Privacy Policy

Effective Date: April 5, 2026

Last Updated: April 5, 2026

Welcome to Hasio ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website Hasio (the "App"), your guide to travel and explore Saudi Arabia.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and password.
• Profile Information: Optional profile details such as your preferred language (English/Arabic) and phone number.
• User Content: Photos, notes, reviews, travel moments, and trip itineraries you create in the app.
• Business/Service Provider Information: If you register as a business owner or service provider, we collect business documents, service descriptions, pricing, and portfolio images for verification and listing purposes.
• Booking Information: Details of reservations and bookings you make through the platform.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, and unique device identifiers.
• Usage Data: Features used, pages visited, and interaction patterns within the app.
• Location Data: When using the map or adding location to travel moments (with your permission).

2. How We Use Your Information

• To provide and maintain the App's features and functionality
• To process AI-powered travel planning queries and provide recommendations
• To save your favorite places, travel moments, and trip itineraries
• To process bookings and reservations
• To authenticate your account and provide personalized experiences
• To verify business owner and service provider accounts
• To display listings and services to users
• To communicate with you about app updates and features
• To improve our services and user experience

3. Third-Party Services

We use the following third-party services to operate the App:

• Convex: For real-time backend database and serverless functions
• Better Auth: For secure user authentication and session management
• OpenRouter (Claude AI): For AI-powered travel planning and recommendations
• Mapbox: For interactive maps, geocoding, and location-based features
• Expo (EAS): For mobile app builds and over-the-air updates
• Vercel: For website hosting and deployment

These services have their own privacy policies, and we encourage you to review them.

4. AI Travel Planner

When you use the AI travel planner:

• Your travel queries are sent to a third-party AI service (OpenRouter) for processing
• Conversation history is maintained to provide contextual follow-up responses
• Generated travel plans are stored in your account for future reference
• We do not use your queries to train AI models

5. Data Storage and Security

• Your data is stored securely using Convex with encryption at rest and in transit
• Authentication tokens and sessions are managed securely via Better Auth
• User-uploaded photos are stored in secure cloud storage
• We implement industry-standard security measures to protect your information
• We do not sell your personal information to third parties

6. Data Retention

• Account data is retained while your account is active
• You can request deletion of your account and associated data by contacting us
• Booking records may be retained for legal and business purposes
• Business documents submitted for verification are retained while the account is active

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and data
• Export your data
• Withdraw consent for optional features

8. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. Contact Us

11. Account Deletion

You can delete your account and all associated data at any time:

• In-App: Go to Settings > Delete Account. This permanently removes your profile, listings, services, bookings, trips, travel plans, reviews, and uploaded files from our servers.
• By Request: Email support@hasio.xyz to request account deletion.

Please note that data previously shared with third-party services (Convex, OpenRouter) is subject to their respective retention policies.

12. Saudi Arabia Compliance

This app complies with the Saudi Arabia Personal Data Protection Law (PDPL). We process your data in accordance with applicable Saudi regulations.