01Who we are
HUF Ltd is the data controller for the personal data described in this policy. You can contact us about privacy at [email protected].
HUF Ltd is an independent company. We are not affiliated with, endorsed by, sponsored by, or officially connected to HP Inc., OpenAI, Google LLC, Apple Inc., Microsoft, Anthropic, Seiko Epson, Canon, Brother or any other brand referenced in our apps or on this website. Brand names are used only to describe compatibility, and all trademarks belong to their respective owners.
02Summary
- We collect only the minimum data needed to run each app.
- We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
- Optional data use (such as analytics or sending prompts to an AI provider) happens only after you consent, and you can withdraw consent at any time.
- We never ask for, store or use passwords for your third-party accounts (HP, OpenAI, Google and so on).
- You can delete your account and data at any time. See Delete Account & Data.
03Data we collect
| Category | Examples | When |
|---|---|---|
| Account data | Email address, display name, sign-in identifier (e.g. Sign in with Apple, Google Sign-In) | Only if you create an account |
| Content you provide | AI prompts and responses, documents or images you choose to process, support messages | When you use a feature or contact us |
| Device & diagnostic data | Device model, OS version, app version, crash logs, performance data | Automatically. Crash reporting can be switched off in settings |
| Usage data | Features used and session counts, never linked to your identity for advertising | Only with analytics consent |
| Purchase data | Subscription status and transaction ID (from Apple or Google) | When you buy. We never receive your card details |
| Local network data | Printer names and IP addresses on your network | Printer apps only, processed on-device and not sent to us |
We do not collect precise location, contacts, health data, biometric data or advertising identifiers unless an app clearly requests them for a stated feature and you grant permission.
04How we use data and our legal bases
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Providing app features you request | Performance of a contract |
| Sending prompts to an AI provider to generate responses | Your consent, plus performance of a contract |
| Managing subscriptions and verifying purchases | Performance of a contract |
| Crash reporting, security and fraud prevention | Legitimate interests |
| Product analytics | Consent |
| Answering support requests | Legitimate interests / contract |
| Meeting legal obligations | Legal obligation |
05Third-party service providers
We share data only with providers who process it on our behalf, under written data processing terms:
| Provider | Purpose |
|---|---|
| Google Firebase / Google Cloud | Hosting, authentication, database, crash reporting (Crashlytics), analytics (with consent) |
| Apple App Store / Google Play Billing | Payments and subscription management |
| OpenAI, Google (Gemini API), Anthropic (Claude API) | AI apps only: processing your prompts to return responses, through their commercial APIs |
| RevenueCat (where used) | Subscription status management |
AI providers receive only the content you submit for processing. They act under their API terms, which do not use API data to train their models by default. We do not send your name or email address with your prompts.
06Advertising & tracking
Most HUF Ltd apps contain no third-party advertising. If an app does show ads, it will say so on its store listing. On iOS, we will ask your permission through Apple's App Tracking Transparency before any tracking. On Android, you can reset or delete your advertising ID in your device settings. We never use your data for advertising without the permissions required by law and by the store.
07International transfers
Our providers may process data outside the UK or EEA, including in the United States. Where they do, we rely on adequacy decisions, the UK International Data Transfer Addendum or EU Standard Contractual Clauses.
08Retention
- Account data: kept while your account is active, and deleted within 30 days of a deletion request.
- AI conversation history: stored on your device by default. If you turn on cloud sync, it is deleted from our servers when you delete it or your account.
- Crash logs: up to 90 days.
- Support emails: up to 24 months.
- Purchase records: as long as tax and accounting law requires (usually 6 years).
09Security
We encrypt data in transit (TLS) and at rest, limit staff access on a least-privilege basis, store API keys on the server rather than in apps, and review our security regularly. No system is perfectly secure. If a breach affects you, we will notify you and the regulators as the law requires.
10Your rights
Depending on where you live (including under the UK GDPR, the EU GDPR and the California CCPA/CPRA), you may have the right to:
- access your data and get a copy of it;
- correct it;
- delete it;
- restrict or object to how we process it;
- data portability;
- withdraw consent at any time;
- opt out of any "sale" or "sharing" (we do neither);
- not be treated differently for using these rights.
To make a request, email [email protected]. We will respond within 30 days. You can also complain to your local data protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk).
11Children
Our apps are not directed at children under 13 (or under 16 where local law requires). See our Children's Privacy notice.
12Changes
We will post any updates on this page and change the "Last updated" date. If a change is significant, we will tell you in the app before it takes effect and ask for your consent again where the law requires it.