HiddenCloak turns a problem you describe into a short, practical action plan you can keep and track. This policy explains what we collect, how it’s used, and the choices you have. We’ve built it to keep as little as possible and to store what you save on your own device.

• Problems you describe, to generate a plan (see “Sensitive information and AI” below). • Your saved checklists, the steps you keep, your “worked / not yet” outcomes, and reminder settings, stored on your device. A checklist is copied to our servers only when it is shared anonymously, as explained in “Where Your Data Lives”. • If you use “Two models”: the AI keys you enter and the judging criteria you choose or write, both kept on your device only. • Account details if you create one: your email address, a display name, and your password stored only in hashed form. We never store or see your plain-text password. • Short-lived email verification and password-reset codes (stored hashed; they expire in about 10 minutes and can be used once). • An optional area you type (for example “Austin, TX”) to localize a “find a professional near you” link. This is text you enter; we do not access your device’s GPS or location. • A random, anonymous session identifier and a count, used only to apply the free-usage limit before sign-in. It is not linked to your identity. • Notification permission, only if you turn on check-in reminders. Reminders are scheduled locally on your device. • If you use Conversations: your pseudonym, the messages you send, who you have blocked, and reports you make or that concern you (see “Conversations”). • Anonymous usage counts, such as how many plans were made in a day. You can switch these off (see “Usage counts”). • A security log of sign-ins, failed attempts and password resets. Your email address and IP address are stored in it only as keyed, one-way hashes. We do not request access to your camera, photos, contacts, device location, or your list of installed apps.

HiddenCloak can help with everyday, health, mental-health, legal, and financial problems, so what you write may be personal or sensitive. To create your plan and to check for urgent situations, the text you submit is sent to OpenAI, our default AI provider, for processing. The plan is returned to your device, where you choose what to keep. If you choose “Two models” in Profile → Who answers, your question is also sent from your phone, with your own API keys, to the two AI providers you picked (for example OpenAI, Anthropic, Google, xAI or OpenRouter). Those requests go directly to that provider under its own terms and privacy policy, and it bills your account. Your keys are kept in your phone’s secure keychain and are never sent to us. The judging criteria you tick or write in Profile → Judging criteria are stored on your phone and sent only to those two providers, so each can judge the other’s plan. We still check your question for a crisis first, and the winning plan’s links and app suggestions are checked on our server. Your problem text is not shown to anyone else. What we keep on our servers is described in “Where Your Data Lives”. If a message suggests a crisis such as self-harm or a medical emergency, the app shows crisis resources (for example, 988 or 911 in the US) instead of an action plan. Plans are general information, not professional medical, legal, or financial advice. Please avoid including passwords, full account or card numbers, or government ID numbers in your descriptions.

We use your information only to: generate and show your action plan; verify your email and keep your account secure; send the verification and reset codes you request; apply usage limits; keep Conversations safe (screening messages before delivery and reviewing reports); and understand, in aggregate, how the app is used. We do not show ads, send marketing email, or sell or share your information with advertisers or data brokers.

Your checklists, outcomes, and reminders stay on your device; clearing them in the app or uninstalling removes them. Your account email and hashed password are stored on our hosting provider’s servers until you delete your account. If you are not signed in, nothing you write is stored on our servers. If you are signed in, “Contribute what worked” is on unless you turn it off in Profile → Data & Privacy. While it is on, the first time you mark a step on a checklist as worked or didn’t work, that checklist is shared anonymously: we store the problem description you wrote and your marks, as described below. Turning “Contribute what worked” off deletes every checklist it shared. You can also make any single checklist private from the Private / Shared tag on that checklist (or its ⋯ menu), and it stays private. When “People” opens in Profile → Who answers, choosing it will also share each new checklist anonymously and open it to conversations, so that someone with a similar problem can be introduced to you. If no one is found, your plan comes from our default model. Otherwise, each checklist stays private until you share it yourself, one checklist at a time. When a checklist is shared, we store the problem description you wrote and which steps you marked as worked or didn’t work. Steps written by your own models are stored with your marks but are never counted in what other people see. We do not store your name, your email, your reminders, or anything that links that checklist back to you when it is shown to other people. Sharing requires an account so that you can withdraw it later. In the current version of the app, shared checklists are not shown to anyone yet: they build up the community so that matching can open later. When it does, other people will only ever see combined counts: for example, “3 others described something similar,” and how many of them found a particular step helpful. We do not show anything unless several different people have shared a similar problem, so a single person’s checklist is never displayed on its own. Sharing a checklist does not let anyone contact you; conversations are a separate choice, described next. Switching sharing off, or deleting the checklist, deletes our copy: it is removed, not hidden. Deleting your account removes every shared checklist along with it.

Conversations, and the “People” choice that leads to them, are not available in the current version of the app. This section describes how they will work once they open. Conversations are optional, for adults, and off until you turn them on for a specific shared checklist. When you do, we may introduce you to one person who described something similar and has done the same. Neither of you sees the other’s checklist or problem text, and you appear to each other only under a pseudonym. Messages are stored on our servers so both of you can read them. Before a message is delivered it is checked automatically: text that suggests a crisis is not delivered and you are shown crisis resources instead; phone numbers, email addresses, links and invitations to other apps are blocked; and the text is sent to OpenAI’s moderation service to screen for abuse. A refused message is never stored; we keep only a note that a message was refused and the category, for 90 days, to detect repeated abuse. If you report a message, we keep a copy of it with the report so a person on our team can review it. Reports and that copy are kept for up to 180 days after the report is resolved. A conversation that has ended is deleted 30 days after its last message. Deleting your account deletes your conversations and messages; a report about you keeps the reported text without linking it to your account.

The app counts a small, fixed set of actions (for example “a plan was created” or “a step was marked as worked”) and sends the totals to us with the week you installed the app. No problem text, name, email, account or advertising identifier is included. A random number created on your phone lets us count how many devices were active each day; our server turns it into a value that changes every day, so days can’t be linked together, and keeps only the daily totals. This is not used for advertising or tracking. Switch it off anytime in Profile → Share anonymous usage counts.

We share the minimum needed with providers that help run the service: • OpenAI: receives your problem text to generate plans and screen for crisis situations; the text of a checklist you share, to find similar ones; and conversation messages, to screen them before delivery. • AI providers you choose: with “Two models”, your phone sends your question, and your judging criteria, directly to the two providers you set up, using your own keys. We are not a party to those requests. • Resend: receives your email address to deliver verification and reset codes. • Apple iTunes Search API: used to look up real App Store listings when an app is suggested. • Google Maps: we build a “find near you” search link from a professional type and the area you type; opening it is your choice. • Our hosting and database provider stores account data. Each provider processes data only to provide its service.

Data is sent over encrypted connections (HTTPS). Passwords are hashed with bcrypt; verification codes are stored hashed, expire quickly, and are single-use. Changing your password signs out previously issued sessions. Repeated failed sign-ins or code guesses temporarily lock that account, and every sign-in is recorded in a security log that stores email and IP addresses only as keyed hashes.

On-device data remains until you clear it or uninstall the app. Account data is kept until you delete your account. A shared checklist is kept until you switch sharing off, delete the checklist, or delete your account; each of those removes our copy. Verification codes expire automatically and are deleted a day later. The security log is kept for 90 days. Usage counts are kept only as daily totals. Conversation data is kept as described under “Conversations”.

You can permanently delete your account and the data tied to it at any time from Profile → Delete Account. Deletion is immediate and cannot be undone. You can clear local data by deleting checklists or uninstalling the app, and turn reminders on or off at any time (or revoke notification permission in your device settings). You may also contact us at privacy@hiddencloak.com for help with access or deletion.

HiddenCloak is not directed to children, and some topics are intended for a mature audience. We do not knowingly collect information from children under 13. Conversations are for adults (18+) only. If you believe a child has provided us information, contact privacy@hiddencloak.com and we will remove it.

We may update this policy as the app evolves. We will revise the “Last updated” date above and, for significant changes (such as enabling data sharing), notify you in the app before they take effect.

For any privacy questions or requests, contact privacy@hiddencloak.com. For safety concerns about a conversation, contact safety@hiddencloak.com.