Halfsaid

Privacy Policy

Last updated August 31, 2026

The short version

Halfsaid holds some of the most personal information a service can hold, and it exists only to help the two of you understand each other. We don’t run ads, we don’t sell data, we don’t use your content to train AI models, and nothing about your relationship reaches your partner without a consent rule saying it may.

What we collect

Your account: name, email address, password hash, and optionally a region and timezone. Your relationship record: the things you and your AI choose to write down, such as needs, memories, worries, and the small things that make you feel loved, along with the connections between them. A consent log: a record of every share, retraction, pause, and setting change. Connection records: which AI clients you connected, which tools they called and when, without a second copy of what was said.

We don’t collect browsing history, contacts, location, or anything from your device beyond what the app needs to run, and we use no third-party analytics or advertising trackers.

How sharing is kept safe

Everything you record starts on your side of the record. Ordinary material crosses to your partner’s assistant under the standing consent you both gave when you connected. Sensitive material is held back until your assistant has asked you and you have agreed. Anything you mark as shame is never shared automatically, under any setting.

Sharing requires both of you. If either person pauses or withdraws, nothing new crosses in either direction, starting with the very next request. Topic blocks (“never share anything about X”) apply to both new and previously shared material, and every read your partner’s assistant performs is checked against your current consent at that moment, never against a cached copy.

Safety notes you raise privately are visible only to you. They never appear to your partner, in any export, or in any shared view.

Where it lives

Data is stored in a managed Postgres database and served through our hosting provider. It is encrypted in transit and on disk. Access is restricted to what the service needs to run; there is no staff dashboard that browses relationship content.

Who else touches it

Only infrastructure providers under data-processing agreements: our database host (Neon), our hosting provider (Vercel), and, if email is enabled, an email delivery provider for sign-in links and notifications. Your own AI assistant (Claude, ChatGPT, Gemini, or another) reads and writes through the connection you authorize; what that assistant’s maker does with your conversations is governed by their privacy policy, not this one.

If you and your partner both approve a counselor share, the counselor you name can read a limited, time-boxed view that you both scoped. Either of you can end it alone, instantly.

How long we keep it

As long as your account exists. When you delete your account, your content and account data are deleted, and the consent log is retained only as long as needed to resolve disputes about what was shared, then deleted too. Things your partner wrote about their own life in their own words remain theirs.

Your rights

You can read everything the service holds about you inside the app, export it, correct it, retract shares, and delete your account. If you are in the EU, UK, or another jurisdiction with data protection law, you have formal rights on top of this; the GDPR page spells them out.

Changes and contact

If this policy changes in a way that matters, we will tell you before the change takes effect. Questions and requests go to hello@halfsaid.co.