Privacy Policy

( doing business as Hilaya ) (hereinafter referred to as “we”)’s Privacy Policy describes how and why we collect, store, use and/or share ( “process” ) your information when you use our services (“Services”) , such as when you:

● Visit our website cnyang0818@gmail.com , or any website that links to this Privacy Policy

● Download and use our mobile application ( Hilaya ), or any other application that links to this Privacy Policy

● interact with us in any other relevant way, including any sales, marketing or events

Have questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our services. If you still have any questions or concerns, please contact us at cnyang0818@gmail.com .

Summary of key points

This summary provides the key points of our Privacy Policy, but you can learn more detailed information on these topics by clicking on the links following each key point or using the table of contents below to find the section you are looking for.

What personal information do we process? When you access, use or browse our Services, we may process personal information based on how you interact with us and our Services, the choices you make, and the products and features you use. Learn more about the personal information you disclose to us .

Do we process any sensitive personal information? We may process sensitive personal information with your consent, where necessary, or as permitted by applicable law. Learn more about the sensitive information we process .

Do we obtain any information from third parties? We do not collect information from third parties.

What do we do with your information? We process your information to provide, improve and administer our services, to communicate with you, to ensure security and prevent fraud, and to comply with laws. We may also use your information for other purposes with your consent. We only process your information when we have a legitimate legal reason to do so. Learn more about how we process your information .

Under what circumstances and with what types of third parties is personal information shared? We may share information with certain categories of third parties in certain circumstances. Learn more about when and with whom we share your personal information .

How do we keep your information secure? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cyber criminals or other unauthorized third parties will not be able to defeat our security measures and improperly collect, access, steal or modify your information. Learn more about how we keep your information secure.

What are your rights? Depending on where you are located, applicable privacy laws may mean that you have certain rights with respect to your personal information. Learn more about your privacy rights .

How can you exercise your rights? The easiest way to exercise your rights is to contact us. We will consider and process any request in accordance with applicable data protection laws.

Want to learn more about what we do with the information we collect? Please review our full privacy policy .

Table of contents

1. What information do we collect?

2. What do we do with your information?

3. What legal basis do we rely on to process your information?

4. When and with whom do we share your personal information?

5. What is our stance on third-party websites?

6. How do we handle your social login information?

7. Will your information be transferred internationally?

8. How do we keep your information secure?

9. Do we collect information from minors?

10. What are your privacy rights?

1 1. Data and account deletion

1 2. Will we update this notice?

1 3. How can you contact us about this notice?

14. How can you review , update or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Service, when you express an interest in obtaining information about us or our products and services while participating in an activity on the Service, or when you contact us.

Personal information you provide. The personal information we collect depends on the context of your interactions with us and our Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

● Name

● Phone number

● Email address

● Mailing address

● Job title

● Username

● Password

Sensitive Information. Where necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

● Data about an individual’s sex life or sexual orientation

Social Media Login Data. We may offer you the option to register with us using your existing social media account details (such as Facebook, Twitter or other social media accounts). If you choose to register in this way, we will collect the information described in the “What do we do with your social login information?” section below .

Application Data. If you use our applications and you choose to provide us with access or permission, we may also collect the following information:

● Mobile device access. We may request access or permission to use certain features of your mobile device, including your mobile device’s camera, microphone, social media accounts, storage, and other features. If you wish to change our access or permissions, you can do so in your device’s settings.

● Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information, and system configuration information, device and application identification numbers, browser type and version, hardware model, Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our Apps, we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID, and information about the features of our Apps that you access.

● Push Notifications. We may request to send you push notifications regarding your account or certain features of the App. If you wish to opt out of receiving such communications, you may turn them off in your device settings.

This information is primarily used to maintain the security and operation of our applications, for troubleshooting, and for our internal analytics and reporting purposes.

All personal information you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.

Information Collected Automatically

In Short: When you visit our Services, certain information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically.

We collect certain information automatically when you access, use, or browse the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services and for our internal analytics and reporting purposes.

Like many businesses, we collect information through cookies and similar technologies.

The information we collect includes:

● Log and Usage Data. Log and Usage Data is diagnostic, usage, and performance information related to the Services that our servers automatically collect and record in log files when you access or use our Services. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activities on the Services (such as date/time stamps associated with your use, pages and files viewed, searches, and other actions you take, such as the features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).

● Device Data. We collect device data, such as information about the mobile phone, tablet or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, hardware model, Internet service provider and/or mobile carrier, operating system and system configuration information.

2. What do we do with your information?

In Short: We process your information to provide, improve, and administer our services, to communicate with you, for security and fraud prevention, and to comply with laws. We may also use your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including to:

● Facilitate account creation and verification, and otherwise manage user accounts. We may process your information to enable you to create and log into your account, and to keep your account running properly.

● Provide services to users and facilitate the provision of services. We may process your information in order to provide you with the services you have requested.

● Respond to user inquiries/provide support to users. We may process your information to respond to your inquiries and resolve any potential issues you may have when requesting services.

● Send you administrative information. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

● Enable communication between users. We process the necessary information to enable direct communication between users within our applications to enhance the social interaction experience.

● Request feedback. We may process your information as necessary to request feedback and contact you about your use of our services.

● Send you marketing and promotional communications. We may process the personal information you send us for marketing purposes, if in accordance with your marketing preferences. You can opt out of receiving marketing emails from us at any time. For more information, see "What are your privacy rights?" below .

● Provide you with targeted advertising. We may process your information to develop and display personalized content and advertising tailored to your interests, location, etc.

● To protect our services. We may process your information in an effort to ensure that our services are safe and secure, including for fraud monitoring and prevention.

● Identify usage trends. We may process information about how you use our Services to better understand how those Services are used so that we can improve them.

● Determine the effectiveness of our marketing and promotional campaigns. We may process your information to better understand how to deliver marketing and promotional campaigns that are most relevant to you.

● To save or protect important personal interests. We may process your information when necessary to save or protect important personal interests, such as to prevent harm.

3. What legal basis do we rely on to process your information?

In Short: We only process your personal information when we deem it necessary and have a valid legal reason (i.e. a legal basis) under applicable law, such as with your consent, to comply with laws, to provide you with services, to enter into or perform our contractual obligations, to protect your rights, or for our legitimate business interests.

If you are located in the European Union or the United Kingdom, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. Therefore, we may rely on the following legal bases to process your personal information:

● Consent . We may process your personal information if you allow (i.e. consent) us to use it for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing consent .

● Performance of a contract . We may process your personal information when we believe it is necessary to perform our contractual obligations to you (including providing our services) or at your request before entering into a contract with you.

● Legitimate interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for the following purposes:

● Send users information about special offers and discounts on our products and services

● Develop and display personalized and relevant advertising content to our users

● Analyze the use of our services so that we can improve them and attract and retain users

● Support our marketing activities

● Diagnose problems and/or prevent fraudulent activity

● Understand how users use our products and services so we can improve the user experience

● Legal obligations . We may process your information where we believe it is necessary to comply with a legal obligation, such as cooperating with law enforcement or regulatory agencies, exercising or defending our legal rights, or disclosing your information as evidence in litigation in which we are involved.

● Vital Interests . We may process your information when we believe it is necessary to protect your vital interests or the vital interests of a third party, such as in situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e. explicit consent) to use your personal information for a specific purpose, or where your consent can be inferred (i.e. implied consent). You can withdraw your consent at any time .

In certain special circumstances, we may be legally permitted under applicable law to process your information without your consent, such as:

● If the collection of information is clearly in the individual’s interest and consent cannot be obtained in a timely manner

● For investigation, fraud detection and prevention

● For commercial transactions that meet certain conditions

● If it is included in a witness statement and collection is necessary to evaluate, process or settle an insurance claim

● To identify injured, sick or deceased persons and communicate with next of kin

● If we have reasonable grounds to believe that a person has been, is or may be a victim of financial fraud

● If there is reason to believe that collecting and using the information with consent would compromise the availability or accuracy of the information and the collection of the information is reasonable for the purpose of investigating a breach of the agreement or a violation of Canadian or provincial law

● If disclosure is necessary to comply with a subpoena, warrant, court order, or court rule relating to the production of records

● If the information is generated by the individual in the course of his/her employment, business or profession and the purpose for which the information was collected is consistent with the purpose for which it was generated

● If the collection is intended only for journalistic, artistic or literary purposes

● If the information is public and required by law

4. When and with whom do we share your personal information?

In Short: We may share information in the specific circumstances described in this section and/or with the categories of third parties listed below.

● Firebase: We use Firebase for backend infrastructure, including database, authentication, and hosting services. Your data, including personal identifiers and chat history, may be stored and processed through Firebase to enable app functionality.

● Facebook SDK: Our app integrates the Facebook SDK for social media interaction and authentication. This may involve sharing your public profile information and friend lists with Facebook to enhance social connections within our app.

● Live Chat: To provide customer support and interaction, we use Live Chat. This involves sharing your chat history with Live Chat and any personal information provided during the support interaction.

● Adjust: Adjust is used for marketing analytics and attribution. Data related to app usage, user behavior, and marketing campaign performance will be shared with Adjust to optimize our marketing strategy.

● Google Analytics: Google Analytics is used to collect app usage and user interaction data. This includes sharing non-personal information and aggregated data with Google Analytics to understand user behavior and improve app performance.

● Amazon Rekognition: Amazon Rekognition is used for image and video analysis, including moderation and content filtering. Visual content within applications is processed by Amazon Rekognition to maintain community standards and user safety.

● Amazon Comprehend and DetectDominantLanguage: These services are used for natural language processing, including sentiment analysis and language detection in chat interactions. Analyze text content to enhance communication capabilities and user experience.

● Amazon Translate: We use Amazon Translate for real-time language translation in chat. This involves processing chat messages through Amazon Translate to enable cross-language communication between users.

● Amazon CloudFront, Simple Storage Service (S3), Elastic Compute Cloud (EC2), and Amazon Lambda: These Amazon Web Services (AWS) components are used for cloud storage, content delivery, computing power, and serverless functions. Use these services to process and store user data (including uploaded content and application interactions).

We ensure that these third parties comply with data protection and privacy laws that are relevant to our users. We also require them to maintain the confidentiality and security of shared data. For more details on how these third parties handle your personal information, please refer to their respective privacy policies.

We may also need to share your personal information in the following circumstances:

● Business Transfers . We may share or transfer your information with another company in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

● Other Users. When you share Personal Information (for example, by posting comments, contributions or other content on the Services) or otherwise interact with public areas of the Services, such Personal Information may be viewed by all users and may become publicly available outside of the Services in perpetuity. If you interact with other users of our Services and register for our Services through a social network (such as Facebook), your contacts on the social network will see your name, profile photo, and descriptions of your activity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile.

5. What is our stance on third-party websites?

In Short: We are not responsible for the security of any information you share with third parties that we may link to or that advertise our services but are not affiliated with our services.

The Services may link to third-party websites, online services or mobile applications, and/or contain third-party advertiseme