YOUR DATA
How Hakuna handles your data
Written in plain English, with the retention windows read from the settings the software enforces.
This is a description of what the product does today. The formal privacy notice, terms and data protection impact assessment are separate documents and are not published yet — this page will link to them when they are.
What we hold
The details you enter about the household's important things — providers, references, dates, costs, contacts and notes — plus any documents you upload or forward, your name and email address, and a history of what changed in your household.
Records marked "just me" are visible only to you. They are not included in another member's export, and they are destroyed if you leave the household.
What we never ask for
Full card numbers, account numbers with sort codes, PINs, passwords and security answers. Fields that accept a reference reject anything that looks like a payment card, and last-four fields accept only four digits. Hakuna is a place to record where things are, not a place to keep credentials.
How long things are kept
Loading the current retention windows…
Deleting your account or household
You can ask for an export of everything first, from Settings. It includes your records, your documents and the household history.
Who else processes it
- Email — transactional and forwarded email is handled by Postmark.
- Assisted entry — if you upload or forward a document and ask for help filling in the fields, that one document is sent to OpenAI for a single extraction call, with retention for training switched off. Nothing else is sent, and you approve every field before it is saved. You can enter everything by hand and never use it.
- Hosting — the application, database and documents are held in the UK.
The full subprocessor list, transfer mechanisms and the retention terms behind each of these belong in the privacy notice and the impact assessment, and are being finalised before launch.
Security
Signing in from a new device needs a code emailed to you. You can see everywhere you're signed in, sign a device out, or sign out everywhere and reset device trust in one action. Every change to your own account is recorded in a history only you can see. Uploaded files are scanned before they can be opened or included in an export.
Getting in touch
Questions about any of this, or a request to see or erase what we hold, go to your household owner's settings first — export and deletion are both self-service. For anything else, the contact address will be published alongside the privacy notice.