Haiku
Product by Haiku
Facts checked: Not yet checked
Our take (not a Learning Standard rating). This label applies to learning-science judgments throughout this overview.
Our take (not a Learning Standard rating)
While Haiku has not yet been evaluated by The Learning Standard, its reliance on authentic network simulations aligns well with situated learning theory. Practicing cybersecurity skills in realistic cloud environments facilitates transfer to real-world tasks, though its game-driven approach requires careful monitoring to ensure gamification does not distract from core technical mastery.
Pros
- Uses situated learning by placing trainees in authentic cloud-based network simulations.
- Aligns specific game paths directly with established NICE Workforce Roles to ensure industry relevance.
- Allows organizations to customize training simulations to match their specific network architecture.
- Incorporates active problem-solving and retrieval practice rather than passive video consumption.
Cons
- Heavy gamification elements risk introducing extraneous cognitive load that detracts from technical learning.
- Lacks transparent pricing, requiring users to contact the vendor to access the platform.
- Provides little visibility into how foundational concepts are taught before users enter complex simulations.
What Do We Know About Haiku?
Haiku offers a highly practical, simulation-based environment for learning cybersecurity, though its ultimate effectiveness depends on your child's prior technical knowledge. Rather than asking users to read about network defense or cloud architecture, the platform thrusts them into active practice. This hands-on method leans heavily on situated learning, a framework demonstrating that skills acquired in authentic contexts are far more likely to transfer to actual job performance. Your teen will navigate realistic cloud networks and respond to dynamic threats, bridging the gap between theoretical knowledge and applied skill. However, because The Learning Standard has not yet formally evaluated Haiku, we cannot verify the quality of its instructional scaffolding. Game-driven platforms often struggle to balance entertainment with education. If the game mechanics are too complex, they create extraneous cognitive load, making it harder for your child to retain the underlying cybersecurity concepts. Haiku addresses industry standards by mapping its curriculum to NICE Workforce Roles, ensuring the time spent playing translates directly into recognized career competencies. You will need to monitor whether your child is actually grasping the network protocols or simply learning how to beat the game.
How Does Haiku Work?
Haiku uses simulation-based experiential learning to teach advanced cybersecurity and cloud networking skills. Users enter a game environment where they must navigate and defend authentic computer networks. Instead of traditional multiple-choice assessments, the platform requires active problem-solving within these virtual environments. The platform is split into specific tiers based on the user's goals. Haiku Online guides learners through structured paths tied directly to NICE Workforce Roles, ensuring that the skills practiced align with industry certifications. Haiku Pro scales this up by dropping users into dynamic, cloud-based networks that mimic enterprise-level architecture. For larger groups, Haiku Forge allows organizations to mirror their actual internal networks so trainees can practice on the exact systems they will use in the real world. By forcing learners to interact with authentic network variables, Haiku relies on active retrieval and contextual practice to solidify complex technical concepts.
Strengths and tradeoffs of Haiku
Haiku's biggest strength is its use of authentic, situated learning environments, while its primary weakness is the potential for game mechanics to overshadow foundational instruction. By using highly realistic cloud-based simulations, Haiku excels at contextual learning. When learners practice securing a network within an environment that mimics actual enterprise architecture, they build robust mental models that easily transfer to real-world cybersecurity roles. This prevents the inert knowledge problem common in traditional textbook learning, where a student knows a concept but cannot apply it. The platform's direct alignment with NICE Workforce Roles ensures that this active practice remains relevant to industry needs. Conversely, relying heavily on a game-driven interface introduces the risk of extraneous cognitive load. If users must spend significant working memory figuring out how to navigate the game itself, they have less cognitive capacity available to understand complex network protocols. Furthermore, without explicit instruction or worked examples prior to complex simulations, novice learners may experience frustration. Haiku requires a baseline of technical literacy to be truly effective, as trial-and-error in a highly dynamic simulation is an inefficient way to learn foundational concepts.
Who Might Benefit From Haiku?
Haiku is best for high school students, college learners, and adult professionals who already possess basic IT knowledge and want to practice cybersecurity in a realistic setting. Because the platform focuses on authentic cloud-based networks and aligns with professional NICE Workforce Roles, it is highly suited for career and technical education programs. It serves as an excellent bridge for learners who have studied theoretical network defense and need hands-on, simulation-based practice to prepare for industry certifications or real-world employment.
Data Transparency
Does Not Meet Data Transparency Standard
Haiku does not meet our data transparency standard. Its privacy policy does not document basic protections, including a statement that it does not sell data, a commitment against targeted advertising and limits on sharing children's data.
6 of 35 checks passed
Evaluated September 2026
Haiku Privacy Policy →Level 1 · Basic protections
Does not sell data or target ads at students, limits sharing, and lets parents see and delete their child's data.
Not documented: a statement that it does not sell data, a commitment against targeted advertising, limits on sharing children's data, contractual limits on service providers, a COPPA or FERPA commitment, parents' right to see their child's data, parents' right to delete their child's data, account deletion
Level 2 · Parent control (meets the standard)
Families can get their data out, know who processes it, and know how long it is kept.
Not documented: users' right to access their data, data export, a data retention timeline, self-service deletion
Level 3 · Direct data access
Families or schools can pull their own data through an API, in a stated format.
Not documented: an API for retrieving their own data, a named export format
View all 35 checks
Parent Access2/8
Does the policy mention parents specifically?
“If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information.”
Can parents view their child's data?
The policy does not give parents a right to view their child's data.
Can parents modify their child's data?
The policy does not give parents a right to modify their child's data.
Can parents delete their child's account?
The policy says the company will delete data collected from a child under 13 without verified parental consent, but it does not give parents a right to request deletion.
Is there a dedicated Children's Privacy section?
“Children Under the Age of 13”
Does it reference COPPA compliance?
The policy does not reference COPPA.
Does it reference FERPA compliance?
The policy does not reference FERPA.
Is parental consent required for child accounts?
The policy says the Service is not intended for children under 13 and does not set up parental consent for child accounts.
Data Portability0/5
Can users access their personal data?
The policy only says EU residents may exercise unspecified GDPR rights by written notice; it does not explicitly provide a right to access personal data.
Can users download/export their data?
The policy does not address data download or export.
Is there a self-service data access tool?
The policy does not describe a self-service data access tool.
Is a specific data format mentioned for export?
The policy does not mention an export format.
Is there an API for data access?
The policy does not mention an API for data access.
Data Minimization1/6
Is data collection itemized?
“By which you may be personally identified, such as name, address, e-mail address, and telephone number (“ **personal information**”); and”
Can the app be used without a real name?
The policy says required information typically includes the user's name.
Can the app be used without an email?
The policy says required information typically includes the user's email address.
Does it state collection is limited to what is necessary?
The policy does not say collection is limited to what is necessary.
Is IP address anonymized or truncated?
The policy says it collects IP addresses and does not mention anonymizing or truncating them.
Is location tracking explicitly excluded?
The policy says it collects geo-location and location data.
Third-Party Protection2/7
Does it explicitly state no selling of data?
The policy does not state that the company does not sell data, and it allows disclosure to third parties for marketing unless users opt out.
Are third-party providers named?
“Rather, all such information is provided directly to our third-party processors, which may include Paypal, Amazon Pay, and the Steam platform.”
Are providers contractually restricted?
The policy does not say that service providers are contractually restricted.
No-targeted-advertising commitment?
The policy says third parties on the Service may use collected information for interest-based (behavioral) advertising.
Is AI/ML data sharing addressed?
The policy does not address AI or machine learning data sharing.
Child-specific sharing restriction?
The policy says the Service is not intended for children under 13 and sets no child-specific sharing restrictions.
Cookies/tracking limited or opt-out?
“You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent.”
Deletion & Retention0/5
Can users delete their account?
The policy does not give users a right to delete their account or data.
Self-service deletion mechanism?
The policy does not describe a self-service deletion mechanism.
Specific data retention timeline?
The policy does not state a data retention timeline.
Auto-deletion of inactive accounts?
The policy does not address auto-deletion of inactive accounts.
Post-deletion handling described?
The policy does not describe how data is handled after account deletion.
Advertising1/4
Advertising model explicitly disclosed?
“Some content or applications, including advertisements, on the Service are served by third-parties, including advertisers, ad networks and servers, content providers, and application providers.”
Free from third-party advertisements?
The policy says third-party advertisements are served on the Service.
Children excluded from ad targeting?
The policy does not exclude children from ad targeting; it only says the Service is not intended for children under 13.
Ad-free option available?
The policy does not describe an ad-free option.
What This Means
The policy review did not meet our data transparency standard. The checks above show the documented findings and unknowns. A missing statement does not establish how the app handles data in practice.
About this evaluation: Based on automated analysis of Haiku Privacy Policy against 35 policy-disclosure questions, including questions adapted from the Common Sense Privacy Program's published evaluation questions. TLS is not affiliated with Common Sense Media, and this is not a Common Sense rating. Quoted text is copied from the policy; unquoted notes are our summary. Results describe what the policy documents, not the company's actual practices. Privacy policies can change: this review reflects the version we analyzed and does not determine legal compliance.
Sources and review method
TLS combines product information and editorial analysis to explain how Haiku works, its tradeoffs, and the questions to ask before choosing it. Product features, an instructional rationale and evidence of learning outcomes are different kinds of information.
Formal Learning Standard assessment: not yet completed. Data Transparency findings are reported separately and do not establish learning effectiveness. Read our methodology.
Frequently Asked Questions About Haiku
Is Haiku free?
No, Haiku is not free. The developer requires users and organizations to contact their sales team directly for pricing information regarding Haiku Online, Haiku Pro, and Haiku Forge.
Is Haiku good for beginners?
Partially. While Haiku is rated for all ages, its focus on complex, authentic cloud networks means absolute beginners might struggle. It is best utilized by learners who have a foundational understanding of computer science and are ready to apply that knowledge in realistic simulations.
What does Haiku teach?
Haiku teaches practical cybersecurity, network defense, and cloud architecture skills. The curriculum is directly aligned with NICE Workforce Roles, focusing on the active defense and management of dynamic, enterprise-level computer networks through game-based simulations.
How does Haiku compare to TryHackMe?
While TryHackMe relies heavily on guided, browser-based virtual machines with step-by-step text tutorials, Haiku leans more deeply into a fully game-driven interface. Haiku emphasizes authentic simulation and custom network replication, whereas TryHackMe is often more accessible for absolute novices needing explicit scaffolding.
Has The Learning Standard evaluated Haiku?
TLS has not yet completed a Learning Standard evaluation of how well Haiku teaches. Its privacy policy has been reviewed for Data Transparency and does not yet document the basic protections (Level 1).
Is Haiku COPPA compliant?
A COPPA reference was not found in the reviewed privacy policy. This does not determine whether the app complies with COPPA. Policy review note: The policy does not reference COPPA.
Is Haiku FERPA compliant?
A FERPA reference was not found in the reviewed privacy policy. This does not determine whether the app complies with FERPA. Policy review note: The policy does not reference FERPA.
Does Haiku have a children's privacy policy?
The reviewed policy includes a dedicated children's privacy section. Policy review note: The policy has a section headed for children under 13.
Does Haiku sell student data?
A statement ruling out data selling was not found in the reviewed policy. This does not establish that the app sells student data. Policy review note: The policy does not state that the company does not sell data, and it allows disclosure to third parties for marketing unless users opt out.
Can you delete your data from Haiku?
Account deletion was not documented in the reviewed privacy policy. This does not establish whether deletion is available. Policy review note: The policy does not give users a right to delete their account or data.
Follow TLS Research
Subscribe to future TLS research updates: app reviews, findings, and what the evidence shows.
Screenshots
Take Action
For Haiku
If you represent Haiku and have a correction or new evidence, send the relevant source so we can review and update this page.
Submit a correction