Privacy Policy

Last Updated: April 18, 2026


1. Introduction

1.1 What Haagah Is

Haagah ("Haagah", "we", "our", or "us") is the platform behind the Animus Project: humanity's family tree. Our purpose is the preservation of consciousness. We exist so that the voice, memory, and interior life of a person need not end when their body does. An Animus is a persistent, queryable approximation of a person — built from material that person (or a person with authority to act on their behalf) entrusts to us.

1.2 A Word About This Policy

This is not a typical privacy policy. Haagah asks for material no ordinary service asks for: private writings, recorded voice, photographs, videos, government identification, intimate correspondence, and — where applicable — the records surrounding a person's death. The reason is that these materials are what a life is made of, and approximating a consciousness requires working from the substance of that consciousness.

We believe the correct posture for a platform that asks this much is disclosure, not concealment. This Policy describes, in plain terms, what we collect, why, how we use it, who else touches it, who is permitted to access the Animus we build, and what happens when you die. If any part of this Policy is unclear, write to us at privacy@haagah.com before entrusting us with anything.

1.3 Acceptance

By accessing or using Haagah, you acknowledge that you have read, understood, and agree to be bound by this Policy and by our Terms of Service. Our use of cookies and similar technologies is governed by our Cookie Policy, which forms part of this Policy.

If you do not agree to this Policy, you must not use the platform and must not upload any material to it.

1.4 Who This Policy Covers

This Policy applies to four groups:

1.5 Scope

This Policy applies to all information collected through:

1.6 Applicable Law

Haagah is established in South Africa. We comply primarily with the Protection of Personal Information Act (POPIA), No. 4 of 2013. For users in the European Union, United Kingdom, and other jurisdictions with stronger protections in any particular respect, we apply the stricter standard. Specific references to the General Data Protection Regulation (GDPR) appear where relevant.


2. Terminology

To avoid ambiguity, these terms carry the following meaning throughout this Policy:


3. What You Upload — The Corpus

The Corpus is the heart of what we hold. This section describes, in categories, the kinds of material you may provide. We describe categories and purposes rather than technical mechanisms.

3.1 Identity and Verification Material

To create an Animus and to prevent impersonation, we collect:

Identification documents are retained only for so long as needed to verify identity and then reduced to a verification record. The underlying image of the identification document is deleted within a reasonable period after successful verification, unless retention is required by law.

3.2 Personal Writings

Material you author, including:

3.3 Audiovisual Material

3.4 Digital Communications

Section 4 addresses the rights of other persons who appear in this material. This is a matter we take seriously and which you must read before uploading any communication.

3.5 Life-Event Records

3.6 Platform-Generated Metadata

In the course of operating the platform, we generate and retain:


4. Third-Party Material in Your Corpus

This is the most sensitive section of this Policy and you must read it carefully before contributing any material that involves another person.

4.1 The Issue

A Corpus that adequately represents a person's consciousness almost always contains material that is also about, involves, or originated from other people. Chat histories include the other side of the conversation. Photographs include family, friends, strangers. Diaries describe people who never consented to appear in anything.

Those other people have privacy interests of their own. Their interests do not disappear because their letters, messages, or likenesses are meaningful to you.

4.2 Your Obligation Before Uploading

Before you contribute any material that involves another person, you are responsible for ensuring that you have the legal right to do so. In practice:

Section 7 of our Terms of Service contains your warranty that you have met this obligation. Upload is an affirmation of that warranty.

4.3 How the Platform Treats Identifiable Third Parties

Material involving a third party is used only to inform the Subject's Animus — that is, to help reflect the Subject's communications, relationships, and experiences. The platform does not use third-party material to construct a separate Animus of the third party, nor to respond to queries as the third party, except where that third party has their own Animus and has authorized such use.

4.4 Takedown for Third Parties

If you are a third party and you discover that material in which you appear has been contributed to another person's Corpus without your consent, you may request removal at privacy@haagah.com. Our process is described in Section 12.2. We will act on valid requests without requiring you to litigate.

4.5 Acknowledgment of Residual Risk

Even with these protections in place, contributing communications and other material involving other people is an act of judgment on your part. By uploading, you accept responsibility for that judgment. Haagah cannot retroactively undo third-party exposure caused by content you chose to contribute.


5. Technical Data We Collect

Beyond the Corpus itself, operating the platform requires us to collect a narrow set of technical data:

Our use of cookies and similar technologies is described in our Cookie Policy.


6. How Your Corpus Becomes Your Animus

6.1 Purpose of Processing

We process your Corpus so that our AI language model can, at the time a Visitor interacts with your Animus, draw on relevant material from the Corpus in generating a response. The processing is in service of one purpose: approximating the Subject well enough that interaction with the Animus feels, to the Visitor, like engaging with the Subject.

6.2 The Nature of Outputs

An Output is generated. It is not retrieved verbatim from the Corpus. The language model writes a response that draws on the Corpus; the response did not, in most cases, exist as such in anything the Subject wrote, said, or recorded.

This means:

Section 6 of our Terms of Service contains the corresponding legal framing, and Section 13 of this Policy addresses the rights of persons who believe an Output misrepresents them.

6.3 What the Platform Does Not Do


7. Who Can Access an Animus

Access to an Animus is governed by the settings established by the Founder or, after death, by the Subject's posthumous instructions and applicable Successor Custodian arrangements.

7.1 Default — Private

Every new Animus is private by default. Only the Founder may interact with it until they change the setting.

7.2 Named Visitors

A Founder may grant access to specific named persons, who must themselves hold a verified Haagah account. Access may be revoked at any time during the Founder's lifetime.

7.3 Public Animi

A Founder may elect to make their Animus publicly queryable. Once an Animus has been made public, removing it from public access during the Founder's lifetime is possible but cannot retroactively undo interactions that already occurred.

7.4 Posthumous Access

A Founder may instruct the platform to alter access settings upon verified death — for example, to open an Animus that was private during life, to close an Animus that was public, or to restrict access to named Successor Custodians. In the absence of instructions, the access settings in effect at the time of death continue until a Successor Custodian provides verified instructions.

Section 10 of our Terms of Service addresses Successor Custodians in detail.


8. Third-Party Service Providers

Operating the platform requires us to engage service providers. We share the minimum data necessary and bind every provider contractually.

8.1 Categories

8.2 Contractual Protections

Every provider is contractually required to process data only for the service they provide to us, to apply appropriate technical and organizational security measures, to comply with applicable data protection law, and not to use data for their own commercial purposes or for advertising.

8.3 What our AI Model Sees

Our AI model sees Corpus content when it is necessary to process a query — at minimum, the portions of Corpus retrieved to ground a particular Output, and the query text itself.

8.4 International Transfers

Partner providers operate in multiple jurisdictions. Where this Policy applies POPIA, transfers occur in accordance with POPIA Section 72. Where this Policy applies GDPR, transfers are made under standard contractual clauses or other valid mechanisms.


9. Security

9.1 Technical Measures

9.2 Access Controls

Corpus and Animus data is scoped to the Subject. No Founder has access to another Founder's Corpus or Animus through any feature of the platform. Access by Haagah personnel is limited, logged, and auditable.

9.3 Incident Response

If we become aware of a breach affecting your data, we will notify the Information Regulator of South Africa within the timeframes required by POPIA and notify you directly, without undue delay and in any case no later than 72 hours after becoming aware, where feasible.

9.4 What We Cannot Prevent

Honesty requires us to be plain: no platform can guarantee absolute security. We describe our measures here so you can evaluate them. The decision to entrust us with your Corpus is yours, and it is a decision with durable consequences.


10. Retention and the Question of Permanence

Haagah exists to preserve. Our retention practices reflect that purpose, while respecting your lifetime right to withdraw.

10.1 During Your Lifetime

Your Corpus and your Animus are retained for so long as your account is active. You retain full control over what is contained, what is accessible, to whom, and on what terms.

10.2 Your Right to Withdraw

At any time during your lifetime, you may:

Permanent Desynchronization is irreversible. Once executed, the Corpus is removed from operational systems, backups are overwritten on their scheduled cycle, and the Animus ceases to exist. Some limited records — audit logs, financial records, records required by law — may persist as described in Section 10.5.

10.3 On Death

On verified death, the platform applies your posthumous instructions. In the absence of instructions:

10.4 Inheritability

An Animus may be passed to a Successor Custodian. The Custodian inherits the right to configure access, provide limited corrective edits to the Corpus, and act on behalf of the Subject's ongoing presence on the platform. The Custodian does not inherit authorship rights over the Subject's writings or over what the Subject never shared.

10.5 Records We Retain Beyond Deletion

10.6 If Haagah Ceases Operations

If the platform ceases operations, we will provide no less than 180 days' notice to every Founder and every Successor Custodian of a deceased Subject, together with a mechanism to export the Corpus. We will take commercially reasonable steps to transfer Animi to a successor operator on equivalent or stronger privacy terms. Where no such transfer is possible, Corpus data is deleted in accordance with Section 10.2.


11. Your Rights

11.1 Rights Under POPIA (South Africa)

All data subjects have the right to:

Information Regulator of South Africa:

11.2 Rights Under GDPR (EU/EEA)

Where GDPR applies, you additionally have the right to data portability (machine-readable export), the right not to be subject to automated decision-making with legal or similarly significant effects, and the right to withdraw consent at any time where consent is the basis of processing.

11.3 Founder-Specific Rights

In addition to the above, a Founder has the right to:

11.4 Response Timelines

11.5 How to Exercise Your Rights

Write to privacy@haagah.com.


12. Rights of Third Parties

The people who appear in a Subject's Corpus also have rights.

12.1 Who This Section Is For

12.2 Takedown Process

Write to privacy@haagah.com identifying:

We will acknowledge within 5 business days. Where your identity and interest are clear, we will act without requiring the material to be litigated over. Where the claim is contested, we will suspend public access to the specific material pending resolution.

12.3 Where an Output Misrepresents You

Because Outputs are generated (Section 6.2), it is possible for an Output to include assertions about a third party that are inaccurate or harmful. If an Output generated by another person's Animus has caused you harm, write to privacy@haagah.com. We will investigate. Remedies may include adjustment of the relevant portions of the Corpus, suppression of query paths, and — where warranted — restriction of Visitor access to the Animus.


13. Children

Haagah is not for children, and is not about children.

These rules are conservative by design. Their purpose is to avoid creating AI approximations of children, whether living or deceased.


14. Changes to This Policy

For material changes, we will notify Founders via the email address on their account at least 30 days before the change takes effect, and will display an in-platform notice. Continued use after the change takes effect constitutes acceptance. Past versions of this Policy will be retained and made available on request.


15. Contact

Privacy Inquiries: privacy@haagah.com

POPIA Information Officer: infoofficer@haagah.com

Security Reports: security@haagah.com

Legal: legal@haagah.com

Postal Address: Haagah ehf., Privacy Office Gróska - innovation and business growth center Kristínargata 1, 102 Reykjavík Iceland


Effective Date: April 18, 2026

Last Reviewed: April 18, 2026

Next Scheduled Review: October 18, 2026

Approved By: Haagah Legal and Operations


This Policy should be read together with our Terms of Service and Cookie Policy.