Effective Date: August 22, 2026

Pocket Help LLC ("we," "our," or "us") respects your privacy and is committed to protecting your personal information.

Hāloa Flow is designed to help users stay informed, prepared, and organized throughout their day. We believe privacy should be the default, and we have intentionally designed Hāloa Flow to minimize data collection and maximize on-device processing.

Information We Access

Depending on the features you choose to enable, Hāloa Flow may access:

• Calendar information, including event titles, dates, times, and locations; and, if you use the optional AI Add to Calendar feature, the ability to add a new event to your calendar, only when you've reviewed and approved it (see "AI-Assisted Add to Calendar" below)

• Notification information used to identify relevant reminders and updates

• Gmail account information, when you explicitly choose to connect Gmail, including the ability to send a reply on your behalf, but only when you've reviewed and approved it (see "AI-Assisted Draft Replies" below), and the ability to delete (move to Trash) one specific email at a time, only when you choose to remove it from a Catch-Up card

• Microsoft Outlook / Microsoft 365 account information, when you explicitly choose to connect a Microsoft account, with the same read, send, and delete access as Gmail

• Email account information for other providers (such as Yahoo, iCloud, Zoho, FastMail, or GMX) if you choose to connect one directly, using the email address and password (or app-specific password) you provide

• Approximate location, if you use travel-time or weather-aware features, along with a "home base" location you set yourself

• Basic application preferences and settings

Access to this information is used solely to provide scheduling awareness, meeting preparation, reminders, summaries, and other assistant-related functionality within the application.

How Information Is Used

Information accessed by Hāloa Flow is used to:

• Generate Morning Briefings

• Identify upcoming meetings and events

• Surface relevant meeting preparation information

• Detect scheduling conflicts and timing issues

• Provide End-of-Day summaries and reminders

• Improve the user's awareness of important events and commitments

• Draft a suggested reply to a specific email, only when you choose to use that feature (see below)

• Detect a proposed date, time, or event in a specific flagged email and offer to add it to your calendar, only when you choose to use that feature (see below)

AI-Assisted Draft Replies

Hāloa Flow offers an optional, subscriber-only feature that drafts a suggested reply to a specific email you've flagged for follow-up.

When you use this feature, the subject, sender, and body of that one email are sent securely to a server we operate, which asks an AI language model (provided by Anthropic) to draft a reply. The draft is shown to you to review and edit. Nothing is ever sent on your behalf unless you personally tap "Send."

Our server does not store the content of your emails or drafts. It keeps only a usage count, tied to an anonymous, random identifier for your installation, so we can enforce a fair-use limit. It is not tied to your name, email address, or connected accounts.

This feature is off unless you turn it on, and is separate from the everyday on-device features described elsewhere in this policy.

AI-Assisted Add to Calendar

Hāloa Flow offers a second optional, subscriber-only feature that looks for a proposed date, time, or event in a specific email you've flagged, and offers to add it to your device calendar.

When you use this feature, the subject, sender, and body of that one email, along with your device's current date/time and time zone, are sent securely to a server we operate, which asks an AI language model (provided by Anthropic) to identify any event details present. The suggested event (title, date, time, and location) is shown to you to review and edit. Nothing is added to your calendar unless you personally tap "Save to Calendar."

Our server does not store the content of your emails. It keeps only a usage count, tied to the same anonymous, random installation identifier described above, to enforce a fair-use limit, separate from the Draft Replies limit.

Saving the event itself happens directly on your device, using Android's standard calendar permission. It does not require connecting or re-authorizing your Google or Microsoft account, and no calendar data is sent to Anthropic or stored on our server.

This feature is off unless you turn it on, and is separate from AI-Assisted Draft Replies and the everyday on-device features described elsewhere in this policy.

Data Storage

Most information processed by Hāloa Flow remains on the user's device.

The exceptions are the AI-Assisted Draft Replies and AI-Assisted Add to Calendar features described above, where a single email's content (and, for Add to Calendar, your device's current date/time and time zone) is processed by our server and Anthropic's API at the moment you request it.

If you connect an email account via IMAP (for providers like Yahoo, iCloud, Zoho, FastMail, or GMX), your email address and password are stored on your device using Android's built-in encrypted storage. We never see or store this password ourselves.

Pocket Help LLC does not sell personal information and does not use personal information for advertising purposes.

Data Sharing

Pocket Help LLC does not sell, rent, or share personal information with third parties for marketing purposes.

We do not use third-party advertising networks within Hāloa Flow.

The only third parties involved in Hāloa Flow's operation are:

• Google and Microsoft, to authenticate you and read/send mail on your behalf through your own account permissions

• Your email provider directly, if you connect an account via IMAP

• Anthropic, solely to generate a draft reply or identify event details when you use those specific features

• Open-Meteo, to fetch weather using an approximate location, for travel-aware features

Compliance with Google API Services User Data Policy

Hāloa Flow's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Permissions

Hāloa Flow may request permissions including:

• Calendar access, including write access if you use the AI Add to Calendar feature to save a suggested event

• Notification access

• Network access

• Gmail connectivity, when explicitly enabled by the user, including the ability to send on your behalf or delete a single flagged email, each only when you take that specific action

• Microsoft account connectivity, when explicitly enabled by the user, with the same send and delete capability as Gmail

• Location, for travel-time and weather features, when explicitly enabled by the user

Users may revoke permissions at any time through their device settings, or disconnect a connected account at any time from within the app.

Data Retention

Information derived from your connected accounts (such as flagged emails and briefing history) is automatically deleted after a limited window (7 days on the free plan, 30 days for subscribers) rather than being kept indefinitely.

Data Security

We use industry-standard measures to protect the information Hāloa Flow accesses:

• All communication between the app and any server, whether our own, Google's, Microsoft's, or Anthropic's, is encrypted in transit using HTTPS/TLS.

• We never see or store your Gmail or Microsoft account password. Sign-in happens through Google's and Microsoft's own authentication systems, and the resulting access tokens are held in those platforms' secure, encrypted token storage, not in any format we control.

• If you connect an email account via IMAP, your email address and password are stored only on your device, using Android's built-in encrypted storage (EncryptedSharedPreferences with hardware-backed key management, where available). This information is never transmitted to or stored on our servers.

• As described above under Data Storage, our server does not retain the content of any email or draft processed by the AI-Assisted features, only an anonymous, random installation identifier and a usage count, for enforcing fair-use limits.

• Information derived from your connected accounts is automatically deleted on the schedule described under Data Retention, rather than kept indefinitely.

Children's Privacy

Hāloa Flow is not directed toward children under the age of 13 and does not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time as Hāloa Flow evolves. Updated versions will be posted on this page.

Contact

Pocket Help LLC

Email: info@kirkshorte.com

Website: www.getpockethelp.com