Haku Privacy Policy
Last updated 1 October 2026
This policy covers three things: Haku Terminal, the Mac app; Haku: Agent Voice, the iPhone and iPad app; and this website, terminal.haku.sh. It lists every place your data can go.
The short version: there is no Haku account and no Haku cloud. We run no servers that your sessions, code, voice or messages pass through, and none of our apps contain analytics, advertising or tracking code. The only things that reach a company we chose are your licence check (Dodo Payments), the update check (our download server) and, if you join the waitlist, your email address. Everything else goes only where you point it: your own machines, or services you sign in to with your own account or key.
Haku Terminal (Mac)
Haku Terminal runs on your Mac. Your sessions, transcripts, goals, journal, project memory and settings are stored on your Mac. API keys and your licence key are kept in the macOS Keychain.
Always on
| What | Goes to | What is sent |
|---|---|---|
| Licence | Dodo Payments (our payment provider) | When you enter a licence key: the key and your Mac's name, to activate it. After that, the key and its activation ID are checked again at launch and about once a day. During the free trial, nothing is sent; the trial is tracked on your Mac. |
| Updates | Our download server (Cloudflare R2) | The app checks for a new version by fetching a public update list, using the Sparkle updater. No system profile is sent. Like any download, the server sees your IP address. |
Only if you use them
| What | Goes to | When |
|---|---|---|
| Voice | Your Mac, by default | Speech-to-text and text-to-speech run locally, built into Haku. If you add your own key for ElevenLabs, Deepgram or OpenAI and choose that service, your audio (for speech-to-text) or the agent's reply text (for text-to-speech) goes to that service, under your account. |
| Coding agents | The agent's maker | Haku starts the agent programs you install, such as Claude Code, Codex, OpenRouter or Hermes. Each one signs in the way its maker intended and sends your prompts and code to that maker under your own account. Local models (MLX) stay on your Mac. Haku never sees your agent keys or passwords. |
| Built-in AI features | Anthropic, OpenAI, Azure OpenAI or OpenRouter | Only if you add your own API key for one of them in Settings. |
| Your other machines | Your own Macs and servers | Machines you add are reached over SSH or your own Tailscale network. Session data, messages between agents and your clipboard travel only between your own machines. Clipboard sharing between your Macs is on by default; you can turn it off in Settings. |
| Web search and weather | DuckDuckGo, Open-Meteo | When you or an agent asks for a web search, the search words go to DuckDuckGo. When you ask for the weather, the place name goes to Open-Meteo. |
| Browser control | The websites you visit | If you ask Haku to act in your browser, it uses your own browser, and pages load as they normally would. |
Haku: Agent Voice (iPhone and iPad)
The app talks only to your own Mac running Haku Terminal, over your own private Tailscale network. We run no server for it, and it contains no analytics, advertising or tracking code.
- Stored on your device: your Mac's address on your Tailscale network, your settings, and a short voice log for troubleshooting, which you can view in the app.
- Sent to your own Mac: messages you type to an agent, your voice while Voice is on, and requests for your sessions and their transcripts. None of this passes through a server we operate.
- Microphone: used only while Voice is on, to carry your speech to your Mac. The app does not keep recordings.
- Notifications: created on your device from what your Mac sends. No notification service of ours is involved.
Your Mac then handles your voice as described above: locally by default, or with a cloud voice service only if you set one up.
This website
- Waitlist: if you joined our waitlist, we store your email address and the page you joined from in our database (Supabase), and send ourselves one notice of the signup by email (Resend). We use your address only to tell you when access opens.
- Hosting: the site is hosted on Vercel, which keeps standard server logs, including IP addresses.
- Fonts: pages load fonts from Google Fonts, so Google sees your IP address.
- Download and purchase: the Mac app downloads from Cloudflare R2. If you buy a licence, Dodo Payments handles the checkout and your payment details; we receive your email address and the licence record, not your card.
- The site sets no cookies of its own and has no analytics or advertising.
Third parties
We do not sell or share your data. The services above act under their own privacy policies. The ones we chose are Dodo Payments, Cloudflare, Vercel, Supabase, Resend and Google Fonts. The rest, such as Tailscale, ElevenLabs, Deepgram, OpenAI, Anthropic and OpenRouter, are services you choose to connect under your own account.
Your choices
- Remove a cloud key or connection in Settings, and nothing more goes to that service.
- Delete Haku's data by removing the app and the folders
~/Library/Application Support/HakuTerminaland~/.haku. - To leave the waitlist or have your email address deleted, write to us.
Children
Haku is a developer tool and is not directed at children.
Changes
If this policy changes, the date at the top will change with it.
Contact
Questions about privacy: shahir@haku.sh