Your privacy.
This is Hai’s public introduction website. The public introduction pages do not request your precise device location or run advertising trackers. The private business pilot has a separate signed-in workspace.
Website traffic
When enabled, Hai records public page views and approximate country and city supplied by Cloudflare. A random page identifier stays in memory for that page only, helping count an open page and avoid duplicate events; it is not a cookie or a cross-page profile. Anonymous activity expires after a day of inactivity; hourly page and location totals are retained for up to 400 days. Raw IP addresses, GPS coordinates, query strings and email addresses are not saved in traffic records. Temporary IP hashes are used only to limit abusive traffic submissions. We honour Do Not Track and Global Privacy Control for this collection. Blockers and network failures can prevent recording. Admin and signed-in business pages are excluded. Geography is approximate and can be affected by mobile networks and VPNs.
Website delivery
Cloudflare hosts this website and processes connection information, such as IP addresses and request metadata, to deliver and protect it. Sampled technical logs may be used to diagnose errors. Licensed fonts are served directly by Hai; loading them does not connect your browser to Google Fonts.
A homepage for your city
We use the country supplied by Cloudflare from your internet connection to welcome visitors in Romania with the Bucharest homepage, our first supported city. When country information is unavailable, approximate coordinates supplied by Cloudflare can also select that homepage within 50 km of Bucharest. This happens on our server, without a browser location prompt. This selection does not request GPS, set a location cookie or create a visitor profile. Separate approximate country and city totals may be recorded as described above. VPNs and mobile networks can make this estimate inaccurate; when location is unavailable, you see our general homepage.
Website language
Visitors in Romania see Romanian by default; other visitors see English. You can choose EN or RO at any time. Your explicit choice takes priority and is remembered in an essential first-party cookie for up to one year. Choosing a language does not request GPS or contact an external location service.
The private app
The web preview is a separate, access-controlled testing environment. Opening its link takes you to a Cloudflare sign-in flow. App permissions, including location and notifications, are handled within that experience.
Private business pilot
The business workspace uses an essential Secure, HttpOnly session cookie to keep you signed in for up to 30 days, unless you sign out or your session is revoked. Email accounts use Supabase for passwords and verified sign-in; Brevo delivers email confirmation and password-reset codes from signin@auth.gethai.app. Passwords are sent securely to Supabase for authentication and are not stored in Hai’s business database. Google sign-in uses your email address and basic profile through Supabase; it does not request Gmail, calendar, contacts or other Google data. Apple sign-in is not connected yet. These providers process authentication and delivery information to complete the requested account operation. The separate owner preview can also use Cloudflare Access. It stores your sign-in identifier and email, business phone number, your selected business goal, optional promotional-email preference and its consent record, submitted business details, location coordinates, existing creative assets, campaign briefs, draft terms, review messages and simulated campaign interactions in an EU-jurisdiction Cloudflare D1 database. The campaign creator does not ask you to upload images; Hai works with you on creative preparation. Campaigns are visible only in the private app. Sandbox and explicitly labelled design-preview activity do not consume a published campaign allowance. An admin-published campaign records opens, saves and directions, with a pseudonymous signed-in identifier to enforce its allowance; businesses see aggregate counts rather than commuter identities. Only the owner and explicitly allocated administrators can review submissions in the separate admin portal. You can withdraw promotional-email consent in your business account. Campaign inquiries are stored in the admin inbox; email delivery is shown separately and may not be connected. Public advertising and payment collection are disabled. Do not submit confidential documents or sensitive personal information into campaign fields. Public onboarding, retention settings and self-service deletion will be completed before businesses are invited to launch live campaigns.
Nearby campaign discovery
If you choose Use my location in the private app’s map filters, your browser sends current GPS coordinates and accuracy to Hai to check a campaign’s radius. This campaign feature does not save those coordinates or share them with businesses. Location access can be stopped in the same filter panel. Nearby offers are limited to 1 km; community campaigns do not need GPS. Optional offer alerts require a separate opt-in and browser notification permission. They are checked while Hai is open, are limited to one per day, and may not work when the app is closed. We store that preference and a pseudonymous delivery record to prevent repeated alerts.
The Hai waitlist
When you join the waitlist, Hai saves your email address, whether you are a commuter or a business, your selected phone platform, and the time you asked to hear about our launch. These records are stored in Hai’s database and are visible only to authorized Hai administrators. Joining does not create an app account or sign you up for unrelated promotions. We do not sell this list. Every launch email will include a way to leave the list.
Future accounts and partnerships
Business sign-in and sandbox setup are being tested. Public commuter accounts, store downloads, paid billing and public campaign delivery are not open yet. This technical notice will be expanded with launch privacy and retention information before public campaign onboarding.
Last updated: 7 October 2026.