Privacy Policy

This Privacy Policy explains what personal data Haanora (“Haanora,” “we,” “us,” or “our”) collects through haanora.com and the Haanora application (the “Service”), how we use and share it, and the choices you have. It should be read alongside our Terms of Use.

For users in India, this policy is intended to align with the Digital Personal Data Protection Act, 2023 (“DPDP Act”). For users elsewhere, we describe below the rights available to you under applicable local law (for example, the GDPR in the EU/UK, or state privacy laws in the US).

Account information. When you sign in with Google, we receive your name, email address, and profile photo from Google, and we create a Haanora account linked to that Google identity.

Onboarding & profile information. Information you provide during onboarding and the capacity/goal-setting interview — such as your goals, deadlines, academic context, and available time/capacity — so Haanora can build and adapt your plan.

Content you create. Roadmaps and goals, tracker and momentum data, captures and notes (“Second Brain”), interview-prep responses, and messages you send to the Hanu assistant. If you use Circle, this can include a Google Meet link you choose to paste in for coordinating with peers.

Payment information. If you subscribe to a paid plan, our payment processor, Razorpay, collects your payment details (card, UPI, netbanking, etc.) directly. We receive confirmation of payment, your plan, billing cycle, and transaction status — not your full card or bank account number.

Communications. If you email us or subscribe to updates or join the pricing waitlist, we keep the email address (and the content of any message) so we can respond or send what you asked for. Every update includes an unsubscribe link, and you can also ask us to delete your address at any time.

Usage & device data. Standard technical data such as IP address, browser and device type, pages/features used, and timestamps — collected automatically to operate, secure, and improve the Service.

• Operate the Service — authenticate you, save your data, and sync it across sessions.
• Generate and adapt your roadmap, plans, and Hanu assistant responses using AI models.
• Process payments, manage subscriptions, and send billing-related communications.
• Provide customer support and respond to your requests.
• Maintain security, detect abuse or fraud, and enforce our Terms of Use.
• Understand how the Service is used so we can fix problems and improve features.
• Send product updates or newsletter content you’ve opted into (you can unsubscribe anytime).
• Comply with legal obligations.

Features like roadmap generation and the Hanu assistant work by sending relevant parts of your onboarding, goal, and conversation data to third-party AI model providers so they can generate a response. Depending on the feature and what’s available at the time, this may include NVIDIA (Nemotron) and Google (Gemini).

We only send the data needed to generate the specific response (for example, your stated goals and recent plan context) — not your full account history. These providers process that data under their own privacy and data-handling terms, and may retain it briefly for abuse-monitoring or debugging purposes as described in their own policies. We don’t control, and aren’t responsible for, how each provider ultimately handles data on their end, but we work with providers who offer API-level terms that restrict use of your data to providing you the response.

We don’t sell your personal data. We share it only with:

• Service providers who help us run Haanora — Supabase (database, authentication, and hosting infrastructure), Google (sign-in), Razorpay (payments), and the AI model providers listed above — each bound to use your data only to provide their service to us.
• Legal & safety — if required to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Haanora, our users, or the public.
• Business transfers — if Haanora is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this policy (or a policy that offers at least equivalent protection).
• With your direction — for example, if you choose to share a Circle Google Meet link with peers, that link (and your use of it) is visible to whoever you share it with.

Cookies we set. Haanora sets three first-party cookies, all of them necessary for the Service to work: a session cookie that keeps you signed in, a short-lived cookie (about ten minutes) that returns you to the page you started from after you sign in with Google, and a cookie recording which roadmap you last had open. These need no consent, and a visitor who has not signed in gets none of them.

Optional: the visitor count. Only if you choose “That’s fine” on our cookie card, we set one more first-party cookie (and a matching entry in your browser’s local storage) holding a random anonymous ID for up to two years. It is used only to count each person once in the “people building with Haanora” number on our homepage, and it carries no information about you. If you choose “Essentials only”, we don’t set it and you are not counted.

Local storage. A few things stay in your browser rather than on our servers — a Circle meet link you’ve saved, your answers to the goal interview while you’re still filling it in, and a note of whether you’ve already seen the product walkthrough. This data lives on your device and is cleared when you clear your browser’s site data.

What we don’t use. We do not run third-party analytics, advertising, or retargeting scripts, and we do not build profiles of you across other websites. Any usage figures we look at are counted from the records the product already keeps in our own database, not from a tracking service. We do not sell your data to ad networks.

Payments. If you begin a payment, the Razorpay checkout loads at that point and may set its own cookies under Razorpay’s privacy policy. It is not loaded unless you start a payment.

Your control. You can block or delete cookies through your browser settings, though blocking ours will break sign-in and core functionality. You can change your cookie choice at any time with “Cookie settings” in the footer of any page. If we ever introduce analytics or other non-essential cookies, we will update this section and ask for your consent first.

We keep your account and content data for as long as your account is active, so the Service can keep working the way you expect. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we need to retain limited records (for example, transaction records) to comply with legal, tax, or accounting obligations, or to resolve disputes.

We rely on our infrastructure providers’ security controls (including encryption in transit) and follow reasonable practices to protect your data against unauthorized access, alteration, or loss. No method of transmission or storage is 100% secure, and we can’t guarantee absolute security, but we take reasonable steps appropriate to the sensitivity of the data involved.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated personal data.
• Export a copy of your data in a portable format.
• Withdraw consent (for example, for AI processing tied to a specific feature) where processing is based on consent.
• Opt out of non-essential communications, such as our newsletter.
• Lodge a complaint with your local data protection authority.

You can exercise most of these directly from your account settings, or by emailing hanusharan1405@gmail.com. We’ll respond within a reasonable time and may need to verify your identity first.

Haanora is used by students, some of whom are minors. We do not knowingly collect personal data from children under 13. Users between 13 and 18 should have a parent or legal guardian’s involvement and consent to use the Service, consistent with our Terms of Use. Under the DPDP Act, anyone under 18 is treated as a “child,” and we rely on the involvement of a parent or guardian in creating and managing the account rather than processing a minor’s data on the basis of the minor’s own consent alone.

A parent or guardian who believes their child has provided us personal data without appropriate consent can contact us at hanusharan1405@gmail.com to request deletion.

Our infrastructure and AI providers may process and store data on servers located outside your home country, including in the United States and other regions where those providers operate. Where required, we rely on the safeguards those providers make available (such as standard contractual terms) for transferring data across borders.

We may update this Privacy Policy as the Service evolves or as legal requirements change. We’ll update the “Last updated” date above, and for material changes we’ll make reasonable efforts to notify you (such as an in-app notice or email) before they take effect.

In accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023, the Grievance Officer / contact for privacy questions and requests is:

Bulusu Hanu Sharan, Founder, Haanora
Email: hanusharan1405@gmail.com

We aim to acknowledge every privacy request within a few business days and to resolve it within the time the law allows.