HaldraYour data and access
Haldra Privacy Policy
Last updated: November 5, 2026
Haldra is a private personal assistant built and operated by Mitch Dominici, the developer behind Wild Kahuna. This policy covers Google account data used by Haldra. Haldra is for the operator's personal use and is not open for public signup.
Data Haldra accesses
Depending on the permissions granted and features enabled, Haldra accesses:
- The connected account's email address and account identifiers.
- Gmail message headers, senders and recipients, subjects, message bodies, labels, thread identifiers, and attachments when a feature requires them.
- Drafts and outgoing messages when Gmail compose or send features are authorized.
- Calendar details, events, participants, and related scheduling information when Calendar access is authorized.
- OAuth authorization tokens, connection status, synchronization records, and records of actions performed in Haldra.
Haldra receives authorization tokens from Google. It does not receive or store the account's Google password.
How the data is used
Haldra uses this data to provide its personal-assistant features: searching and organizing email, answering questions, summarizing information, preparing replies, tracking follow-ups and reminders, and managing authorized calendar activity. It also extracts job listings from job-alert emails and retains links to the source messages for the account owner.
Sending mail or changing calendar events follows the account's granted permissions and the actions or automations authorized in Haldra.
Service providers and access
Haldra stores synchronized data and derived records in the operator's application infrastructure. Relevant content may be sent to configured AI service providers to perform assistant features such as answering a question, summarizing a message, or drafting a reply. These providers may include OpenAI, Anthropic, and Google, depending on the feature and configuration. Data is shared only as needed to provide the enabled feature, subject to the provider's applicable service terms and data controls.
Haldra does not sell Google account data, use it for advertising, or use it to train generalized AI or machine-learning models. The operator can access connected data to use and maintain the application. Data may also be disclosed when required by law or when necessary to investigate abuse or protect security.
Haldra's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and security
Access to the application and its data is restricted to authorized users and services. Provider credentials are managed separately from application source code. Haldra uses authenticated connections to Google and its service providers. No storage or transmission method can guarantee absolute security.
Retention and deletion
Synchronized messages, derived notes and job records, and action history remain in Haldra until removed under the applicable retention setting or an owner-directed deletion. Where no retention limit is configured, records may remain until deletion is requested. Removing a message body does not necessarily remove separately saved notes, job records, or action history.
To request deletion of connected-account data and tokens, use the Wild Kahuna contact page, identifying the account and the records to remove. Requests are handled by the operator. Backup copies may remain until the relevant backup is replaced or expires; records that must be retained for legal or security reasons may be retained for that purpose.
Revoking Google access
Access can be revoked at any time through Google Account connections. Revocation stops Haldra from obtaining new data or performing further Google actions once its authorization is no longer valid. It does not automatically erase data already stored in Haldra; request deletion separately as described above.
This website and policy changes
This public website provides information about Haldra. It has no public account signup, advertising, or analytics scripts. The hosting provider, Amazon Web Services (AWS), processes connection information needed to serve and secure the site, such as IP addresses and request details. Connected Gmail and Calendar data is not published on this website. Changes to this policy will be published here with an updated date.
For questions about this policy, use the Wild Kahuna contact page.