, or mobile apps. As a user, you must provide your payment information to our payment processor, Stripe. You can learn more about Stripe's privacy policies on their website. At this time, Hashchats does not receive or store your full card number. Payment processors provide us with a token that represents your account, your card's expiration date, card type, and the last four digits of your card number. If you are required to provide your name and email address to the payment processor, then they also provide us with that information.

We collect and process information about every user of Hashchats.

Additional Information We Collect

We collect information automatically as you navigate Hashchats or through our third-party analytics providers. This applies to all users, including those who explore the platform without engaging in AI chats, direct messages, or group conversations. We may store usage information such as the type of device you use to access Hashchats, your operating system, browser type, IP address, device ID, browsing behavior, pages visited, and your location derived from your IP address. This data helps us understand how users interact with Hashchats, optimize performance, and enhance the overall user experience. For location-dependent AI requests, we use available permitted device coordinates or an approximate IP-derived location and include the relevant area in searches needed to answer the request.

Information Collected by Third Parties (Cookies)

We use cookies and similar tracking technologies on our website and apps to enhance your user experience, analyze usage patterns, and provide personalized content. Cookies are small data files stored on your device. They help us remember your preferences and improve our services.

You have the option to manage your cookie preferences. You can set your browser to refuse all or some browser cookies or to alert you when cookies are being sent. However, if you disable or refuse cookies, please note that some parts of our services may become inaccessible or not function properly.

We utilize Google Analytics, a service provided by Google, Inc., to gather information about how users engage with our website and application. Here is an example of the information we collect and how we process it:

• Page Load Events: We record when a page is loaded within our application or website, along with the unique identifier of the user (if logged in).
• Login and Logout Events: We record when a user logs in or logs out of our application, along with the unique identifier of the user.

We have configured Google Analytics in a way that ensures your privacy is respected, and no personal information other than the events mentioned above and the unique user identifier (when logged in) is shared with Google Analytics. This information helps us analyze the usage of our platform to enhance its performance and user experience.

Please note that Google operates independently from us and has its own privacy policy, which we strongly suggest you review. Google may use the information collected through Google Analytics to evaluate the usage of our site and application for its own purposes, in accordance with its privacy policy.

How We Use Your Information

We process your information to:

• Allow you to sign in to your account.
• Allow you to pay for Hashchats services for pro subscriptions or pay-per-use overages, ensuring a transparent billing process.
• Send you emails relevant to your account.
• Provide and improve Hashchats services, like refining AI responses, optimizing hashtag search, enabling voice features, or enhancing group chat performance.
• Market Hashchats products and services to you or to audiences similar to you based on your networks and common factors that others have with you.
• Understand how you use the service and create better tools for our users.
• Conduct research and development to improve Hashchats and develop future products.
• Prevent fraud and abuse on Hashchats.

Information We Share with Other Users

By default, your information remains private and is not shared with other Hashchats users. Your conversations in AI-only chats and private hashtags are visible only to you unless you choose to invite others into a chat. In group chats, participants can see your messages and profile details (name and photo, if provided) but only within the context of that specific chat. If you create a public hashtag, your username and profile photo accompany it for attribution, though they remain untappable to protect your privacy. Other users cannot access your account details, private hashtags, or personal usage data.

When you finish a quiz in a group chat, your first completed score is visible to current participants. Individual answers and unfinished attempts are not automatically shown to other participants. If you explicitly ask AI about your own quiz answers or attempt, your relevant saved attempt or draft can be processed for that request; the resulting AI reply is visible to the participants who can read that chat. Retakes are private practice and do not replace the first shared score. In a private AI chat, only your own score is shown. Quiz scores do not trigger push notifications.

Flashcard decks are visible to the participants who can access their chat messages. Your last-card bookmark is stored separately for your account and is not shown to other participants. Studying a deck does not create shared scores, ratings or study notifications. Bookmarks expire after 30 days and are removed through retention cleanup, message deletion or departure from the chat.

Some aggregated and anonymized data about how you use Hashchats that cannot be linked back to you or any individual user may be shared with third-party providers (such as Analytics providers).

We do not sell your personal information or any identifiable information to third parties under any circumstances. Any sharing of data with third parties is solely for the purposes described in this Privacy Policy and is done under agreements that protect your privacy.

In supporting native iOS and Android versions, conversation suggestions use People chat names, participant identifiers, avatars and messaging interaction metadata provided to the operating system. The operating system controls which suggested conversations appear in its share sheet. Private AI chats, temporary chats and New Chat are not registered as sharing candidates. Choosing a suggested conversation prepares shared content in Hashchats; you still review and send it yourself.

• With our integrated applications for purposes you expressly consent to, such as AI-driven content generation, notifications, data processing, payment processing, cloud data processing, and fraud detection and prevention. These companies may have access to your data to perform their services and are obligated by contract to safeguard any of your data they receive from us to the same extent that Hashchats protects it.
• To protect the security or integrity of Hashchats, and to protect the rights, property, or safety of Hashchats, its employees, users, or others, if we believe that disclosure is reasonably necessary to comply with a law, regulation, or other valid legal processes (e.g., subpoenas or warrants served on Hashchats). If we are going to release your data, we will do our best to provide you promptly with notice by email unless we are prohibited by law from doing so.
• In connection with the sale, merger, bankruptcy, sale of assets, or reorganization of our company. We will notify you if a different company receives your data. The promises in this privacy policy apply to any data transferred to a new entity.

For supported meme-image requests, Hashchats sends a template identifier and caption text to Imgflip for rendering. Emojis are removed from that caption text before it is sent to Imgflip. Imgflip returns an externally accessible image URL; Hashchats copies the result to its own storage for delivery in your chat. Do not include confidential information in meme captions. Template descriptions may also be processed by search and AI providers to identify a suitable template.

For AI GIF retrieval, AI providers process your request and relevant text conversation context to identify intent and prepare search keywords. Hashchats sends the search keywords to KLIPY and stores a reference to the selected GIF in your chat. Playback loads media from KLIPY rather than creating or uploading a new animation. Avoid including confidential information in GIF search requests.

Image and Video generation can research requested public facts while using reference images. The public lookup receives a minimized search objective without the reference pixels, attachment links or unrelated chat history. The reference images remain inputs to the generation provider.

For Text AI image retrieval, Hashchats sends a focused public search query to image-search providers rather than copying unrelated private conversation details into the search. AI providers may process your request and relevant recent conversation to choose a photo gallery or an illustrated answer. Selected public image pixels, the public query and relevant section text from the completed AI answer may be processed by an AI provider to check the visual match and placement. The completed private answer is not copied into public image-search queries. Images load from their source websites, and the chat stores image references, captions, sources and optional section placement. Loading external images can share ordinary connection information with those websites.

Information We Collect from Third Parties

• Your Authentication Token (No Passwords)
• Your Email Address
• Other Basic Information proving that you are who you say you are from these authenticated services

Information We Share with the Public

When you use Hashchats, only content you explicitly choose to make public, such as public hashtags, their descriptions, and associated creator names, is visible to other users. Private chats, direct messages, group conversations, and private hashtags remain strictly confidential and are not shared. If you upload files, images, or links in AI-only chats for analysis, the extracted details are used solely to generate responses for you and are not exposed publicly. In group chats, content remains visible only to invited participants, and we enforce invite-only access to maintain privacy. Attachment download links can be opened by anyone who has the link. This includes generated QR images: sharing a Wi-Fi QR image or its download link shares the network credentials encoded in it.

When you request video subtitles, the video's audio is sent to a transcription provider. Transcript text may be sent to a language model for summary or translation. Shared caption tracks identify their requester and are loaded through authenticated chat membership and source checks. Exported subtitle files use shareable links that anyone holding the link can access. Forwarding a video can copy its current subtitle cues into the destination chat independently; changing or deleting the original captions does not remove those already copied cues. Deleting the source video message or caption response removes associated tracks and exports; downloaded copies cannot be recalled.

Communications

• Provide you with information about our service, service enhancements, or new Hashchats features while you are on our website or using our apps.
• Send you messages regarding our existing service, or enhancements related to our existing service, when you are off our service, via email.
• Send you messages related to services we provide that are separate from our existing service via email, from which you may opt-out.
• Opting out of marketing by unsubscribing from our marketing emails.

Accessing, Updating, or Exporting the Information in Your Account

You can access and update the information associated with your account on your Account Management Page.

Issue Reports

When you choose Report an Issue, we receive your description, attached screenshots, account name, email and user ID, submission time, and basic app details such as version, platform, operating system, browser, available device model, screen size, appearance, language and the screen you were using. Apart from the visible content in attached screenshots, reporting does not collect chat histories, passwords or access tokens. Native shake detection stays on your device and does not upload motion readings.

On updated native iOS and Android apps, a recognized shake captures the current app screen before the introductory modal opens. The prepared screenshot stays in memory until you choose Report an Issue, when the reporting page shows a preview and starts uploading it automatically. Closing the introduction discards the capture without uploading it. If capture fails, no automatic attachment is included. System overlays, the keyboard or native media may be missing. Screenshots may include visible chat messages or other personal information; you can remove them before submitting. Opening from the account menu, including in browsers, does not capture a screenshot automatically.

Screenshot images are optimized, resized to a maximum of 2048 pixels on either edge and stripped of unnecessary metadata. As with other Hashchats images, anyone with the complete image URL can retrieve them; storage directories cannot be listed. App issue reports are saved for automated technical investigation instead of being emailed to the support inbox. Reports of AI responses use the same technical queue; hashtag and human-message reports remain moderation emails through our email provider. Report descriptions and account details are not publicly readable. Customer-support correspondence and ordinary account, billing, invitation and business emails keep their existing channels.

Technical investigation uses bounded report descriptions, supplied screenshots, error and stack details, build/version information and platform diagnostics. AI incidents may include the bounded current failing request or reported response, report reason, relevant model/settings details, selected hashtag instructions, request/reply identifiers and supported attachment or generated artifact metadata. They do not retrieve full conversation histories or unrelated participant identities. Native Crashlytics issues are read through the official Firebase API to obtain diagnostic stacks and issue details, including late-uploaded events within the monitored window. Crashlytics diagnostic copies exclude raw user/session/installation identifiers, arbitrary custom keys, logs and analytics breadcrumbs. This investigation does not close or mute Firebase issues, collect additional chat histories for generic app reports, or charge the reporting account's Hashchats balance.

The owner's hourly local collector opens or updates local Codex chats to investigate and produce a plan. Reports stay queued while the collector is unavailable. Bounded diagnostic evidence and repository context are processed through OpenAI/Codex for this purpose. The investigator is instructed to investigate and produce a plan only, without changing code or production data or automatically replying to the reporting user. No cloud fallback is enabled. Automated investigation does not guarantee an immediate human reply or a fix.

Abandoned report uploads and local drafts expire after 24 hours. Submitted reports, screenshots and application incident records are retained for 180 days; account-associated reports and incidents are removed earlier when you delete your account. Bounded Crashlytics diagnostic copies also expire after 180 days. Operational receipts used to detect a newly saved AI request without an observed dispatch or settled preflight outcome expire after 30 days and are removed on account deletion. These receipts contain source identities and timing, not prompts or media. Small completion receipts for deletion and membership actions also contain only action identities and timing, not conversation text or media. They are kept while your account exists so completed retries can be recognized, and are removed when you delete the account. Local Codex diagnostic copies and delivered support/moderation emails are managed separately by the owner and support inbox and may remain after corresponding application records are removed. Contact us to request removal of these diagnostic copies or support correspondence.

Deleting Your Account

You may self-initiate a deletion of your account via our web or mobile applications by going to your Account Management Page. Please be aware that this is a final act and cannot be reversed.

What Happens to Messages and Shared Media After Deletion?

When you delete your Hashchats account, all personal data such as your name, profile photo, and private chats are permanently removed from our systems, except for the limited email retention described below. However, any messages or media (e.g., images or videos) you've previously shared in direct messages or group chats with other users will remain visible to recipients as part of their message history. This helps preserve conversation context and continuity for others.

If you wish to remove specific content before deletion, you may manually delete your messages or attachments from chats before initiating account deletion. After deletion, your profile will no longer be attached to those messages, and your identity will appear as removed.

Verification of Account

You can sign up or log in using your Google or Apple account for a seamless experience, or opt for an email address and password combination of your choice. If you submit a request to exercise your privacy rights, you will be asked to verify the request by logging into your Hashchats account using your credentials.

If we are unable to verify your request, then for your protection, we reserve the right to deny the request.

Your information, including personal data, may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. We primarily store and process data in Canada and the United States.

When we transfer your personal data internationally, we implement safeguards to ensure that your data is protected under this Privacy Policy and applicable laws. These safeguards may include data transfer agreements incorporating standard data protection clauses.

By providing your information, you consent to such transfers in accordance with this Privacy Policy.

Hashchats is an international service that complies with the General Data Protection Regulation (GDPR) for our users based in the European Union. We act as Data Controllers, as defined under the GDPR, and process personal data based on our legitimate interests, and for contractual necessity in providing you the Service as described in “How We Use Your Information.” We also process and share personal information based on notifications and users' consent, which our users may revoke at any time.

Hashchats is responsible for the processing of personal information it receives or subsequently transfers to a third party acting as an agent on Hashchats' behalf. Hashchats is subject to the regulatory enforcement powers of the Canada Competition Bureau.

Hashchats is an international service and as such, we are also subject to the California Consumer Privacy Act for our users based in California. Hashchats provides California residents and all users the right to view or access their information via the application's various features. All users also have the right to submit a request for deletion of information by going to their Account Management Page.

Hashchats does not sell or share personal information of any users, regardless of location, as defined under the California Privacy Rights Act.

Exercising Your Data Rights

Users in certain locations may have certain rights under the General Data Protection Regulation (GDPR) or under the California Online Privacy Protection Act (CalOPPA) regarding data that Hashchats controls as a Data Controller as defined under the GDPR, including:

• the right of access to their data,
• the right to correct or rectify any inaccurate personal data,
• the right to restrict or oppose the processing of personal data,
• the right to erase or delete their data,
• the right to personal data portability, and
• the right to opt out of the sale of personal information.

You can exercise rights over your data on Hashchats in the following ways:

• accessing, reviewing, modifying, and updating your data by logging into your account at Hashchats and going to your Account Management Page.
• viewing our privacy policy or viewing our data practices by going online to our (this) privacy policy page.
• deleting a previously disabled account by emailing Hashchats at contact@hashchats.com.
• opting out of marketing by unsubscribing from our marketing emails. (Note: Hashchats does not use your data for marketing to other users.)

If you are unable to log into your account and are unable to recover your account, then you may reach out to us at contact@hashchats.com. We reserve the right to decline your access to or recovery of your account, at our discretion, to prevent an unauthorized takeover of your account.

Contacting our Data Protection Officers

If you have privacy concerns or questions, you can contact our Data Protection Officer (DPO) via email at contact@hashchats.com.

Establishing an Authorized Agent

You may designate an authorized agent to make a request on your behalf. To designate an authorized agent to request on your behalf, you must provide a valid power of attorney, the requester's valid government ID, and the authorized agent's valid government ID. Please contact contact@hashchats.com with your request. To protect your information from account takeover, we may decline access to or recovery of your account at our discretion.

Privacy Discrimination

We do not discriminate against users who exercise their privacy rights.

Our Data Retention Period

We may retain your account information for ten years after your account is last active unless you delete it or request us to delete your account. We may continue to retain some information, even after you delete your account, if we are required to do so to comply with various laws.

We retain your email address after account deletion to prevent repeated free AI credit grants. This separate eligibility record is used only for that purpose, not for marketing. We retain it for as long as reasonably necessary to enforce our one-time free AI credit offer, subject to applicable law.

The security of your personal information is important to us. We follow industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data during transmission using Secure Socket Layer (SSL) technology.
• Use of secure servers and firewalls.
• Regular security assessments and updates to our systems.

However, please be aware that no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. We encourage you to take steps to protect your information by using strong passwords and keeping them confidential.

Not For Children

Hashchats is not directed at children under the age of 18. Users aged 13-18 require verbal or written parental consent to use our service. Our service is not suitable for anyone under 13. As we cannot reliably verify our user's age technically, we rely on users to comply with these age restrictions. By using Hashchats, users affirm they are over 18 or have obtained the necessary parental consent if aged 13-18. For any concerns regarding age verification or parental consent, contact us at contact@hashchats.com.

If you suspect a child under 13 has provided personal information to Hashchats, please email us at contact@hashchats.com. We will investigate and, if necessary, remove that account and all of their information from our systems as swiftly as possible.

Changes To This Policy

We may sometimes make changes to this policy. If we make material changes that adversely affect your rights under this policy, we will let you know by posting an announcement on the site or sending you an email or text in advance of the changes coming into effect. Continuing to use Hashchats after a change to this policy means you accept the new policy. If you have any questions, please email contact@hashchats.com.