Draft, pending review. This page is not final and may change before Huckle launches.
Stateshift LLC ("we", "us", "our") makes Huckle, a relationship advice app where you talk and text with a huckle, a fox character run by AI. This policy explains what we collect when you use Huckle, why, who helps us run it, how long we keep it and how to delete it.
Your huckle is an AI. She is not a person, a therapist or a crisis service.
Huckle is for adults 18 and over. We don't ask for your age, and we don't knowingly collect information from anyone under 18.
Account. When you first open Huckle we create an account without asking who you are. Your phone gets a random install identifier, which we store only as a one-way hash. We use it to keep you signed in on that phone and to cap the free spoken replies in the opening questions per phone. We also keep a one-way hash of the network address used to create an account or ask for a sign-in code, to limit how many of those one network can make. If you add an email address or sign in with Apple, we store that too, along with your name if Apple shares it.
Your answers to the opening questions. The Elder Huckle asks you five questions when you start. If you answer out loud, your recording is sent to OpenAI to turn it into text and is not kept. We keep the text of each answer and of her reply. From your answers we work out an Enneagram type and where things stand in your love life (for example single, dating or in a relationship), and keep those, along with the lines she said to you and which young huckle she picked. Your huckle uses them as background in your conversations.
Your conversations. When you talk out loud, your voice is streamed to OpenAI so your huckle can understand you and answer in real time. When you type, your messages, along with the recent messages before them in that conversation, are sent to OpenAI to write her replies. If you use voice typing, the recording is sent to OpenAI to turn it into text and is not kept. We ask OpenAI not to store any of this, and we do not keep recordings or transcripts. After a conversation, she writes about your day, and we keep a few encrypted notes on what you shared until her entry is ready the next morning. When memory is on Remember automatically, we also keep an encrypted copy of what you said for 90 days, so she can follow up on things you mentioned. OpenAI may keep data sent to its API for a limited time to monitor for abuse, under its own policies. The message history you see in the app is kept on your phone.
Screenshots and photos. When you send a screenshot or photo, for example of a message thread for her to read, the image is sent to OpenAI to read what's in it and to check it for signs of self-harm. We don't keep the image. A short description of it, and the messages she read from a screenshot, are sent back to your phone and kept there with your conversation. Phone numbers and email addresses she reads in a screenshot are hidden from her reply.
What she remembers. Your huckle keeps short notes in your own words, so she can remember your story. Notes can cover your interests and routines, how you like to be talked to, goals, how you've been feeling and what helps, the people in your life (a first name or nickname, who they are to you and one line on where things stand), things you're waiting on or working through, and things between the two of you, such as a running joke, an experiment you're trying or advice you gave her about her own life. Notes about how you've been feeling are health-related information. Memory starts on Remember automatically: when you end a conversation, the app sends what you said in it to our server, OpenAI suggests notes from it, and we keep them. Apart from the 90-day copy described above, what you said is not kept, only the notes. If you switch to Ask first, we only keep a note after you approve it; if you switch memory off, we keep no new notes and she doesn't use the ones you have. You can see, change or delete every note at any time in Settings, under What Silvertail remembers (or the name you gave her). She writes a short journal entry about your day and notices things about you, and keeps the cards you make together in guided activities. These are encrypted and kept until you delete them, choose Forget all or delete your account. You can lock them with Face ID. Some things are never kept as notes, including thoughts of suicide or self-harm, accounts of trauma or abuse, medication, substance use, eating and body image, sexual or reproductive health, surnames, addresses, contact details, money or legal matters, passwords, and secrets someone told you in confidence.
Check-ins and small things to try. If she offers to check in with you about something later, we store a short topic and the line she'll open with until a week after the check-in is due, and the reminder is scheduled as a notification on your phone. If you pick a small thing to try today, we store which one and whether you did it.
Safety checks. Every message you type, what you say out loud as the app and our servers receive it, your answers to the opening questions, and screenshots and photos you send are checked by OpenAI's moderation service and a short list of phrases for signs that you might be thinking about hurting yourself. When something is flagged, one more OpenAI check reads that message with the last couple of lines of your conversation, to tell whether you meant something ordinary, like a goodbye to an ex. We do not store what you said in either check. If she then gently asks what you meant, we record that she asked, whether it was voice or text, your region and how it turned out, but not your words. If the moderation service is unavailable, the phrase list runs on its own.
Crisis records. This is sensitive information. When the crisis protocol starts, we record the date, whether it was voice or text, your region (worked out from your account's time zone) and which check noticed it, which we must count for reporting under California law. We also mark that conversation as a crisis conversation, and store on your profile the time until which the protocol stays active, two hours after the last sign.
Use of the app. We record how long voice conversations last, how many messages and images you send, which practices you finish, when your huckle grows a tail, events such as reaching a screen or finishing the opening questions (including the type you were given), your app version and device type, and your account's time zone. We use these to run your allowance, keep costs in check, improve the app and fix problems.
Purchases. Apple handles payment. RevenueCat tells us whether you have an active membership or free trial, when it ends, and about extra talk time you buy or Apple refunds. We never see your card details.
We do not sell your information, and we never use your conversations or notes for advertising. Memory is the same on every plan; we do not charge for it.
We share information only with companies that help us run Huckle, and only what they need: OpenAI (your conversations, voice and images, turning speech into text, her spoken voice, the opening questions, note suggestions and safety checks), Apple (Sign in with Apple and payment), RevenueCat (purchases), Resend (email), our hosting provider, and Sentry (error reports from the app and our servers, which have conversation content removed). We may also disclose information if the law requires it, or as part of a merger or sale of the business, in which case we will tell you.
Huckle is made by the same company as the Stateshift app, and the two apps share one account system. If you use the same email address in both, it is one account: your Huckle notes and history and your Stateshift history live on it together. If you use Stateshift, Huckle can see which Stateshift practices you did today, and your Stateshift answer about how meditation affects you decides which practices she offers. Deleting the account deletes your data from both apps.
We keep your account, your answers to the opening questions, your type, notes and allowance records while your account exists. Forget all notes in Settings deletes your notes and also clears your answers to the opening questions and your type. Practical goals you share expire from memory after 90 days. Check-ins are deleted a week after they are due. Crisis marks on conversations and your profile stay with your account until you delete it; the profile mark stops having any effect two hours after the last sign. Counts of crisis protocol activations and app usage events are kept, with the link to your account removed when you delete it. Network address hashes are kept with our security records.
You can delete your account from Settings in the app, or at web.stateshift.app/delete-account. Deletion removes your account, notes, answers and records, and your Stateshift account and history if you have one with the same email. We keep a short record that the account was deleted: its email address and name if it had them, when it was created, and, if you also used Stateshift, your Stateshift questionnaire answers. Copies may remain in backups for a limited time until they are replaced. Cancelling a membership is separate and is done in your Apple account settings.
Depending on where you live, you may have the right to know what we hold about you, to get a copy, to correct it, to delete it, and not to be treated differently for asking. If you live in California, Washington or another state with consumer health data laws, these rights include your notes about how you've been feeling. To make a request, email jonny@stateshift.app. We will confirm it is you before acting.
We use reasonable technical and organizational measures to protect your information, including encryption in transit. No system is completely secure.
If we change this policy we will update the date at the top, and tell you in the app if the change is significant.
Stateshift LLC
148 Granite Drive
Boulder, CO 80302
Email: jonny@stateshift.app