Privacy Policy
Effective Date: May 31, 2025
Introduction
Welcome to HARM Inc. ("HARM," "we," "us," or "our"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our HARM platform and services ("Platform"), including our website, mobile application, and AI companion services.
By using HARM, you agree to the collection and use of information in accordance with this Privacy Policy. If you disagree with any part of this Privacy Policy, please do not use our Platform. This Privacy Policy is incorporated into and forms part of our Terms and Conditions.
We understand that when you're seeking support for sensitive situations, privacy and confidentiality are paramount. This policy details our commitment to protecting your personal information and maintaining your trust.
Information We Collect
Personal Information You Provide
We may collect the following personal information when you interact with our Platform:
Contact Information: Email address, phone number (if provided), and name when you join our waitlist or contact us for support.
Communication Content: Messages, conversations, and information you share with our AI companion, including descriptions of situations, challenges, or concerns you're facing.
Profile Information: Any additional information you choose to provide, such as age range, location (city/state level), or preferences for support resources.
Feedback and Surveys: Responses to surveys, feedback forms, or testimonials you voluntarily provide.
Automatically Collected Information
When you use our Platform, we automatically collect certain information:
Usage Data: Information about how you use our Platform, including time spent, features accessed, and interaction patterns with our AI companion.
Device Information: Device type, operating system, browser type, IP address, and unique device identifiers.
Log Data: Server logs that include your IP address, access times, pages viewed, and other diagnostic data.
Cookies and Tracking: We use cookies and similar technologies to enhance your experience and collect usage analytics.
How We Use Your Information
We use the information we collect for the following purposes:
Provide AI Companion Services: To enable our AI to understand your situation and provide personalized guidance, support, and resource recommendations.
Platform Operation: To operate, maintain, and improve our Platform, including troubleshooting, data analysis, and system administration.
Communication: To send you important updates about our services, respond to your inquiries, and provide customer support.
Waitlist Management: To manage your position on our waitlist and notify you about platform updates and early access opportunities.
AI Model Improvement: To train and improve our AI models, but only using anonymized and aggregated data that cannot identify you personally.
Safety and Security: To protect the safety and security of our users, prevent fraud, and ensure compliance with legal obligations.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:
With Your Consent
We will only share your personal information with third-party support services or professionals when you explicitly consent to such sharing. Before any information is shared, we will clearly explain what information will be shared, with whom, and why.
Service Providers
We may share information with trusted third-party service providers who assist us in operating our Platform, including:
Cloud hosting and data storage providers
Analytics and performance monitoring services
Customer support and communication platforms
These providers are contractually bound to protect your information and use it only for the services they provide to us.
Legal Requirements
We may disclose your information if required by law or if we believe such disclosure is necessary to:
Comply with legal processes, such as court orders or subpoenas
Protect the rights, property, or safety of HARM, our users, or others
Prevent or address fraud, security issues, or technical problems
Respond to emergency situations involving immediate threats to safety
Important: If you disclose information suggesting immediate danger to yourself or others, we may be required to contact emergency services or relevant authorities to ensure safety.
Data Security
We implement robust security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:
Encryption: All data is encrypted both in transit and at rest using industry-standard encryption protocols.
Access Controls: Strict access controls limit who can access personal information to only those employees and contractors who need it to provide services.
SOC 2 Compliance: We maintain SOC 2 Type II compliance to ensure our security controls meet industry standards.
Regular Security Audits: We conduct regular security assessments and penetration testing to identify and address potential vulnerabilities.
Employee Training: All employees receive training on data privacy and security best practices.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention practices include:
Conversation Data: AI conversations are retained for up to 12 months to improve our services, then anonymized or deleted.
Account Information: Contact information is retained while you remain on our waitlist or use our services.
Usage Analytics: Anonymized usage data may be retained indefinitely for research and platform improvement purposes.
Legal Requirements: Some data may be retained longer if required by law or for legal defense purposes.
Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
General Rights
Access: You can request to know what personal information we have about you.
Correction: You can request that we correct inaccurate or incomplete information.
Deletion: You can request that we delete your personal information, subject to certain legal limitations.
Portability: You can request a copy of your data in a portable format.
Opt-out: You can opt out of marketing communications at any time.
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.
EU Residents (GDPR)
If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the right to object to processing and the right to data portability.
To exercise your rights: Contact us at privacy@harm.ai with your request. We will respond within 30 days and verify your identity before processing your request.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Platform:
Essential Cookies: Required for the Platform to function properly, including authentication and security features.
Analytics Cookies: Help us understand how users interact with our Platform to improve user experience.
Preference Cookies: Remember your settings and preferences for a more personalized experience.
You can control cookies through your browser settings. However, disabling certain cookies may limit the functionality of our Platform.
Children's Privacy (COPPA Compliance)
Our Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
For users between 13 and 18 years old, we recommend obtaining parental consent before using our Platform, especially given the sensitive nature of the support services we provide.
If we discover that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
International Data Transfers
HARM Inc. is based in the United States, and our servers are located in the United States. If you are accessing our Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.
We take appropriate measures to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including through the use of standard contractual clauses and other legally recognized transfer mechanisms.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:
Updating the "Effective Date" at the top of this Privacy Policy
Sending an email notification to your registered email address
Displaying a prominent notice on our Platform
Your continued use of our Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Privacy Officer: privacy@harm.ai
General Contact: contact@harm.ai
Mail: HARM Inc., 11990 San Vicente Blvd, Suite 225, Los Angeles, CA 90049
Phone: 1-888-8-HARMAI
We are committed to resolving any privacy concerns you may have. Our privacy team will respond to your inquiry within 48 hours during business days.
Your privacy matters to us. We are dedicated to maintaining your trust through transparent data practices and robust security measures. Thank you for trusting HARM with your personal information.
Introduction
Welcome to HARM Inc. ("HARM," "we," "us," or "our"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our HARM platform and services ("Platform"), including our website, mobile application, and AI companion services.
By using HARM, you agree to the collection and use of information in accordance with this Privacy Policy. If you disagree with any part of this Privacy Policy, please do not use our Platform. This Privacy Policy is incorporated into and forms part of our Terms and Conditions.
We understand that when you're seeking support for sensitive situations, privacy and confidentiality are paramount. This policy details our commitment to protecting your personal information and maintaining your trust.
Information We Collect
Personal Information You Provide
We may collect the following personal information when you interact with our Platform:
Contact Information: Email address, phone number (if provided), and name when you join our waitlist or contact us for support.
Communication Content: Messages, conversations, and information you share with our AI companion, including descriptions of situations, challenges, or concerns you're facing.
Profile Information: Any additional information you choose to provide, such as age range, location (city/state level), or preferences for support resources.
Feedback and Surveys: Responses to surveys, feedback forms, or testimonials you voluntarily provide.
Automatically Collected Information
When you use our Platform, we automatically collect certain information:
Usage Data: Information about how you use our Platform, including time spent, features accessed, and interaction patterns with our AI companion.
Device Information: Device type, operating system, browser type, IP address, and unique device identifiers.
Log Data: Server logs that include your IP address, access times, pages viewed, and other diagnostic data.
Cookies and Tracking: We use cookies and similar technologies to enhance your experience and collect usage analytics.
How We Use Your Information
We use the information we collect for the following purposes:
Provide AI Companion Services: To enable our AI to understand your situation and provide personalized guidance, support, and resource recommendations.
Platform Operation: To operate, maintain, and improve our Platform, including troubleshooting, data analysis, and system administration.
Communication: To send you important updates about our services, respond to your inquiries, and provide customer support.
Waitlist Management: To manage your position on our waitlist and notify you about platform updates and early access opportunities.
AI Model Improvement: To train and improve our AI models, but only using anonymized and aggregated data that cannot identify you personally.
Safety and Security: To protect the safety and security of our users, prevent fraud, and ensure compliance with legal obligations.
Legal Compliance: To comply with applicable laws, regulations, and legal processes.
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:
With Your Consent
We will only share your personal information with third-party support services or professionals when you explicitly consent to such sharing. Before any information is shared, we will clearly explain what information will be shared, with whom, and why.
Service Providers
We may share information with trusted third-party service providers who assist us in operating our Platform, including:
Cloud hosting and data storage providers
Analytics and performance monitoring services
Customer support and communication platforms
These providers are contractually bound to protect your information and use it only for the services they provide to us.
Legal Requirements
We may disclose your information if required by law or if we believe such disclosure is necessary to:
Comply with legal processes, such as court orders or subpoenas
Protect the rights, property, or safety of HARM, our users, or others
Prevent or address fraud, security issues, or technical problems
Respond to emergency situations involving immediate threats to safety
Important: If you disclose information suggesting immediate danger to yourself or others, we may be required to contact emergency services or relevant authorities to ensure safety.
Data Security
We implement robust security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:
Encryption: All data is encrypted both in transit and at rest using industry-standard encryption protocols.
Access Controls: Strict access controls limit who can access personal information to only those employees and contractors who need it to provide services.
SOC 2 Compliance: We maintain SOC 2 Type II compliance to ensure our security controls meet industry standards.
Regular Security Audits: We conduct regular security assessments and penetration testing to identify and address potential vulnerabilities.
Employee Training: All employees receive training on data privacy and security best practices.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention practices include:
Conversation Data: AI conversations are retained for up to 12 months to improve our services, then anonymized or deleted.
Account Information: Contact information is retained while you remain on our waitlist or use our services.
Usage Analytics: Anonymized usage data may be retained indefinitely for research and platform improvement purposes.
Legal Requirements: Some data may be retained longer if required by law or for legal defense purposes.
Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
General Rights
Access: You can request to know what personal information we have about you.
Correction: You can request that we correct inaccurate or incomplete information.
Deletion: You can request that we delete your personal information, subject to certain legal limitations.
Portability: You can request a copy of your data in a portable format.
Opt-out: You can opt out of marketing communications at any time.
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.
EU Residents (GDPR)
If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the right to object to processing and the right to data portability.
To exercise your rights: Contact us at privacy@harm.ai with your request. We will respond within 30 days and verify your identity before processing your request.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Platform:
Essential Cookies: Required for the Platform to function properly, including authentication and security features.
Analytics Cookies: Help us understand how users interact with our Platform to improve user experience.
Preference Cookies: Remember your settings and preferences for a more personalized experience.
You can control cookies through your browser settings. However, disabling certain cookies may limit the functionality of our Platform.
Children's Privacy (COPPA Compliance)
Our Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
For users between 13 and 18 years old, we recommend obtaining parental consent before using our Platform, especially given the sensitive nature of the support services we provide.
If we discover that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
International Data Transfers
HARM Inc. is based in the United States, and our servers are located in the United States. If you are accessing our Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.
We take appropriate measures to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including through the use of standard contractual clauses and other legally recognized transfer mechanisms.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:
Updating the "Effective Date" at the top of this Privacy Policy
Sending an email notification to your registered email address
Displaying a prominent notice on our Platform