Effective August 28, 2026
Haunt is a place to write, made by Sleeping Potato, Inc. This policy says what happens to your writing and your data when you use it. It is short because there is not much to say: Haunt has no accounts, no servers of ours, no analytics, and no tracking.
Everything you write in Haunt is stored on your device. Sleeping Potato never receives it, and there is no service of ours it passes through.
Haunt indexes your Documents for Spotlight so you can search them from your device. That index lives on the device, like the writing. Exporting a Document makes a file on your device; where you send that file is up to you.
Some of what Haunt does needs to send text somewhere: to a language model, to a blog you publish to, to a repository you keep, or between your own devices. One rule covers all of them, now and as Haunt grows:
Nothing leaves your device until you connect a destination and act. It goes directly from your device to that destination, under that destination's own terms. Sleeping Potato is never in the middle and never receives a copy.
Today that means:
As Haunt adds ways to send your writing where you choose — publishing to a site you connect, pushing a Space to a git repository — the same rule applies, and this section names each one when it ships.
The providers you can connect today, and where your text goes:
Sleeping Potato is not in the middle of any of it and does not see what you send or what comes back.
Your API keys and sign-in tokens are stored in your device's Keychain, protected by the system, and are never synced to iCloud Keychain. Haunt uses a credential for exactly one thing: talking to the service it belongs to. If you disconnect a service, its credential is deleted from the Keychain.
Signing in to a provider through the web (where a provider offers it) opens the provider's own sign-in page and returns you to Haunt through haunt.sleepingpotato.com. That address serves a static page, sets no cookies, and keeps no logs of who arrives.
Haunt checks whether the links in a Document still work, so it can mark the ones that don't. To do that, your device makes a request to each linked address — a lightweight request that asks for headers, then a normal one if the site refuses. That means the sites you link to see a request from your device, the way they would if you visited. Haunt keeps the results on your device and sends them nowhere.
Nothing from the app itself. Haunt contains no analytics, no crash reporting of its own, no advertising, and no identifiers.
If you install Haunt through TestFlight or the App Store, Apple may share crash reports and basic usage statistics with us, according to the choice you make on your device under Settings ▸ Privacy & Security ▸ Analytics & Improvements. We use those only to fix the app.
This page, and the page about Haunt, live on Sleeping Potato's blog at sleepingpotato.com, which counts page views the way its publishing platform, Ghost, does. That is the website, not the app: nothing you do in Haunt is connected to it.
Haunt is not directed at children under 13, and we do not knowingly collect anything from them — which is easy to promise, since Haunt collects nothing from anyone.
If Haunt starts doing something this policy does not describe, the policy changes first, and the date at the top moves.
Sleeping Potato, Inc.
Haunt is thoughtfully made by Sleeping Potato.