Privacy Policy
Last updated: April 4, 2026
1. Introduction
Hia ("we," "our," or "us") operates the Hia mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this privacy policy carefully. By using the Service, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address and password when you create an account.
- Profile Information: Any additional information you choose to add to your profile.
- Communication Data: Messages, contacts, and conversation history synced through the WhatsApp Business API.
- User Content: Notes, tags, and other content you create within the Service.
2.2 Information Collected Automatically
- Device Information: Device type, operating system, unique device identifiers.
- Usage Data: How you interact with the Service, features used, and time spent.
- Log Data: IP address, access times, and pages viewed.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process and manage your account
- Facilitate WhatsApp messaging through the Kapso API
- Send you technical notices and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions and abuse
- Comply with legal obligations
4. Information Sharing and Disclosure
4.1 Service Providers
We share data with third-party service providers that perform services on our behalf:
- Supabase: Authentication, database storage, and real-time functionality
- Kapso: WhatsApp Business API integration for messaging
- PostHog: Privacy-friendly product analytics to understand how the Service is used and improve features. Hosted in the EU. Does not use advertising identifiers.
- Expo: App distribution and updates
4.2 Legal Requirements
We may disclose information if required by law or in response to valid legal requests from public authorities.
4.3 Business Transfers
In connection with any merger, sale of company assets, financing, or acquisition, your information may be transferred as a business asset.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit using TLS/SSL
- Secure storage with Supabase infrastructure
- Access controls and authentication
- Regular security assessments
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
6. Your Rights and Choices
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data by contacting us
- Correction: Request correction of inaccurate data
- Deletion: You may delete your account and associated data directly within the Hia mobile app via Settings → Delete Account, or by emailing us at hi@tryhia.com.
- Opt-out: Unsubscribe from marketing communications and disable push notifications in the app settings
7. Data Retention
We retain your information for as long as your account is active or as needed to provide services. We may retain certain information as required by law or for legitimate business purposes. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
8. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy.
10. Permissions Used by the Mobile App
Our mobile application requests the following device permissions, used solely for the features described:
- Camera & Microphone — to capture photos, videos, and voice messages you choose to send
- Photo Library — to attach media to conversations and save received media
- Contacts — to display contact names alongside conversations
- Location — only when you explicitly share a location in a chat
- Notifications — to alert you to new messages
- Biometrics (Face ID / Fingerprint) — to optionally lock the app
None of this data is used for advertising or sold to third parties.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
Email: hi@tryhia.com
Website: https://tryhia.com