Last Updated: 26-09-2024

1. Introduction

Welcome to Havahavai (HAVAIZAADA TECHNOLOGY PRIVATE LIMITED). Your privacy is important to us. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you use our mobile application (the "App") and related services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect and How We Use It

2.1 Personal Information

Collection: We do not collect any private information if you are using our Services through the website.

Use: Since we do not collect personal information via the website, no personal data is used or stored from this medium.

2.2 Travel Information

Collection: We collect details about your travel itinerary to provide our Services, including automated web check-ins using WhatsApp. This may include information such as flight numbers, booking references, travel dates, and destinations.

Use: This information is used to offer personalized travel-related alerts, notifications, and to facilitate automated check-ins, enhancing your travel experience.

2.3 Email Data

Collection: We access your Gmail account via secure Gmail APIs to read emails labeled as "travel-related." This includes emails such as flight confirmations, booking receipts, itinerary updates, and other travel-related communications. We do not access or store non-travel-related emails.

Use:

• Travel-Related Alerts and Notifications: To send you real-time updates and alerts regarding your flights, such as delays, gate changes, and boarding times.

• Personalized AI Models: To train personalized AI models that predict flight delays, provide right seat allocations, guide about fare rules, and enhance the overall user experience.

2.4 Usage Data

Collection: We collect data generated by your use of our Services, such as login times, feature usage, device information, and interactions within the App.

Use: This data helps us understand how users interact with the App, enabling us to provide personalized suggestions, improve, and optimize our Services.

2.5 Categories of Data Collected

We categorize the data we collect into the following types:

• Travel Information: Itinerary, booking details, flight numbers, etc.

• Email Data: Only travel-related emails.

• Usage Data: Device and interaction data within the App.

3. Data Sharing and Disclosure

• No Sale of Data: We do not sell your personal data to third parties.

• Third-Party Service Providers: We may share your information with trusted service providers who assist us in offering our Services. We use Google for multiple tools like Firebase and Gmail access, Microsoft for Outlook and Azure, Amazon for AWS, Mapbox for maps, and One Signal for notifications. All third-party data sharing is encrypted and strictly for service provision purposes, not for sale or advertisement. The data security complies with the policies of these third-party partners.

• Right to Know: Under the California Consumer Privacy Act (CCPA) and other applicable regulations, you have the right to know what personal information is shared and to whom. We disclose information to third-party service providers solely for purposes directly related to the services we offer, such as cloud storage, notifications, and AI functionalities. For more information or specific inquiries about data sharing, you can contact us at dev@havahavai.com.

• Legal Obligations: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

• Protection of Rights and Safety: We may disclose your information to protect the rights, property, or safety of Havahavai, our users, or others. This includes enforcing our Terms and Conditions and responding to fraud, security, or technical issues.

4. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All email data accessed via Gmail APIs is end-to-end encrypted. No human has access to this information.

• Access Controls: Strict access controls are in place to ensure that only authorized personnel can access your data.

• Regular Security Assessments: We conduct regular security audits and assessments to identify and mitigate potential vulnerabilities.

• Data Protection Measures: To comply with various regional data protection laws, including CCPA, GDPR, CalOPPA, COPPA, CPA, CTDPA, MCDPA, OCPA, PIPEDA, PIPL, TDPSA, UCPA, VCDPA, [APPI], [PIPA], and [POPIA], we have implemented necessary data security protocols.

5. Data Retention

• Email Data: Email data is not stored and is deleted as soon as processing ends.

• User Details and Ticket Details: Stored only as long as the user keeps them in the phone. No other data is retained.

• Dormant Users: Data of dormant users is automatically deleted after 365 days.

• Legal Requirements: We may retain certain information as required by law or for legitimate business purposes, such as resolving disputes or enforcing our agreements.

6. User Rights

You have the following rights regarding your personal information:

• Access: You can request access to the personal information we hold about you.

• Correction: You can request corrections to any inaccurate or incomplete personal information.

• Deletion: You can request the deletion of your personal information, subject to certain exceptions.

• Data Portability: You can request a copy of your personal information in a structured, commonly used, and machine-readable format.

• Objection and Restriction: You can object to or request the restriction of processing your personal information under certain circumstances.

• Right to Know (CCPA): If you are a California resident, you have the right to know what personal information we collect, use, disclose, and share. You can also request information about the categories of third parties with whom your data has been shared.

• Opt-Out of Data Sharing and Targeted Advertising (VCDPA): As of now, we do not share your data neither do we target ads to you have the right to opt-out of (i) targeted advertising, (ii) the sale of your personal data, and (iii) profiling that supports decisions that produce legal or similarly significant consequences. To exercise these rights:

  • Through the App: Access the account settings within the App to manage your privacy preferences, including opting out of data sharing and targeted advertising.

  • Contact Us: Alternatively, you can contact us directly at dev@havahavai.com to opt-out of the sharing or selling of your personal data.

7. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly in accordance with [COPPA] Children's Online Privacy Protection Rule 16 C.F.R. § 312(4)(d)(2).

8. Compliance with Gmail OAuth Policies

• Selective Data Access: We access your Gmail data solely to read travel-related emails. We employ specific filters and criteria to ensure that only emails pertinent to travel are accessed and processed. Non-travel-related emails are neither accessed nor stored by our application.

• No Sharing for AI Training: We do not share your personal data, including email content, with third parties for the purpose of training AI or machine learning models. Data is used internally to enhance your personalized experience and is not utilized for developing generalized AI models.

• User Consent: By granting access to your Gmail account, you consent to the use of your travel-related data for personalized AI functionalities. If you do not agree with this usage, you must not use the App or revoke access through your account settings.

9. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be effective immediately upon posting the updated Privacy Policy within the App. We will notify you of any material changes, and your continued use of the Services after such notification constitutes your acceptance of the updated policy. This is in compliance with various regulations including [CCPA], [CalOPPA], [PIPA], [POPIA], [CPA], [CTDPA], [GDPR], [MCDPA], [OCPA], [APPI], [PIPEDA], [PIPL], [TDPSA], [UCPA], and [VCDPA].

10. Data Controller and Data Protection Officer

Abhishek Jain is our Data Controller and Data Protection Officer. If you have questions or concerns about our privacy practices, data sharing, user rights, or opt-out options, you can contact him at:

Email: abhishek@havahavai.com

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: dev@havahavai.com