Hai Robo — Privacy Policy

Last updated: 26 May 2026  ·  Effective: 26 May 2026

This Privacy Policy explains how KOREIDEA INNOVATIONS PRIVATE LIMITED (“KOREIDEA”, “we”, “us”, or “our”) collects, uses, shares, and protects your information when you use the Hai Robo mobile application and its optional companion software (together, the “App” or “Service”). We are the data fiduciary / data controller for that information. We are committed to data minimisation — most processing happens on your device, and we collect only what we need to provide the Service.

By downloading, accessing, or using the App, you acknowledge that you have read and understood this Policy. If you do not agree, please do not use the App.

1. Who we are

The App is published by KOREIDEA INNOVATIONS PRIVATE LIMITED, a company incorporated in India and based in India. For any privacy question, or to exercise your rights, contact our Grievance Officer at admin@koreidea.com (see Section 16).

2. Information we collect

We collect the following categories of information. Where a feature is optional, the related data is collected only if you use that feature or grant the relevant permission.

2.1 Information you provide

Category	Examples	Why
Account & identity	A unique user ID and, where you allow it, your name and email address, received through Sign in with Apple or Sign in with Google.	To create and secure your account and identify you across your devices.
Profile	A display name you optionally set in the App.	To personalise replies (e.g. greet you by name).
Voice commands & chat	The text of what you ask (transcribed on your device), and your conversation history with the assistant.	To understand your request and generate a reply.
Saved content	Saved places, saved orders, expense entries, and the facts you explicitly ask the assistant to “remember”.	To provide the features you asked for and (optionally) sync them across your devices.
Content reports	If you report an AI response, the report you submit — which may include the flagged prompt and reply plus your description.	To investigate and act on objectionable content (see Section 6).

2.2 Information collected automatically

To deliver requests to our backend and keep the Service reliable, limited technical information is processed, such as your device type and operating-system version, the App version, coarse network information, and timestamps of requests. We do not embed third-party advertising or cross-app tracking SDKs, and we do not build advertising profiles about you. We do not use the App Tracking Transparency “tracking” permission.

2.3 Information from permissions

Certain features rely on device data accessed only with your permission — see Section 4.

3. On-device processing

We process as much as possible directly on your device, where it never reaches our servers:

• Wake-word detection (“hai robo”) runs entirely on your device. Audio is analysed locally and is not transmitted or stored.
• Speech-to-text. Your spoken request is converted to text on your device using Apple’s speech recognition. Depending on your device and settings, Apple may process audio to provide transcription under Apple’s Privacy Policy. Only the resulting text — not raw audio — is sent to our backend.
• Face tracking uses the front camera to detect your face so the robot can turn toward you. Video frames are processed live on the device and are never recorded, stored, or uploaded.

4. Device permissions

Permission	How it is used	Leaves device?
Microphone	To hear the wake word and your voice commands.	No (wake word on-device; commands become text — see §3).
Speech recognition	To convert your speech to text.	May involve Apple per device settings (see §3).
Camera	On-device face tracking and scanning a QR code to pair a Mac.	No.
Location (when in use)	Only when you ask for local weather or to book a ride (to set your pickup point). Checked on demand.	Sent only to fulfil that request (weather/ride). Not tracked in background.
Calendar & Reminders	To tell you your next event and to create reminders you ask for.	Stays on your device / in your Apple account; we do not copy it to our servers.
Motion & fitness	To detect when the phone is placed on the dock.	No.
Photos (add only)	To save an image the assistant generated, when you tap Save.	Saved to your own photo library.
Local network	To find your paired Mac on the same Wi-Fi for screen-aware help.	Stays on your local network.
Bluetooth	To connect to the optional Hai Robo robot dock (pan, tilt, lights).	Local connection to your own dock only.

You can review or revoke any permission at any time in your device Settings. Revoking a permission disables the related feature but otherwise does not stop you using the App.

5. How and why we use information

• To provide and operate the assistant and the features you request.
• To authenticate you and keep your account and data secure.
• To sync your saved content across your devices, if you enable cloud sync.
• To investigate and act on reports of objectionable content and to keep the Service safe.
• To diagnose problems, prevent abuse and fraud, and maintain reliability and performance.
• To comply with applicable law and enforce our terms.

We rely on your consent (which you give when you sign in and when you grant a permission) and, where applicable, on our legitimate interest in operating, securing, and improving the Service and on compliance with legal obligations. We do not sell your personal data, and we do not use your conversations for advertising.

6. AI features, content & reporting

The assistant’s replies, search answers, translations, and generated images are produced using artificial intelligence (see providers in Section 7). When you ask a question, the recognised text of your request — and, for screen-aware help, a screenshot you explicitly request — is sent through our backend to the AI provider to generate a response.

AI can make mistakes. Responses and generated images may be inaccurate, incomplete, or unexpected, and should not be relied on for medical, legal, financial, or other critical decisions.

Content moderation and reporting. We apply content-safety filtering to reduce objectionable output. If you encounter a response that is offensive, unsafe, or otherwise inappropriate, you can report it from Settings → AI safety & reporting or by tapping the flag shown on a reply. A report may include the flagged prompt and reply and basic app/device details so we can locate and review it. We review reports and take appropriate action, typically within 24 hours.

7. How we share information & service providers

We share information only with the service providers (sub-processors) needed to run the App, under agreements that require them to protect it and use it only for our purposes:

Provider	Role	Data involved
Apple	Sign in with Apple; on-device speech recognition; WeatherKit; iCloud sync of your saved data.	Account identifier; speech (per device settings); location for weather; your saved data in your iCloud.
Google	Sign in with Google; Gemini AI (replies, search, translation, images — via our backend); Maps Places (address lookup).	Account identifier; the text of your request and (for screen help) a requested screenshot; address queries.
Supabase	Authentication, our AI proxy, optional cloud sync, and storage of account data.	Account data; your request text in transit; your saved data if cloud sync is on.
wttr.in	Fallback weather source used only if Apple WeatherKit is temporarily unavailable.	Approximate location or place name to return weather.

AI provider keys are held only on our backend and are never shipped inside the App. We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a merger, acquisition, or asset transfer (in which case we will notify you and this Policy will continue to apply).

8. Third-party apps and services you choose to open

Some features (for example, booking a ride or reordering food or groceries) work by opening a third party’s app or website that you have chosen, so you can complete the action there. We do not process or receive your payment details, and once you leave the App your activity is governed by that third party’s own privacy policy and terms. We encourage you to review them. Features that fetch public information (such as news, encyclopedia summaries, or stock quotes) send only your query to the relevant public source to return a result.

9. International data transfers

We are based in India. Some of our service providers (such as Google and Supabase) may process and store data on servers outside your country, including outside India. Where data is transferred across borders, we rely on appropriate safeguards and, where required, your consent. By using the App you consent to such transfers as described in this Policy.

10. Data retention & deletion

We keep personal data only for as long as your account is active or as needed to provide the Service, resolve disputes, maintain safety and security, and meet legal obligations. Specifically:

• On-device data remains until you delete it. Clear it from Settings → Data & privacy.
• Cloud-synced data and account data are deleted when you delete your account from Settings → Account → Delete account. Server-side copies and backups are purged within 30 days.
• Content reports may be retained as needed for safety, audit, and legal purposes.
• Request text sent for AI replies is processed to answer you and is not used to build an advertising profile.

11. Your rights and choices

Subject to applicable law, you have the right to:

• Access a copy of your data — Settings → Data & privacy → Export.
• Correct or update your data — edit it in the App, or email us.
• Erase your data — Settings → Data & privacy → Clear all my data, or Settings → Account → Delete account to remove everything.
• Withdraw consent — Settings → Account → Sign out, revoke a permission in device Settings, or stop using the App. Withdrawal does not affect processing already carried out.
• Data portability — export your saved data in a machine-readable format.
• Nominate — where the law allows, nominate another individual to exercise your rights in the event of death or incapacity.
• Grievance redressal — contact our Grievance Officer (Section 16) and, if unsatisfied, lodge a complaint with the competent authority (in India, the Data Protection Board).

To exercise a right that isn’t self-service in the App, email admin@koreidea.com. We may need to verify your identity before acting and will respond within the timeframe required by law.

12. Security & data-breach notification

We use reasonable technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and provider-side encryption at rest. No method of transmission or storage is completely secure, but if a personal-data breach likely to cause harm occurs, we will notify affected users and the relevant authority as required by applicable law.

13. Children

The App is intended for users 18 years and older and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

14. Region-specific disclosures

India (Digital Personal Data Protection Act, 2023)

We act as the data fiduciary. We process personal data on the basis of your consent for specified purposes, provide the rights described above, and have appointed a Grievance Officer (Section 16). You may approach the Data Protection Board of India if your grievance is not resolved.

EEA / United Kingdom (GDPR)

Where GDPR applies, our legal bases are consent, performance of a contract (providing the Service you request), our legitimate interests (security, abuse prevention, reliability), and legal obligation. You have the rights of access, rectification, erasure, restriction, objection, and portability, and the right to lodge a complaint with your local supervisory authority.

California (CCPA/CPRA)

We do not sell or “share” (as defined for cross-context behavioural advertising) your personal information, and we do not use it for targeted advertising. California residents have the rights to know, delete, correct, and to non-discrimination for exercising these rights.

15. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice as appropriate. Your continued use of the App after an update means you accept the revised Policy.

16. Grievance Officer & contact

In accordance with the Digital Personal Data Protection Act, 2023 and applicable rules:

Grievance Officer: Surendra Bharath Palle
Email: admin@koreidea.com
Company: KOREIDEA INNOVATIONS PRIVATE LIMITED
India

We aim to acknowledge grievances promptly and resolve them within the period required by law.