Hai Robo Privacy Policy

Effective: 9 September 2026

Hai Robo (“Hai Robo”, “the app”, “we”, “us”) is a voice AI companion available on iOS and Android. This policy explains what data the app handles, why, where it goes, how long we keep it, and your rights. We practise data minimisation: most processing happens on your device, and we never sell your data or use it for advertising.

A note on features across versions. Hai Robo’s feature set varies by platform and app version. Every version includes an always-present core: an animated display and voice interaction. Beyond that, some versions add optional features (camera, companion, feedback and so on). Each feature is used only when you use it, on supported devices and app versions. If your version does not include a feature, none of that feature’s data is accessed.

1. Summary

• Talking to the assistant works on the phone alone. Signing in is optional and only needed for the cloud AI and to back up and sync your data.
• Hai Robo listens for its name using your phone’s built-in speech recognition, which may run on the device or on Apple’s or Google’s servers. That audio reaches our servers in only two cases: a short recording when you ask for a translation, which passes through them and isn’t stored, and the answers you record in a feedback session you start.
• Nothing from your phone’s camera is uploaded unless you start a feedback session and turn video on.
• AI questions are forwarded to our AI provider for a reply and are not stored on our servers.
• We do not track you across other companies’ apps or websites, embed advertising SDKs, or sell your personal data.
• We do not use your data to train AI models.
• If you subscribe, Apple takes the payment and we never receive your card number, billing address, or the name on your payment method. We record only that a valid subscription exists and which account it belongs to.
• You can export or delete your data, and delete your account, at any time in the app.

2. The core: display, voice and account

These are present in every version of Hai Robo, on both iOS and Android.

• Animated display and voice interaction. You speak; your speech is transcribed; and open-ended questions are sent to our AI backend to generate a spoken reply that the animated display speaks back.
• Speech. Hai Robo listens for its name, and for what you say after it, using your phone’s built-in speech recognition (Apple Speech on iOS, Android SpeechRecognizer on Android). On iOS, listening for its name is kept on the device where your phone supports it; what you say after that, and all listening on Android, may be processed on Apple’s or Google’s servers. That audio never reaches our servers, and what you ask is not stored on our servers. There are two exceptions, both described in section 3: translation, and feedback sessions you start.
• AI requests are not stored. When you ask an open-ended question, the transcribed text is forwarded to the AI provider, the reply is returned, and nothing is retained on our servers.
• Account (optional). If you sign in, we receive your name and email address from Sign in with Apple (iOS) or Google Sign-In. An account is only needed to secure the cloud AI and to back up and sync your saved data. Backend hosting, authentication and database are provided by Supabase.

3. Optional features

Depending on your device and app version, Hai Robo may offer the features below. Each is used only when you choose to use it; if your version doesn’t include a feature, none of its data is accessed.

• Precise location. Used only when you ask for something that needs it: finding places nearby, checking the weather, or setting the pickup point when you book a cab. The app requests precise coordinates, because an approximate pickup point is not useful. Your location does leave your phone to answer that request: it goes to Google for nearby places (through our own service, which passes it on and stores nothing), to Apple for the weather, and to the cab app you choose as the pickup point. It is read at the moment you ask. There is no background tracking, and Hai Robo keeps no record of where you have been.
• Camera / face recognition. On supported versions, the front camera lets the companion look toward you, and optional face recognition can greet enrolled family by name. Face data is converted into an encrypted on-device summary stored in the platform secure store (Apple Keychain on iOS, Android Keystore on Android) and is not uploaded. Face tracking, recognising things you show it, and reading text all run on your device, and pictures from the camera are not uploaded. No photos are saved. Video is recorded and uploaded only in a feedback session you start and agree to.
• Contacts, calendar and reminders. Accessed only when a command needs them: for example, to call or message a person you name, to read or add an event, or to add a reminder. They are read and spoken on your device, including in the morning briefing, and are never uploaded and never sent to the AI. Reminders you create are saved in your Reminders app.
• Computer companion (universal clipboard & file transfer). When you pair a computer, clipboard text and images and files sync between your phone and your own paired computer over the local network (Wi-Fi/LAN). This goes directly to your device, not to our servers or any third party. Inbound files are saved to your Downloads folder.
• Questions about your computer’s screen. When the Mac companion is paired and on the same network, asking about what is on your Mac’s screen (for example “look at this”, “review this page” or “fix this code”) takes a screenshot of the Mac and sends it to our AI provider to answer. “Make this better” sends it to generate an improved design. The screenshot is not stored on our servers.
• Saved reels and posts. When you share a reel or post to Hai Robo, its cover image is sent to our AI provider to be tagged, so you can find it later. The image is not stored on our servers; the tags are kept with your saved items.
• Translation. When you ask Hai Robo to translate something you say, a short recording is sent through our servers to our AI provider (Google) to be translated. It isn’t stored on our servers; only a daily usage count is kept.
• “Help improve Hai Robo” feedback sessions (opt-in). On supported versions, if you start a session, Hai Robo records your spoken answers as audio, plus an on-device transcript and a rating. Video is a separate opt-in and is off by default; if you enable it, the front camera also records video. These recordings are uploaded to our backend (Supabase) and linked to your account, used only to improve the product: never for ads, never sold, never used to train AI models. The upload is stored in our Supabase storage bucket and keyed to your account id. A copy is saved on your device for you to share or delete. Audio and video auto-delete after 30 days (see section 8). Deleting your account removes your feedback answers outright (the recordings, the video if you enabled it, and the transcripts) rather than merely unlinking them from you. To have a recording deleted sooner without closing your account, email admin@koreidea.com from your account address.
• Plugins. Plugins are small HTML/JS extensions you can browse and run in the app. A plugin runs sandboxed on your device with no network access of its own, and each sensitive capability it wants (camera position, motors) requires an explicit consent prompt before it first runs. No plugin can see camera images. It receives positions only.
• Submitting a plugin (developers). If you submit a plugin we collect your account identity (the name and email from Sign in with Apple or Google), the plugin bundle you upload, its manifest, and our review decisions. This is kept while the plugin is listed, so we can show authorship and handle reports about it. A plugin you upload but never submit is a private draft, visible only to the account that created it. Deleting your account unpublishes your plugins and erases the uploaded files: see section 8.
• Reporting a plugin. If you report a plugin we collect your account id and the free-text reason you write. Reports are moderation records, so they cannot be read or withdrawn by the person who filed them. Deleting your account removes them. Retention is set out in section 8.
• Hai Robo Plus (subscription). Hai Robo Plus is an auto-renewable subscription sold through Apple that raises your daily usage limits. It does not change the assistant, the model or the features. The current limits and prices are shown in the app before you subscribe. We do not receive or store any payment details: no card number, no billing address, and no name from your payment method. Apple takes the payment; we learn only that a valid purchase exists and whose it is. What we do store against your account, because an entitlement that cannot be attributed to an account cannot be honoured, is the purchase and subscription record: Apple's transaction identifier, the product identifier, the expiry date, whether auto-renew is on, the storefront country, whether the purchase came from Apple's sandbox or production environment, and the price and currency Apple reports. We also keep a log of the subscription notifications Apple sends us (renewals, cancellations, expiries and refunds), which contain the same identifiers.
• iOS-only integrations. WeatherKit, Apple Music and Apple Health are used only on iOS where available, and are not present on Android. Where enabled, Health reads your step count and writes water-intake entries you log by voice, solely for in-app activity and hydration reminders. Health data stays on your iPhone and is never uploaded, and is never sold, shared or data-mined. Apple Music controls playback of your library and does not collect your listening history.

4. How we use your data

• To answer you and run the features you use.
• To create and secure your account, and to back up and sync your saved data across your devices when you are signed in.
• To enforce fair-use quotas and keep the service reliable and secure.

We rely on your consent and on the performance of our service to you as the legal bases for this processing. We do not use your data to train AI models, for advertising, or for cross-app tracking.

5. On-device processing

The following happen entirely on your device and are not sent to our servers:

• Recognising what you show the camera, and reading text. The pictures they use are processed on your device and are not uploaded.
• Face tracking and face recognition (on supported versions): video is processed for tracking and is not recorded or uploaded; enrolled face data becomes an encrypted on-device summary (see section 3).

Your chat history is stored only on your device, encrypted with AES-GCM using a key held in the platform secure store. It is not in the list above because it does not stay entirely on the device: recent messages are sent with each new question so the AI can follow the conversation, and they are not stored on our servers. You can clear the history at any time in Settings.

On-device data belongs to the account, not the handset. Saved places, orders, ideas, chat history, remembered faces, assistant memory and settings are held against the account that is signed in. Signing out puts that account's data away rather than leaving it on screen, and signing in restores it, so handing the robot to someone else on a shared desk does not show them your things, and does not lose yours. There is a Switch account button for exactly that hand-over.

6. Permissions we may ask for

Which of these apply depends on your device and app version. Features that need a permission explain why before asking, and the app keeps working without the ones you decline.

Permission	Why
Microphone & Speech	Hear its name and your commands, using your phone’s speech recognition. Audio reaches our servers only for a translation, which isn’t stored, or in a feedback session you start, which is kept for up to 30 days
Camera	Let the companion look at you; face recognition; scan a pairing QR code
Contacts	Call or message people you name (on-device lookup). Never uploaded
Calendar	Read or add events when you ask. Never uploaded
Reminders	Add reminders you ask for, saved in your Reminders app. Never uploaded
Photos (add only)	Save images it makes for you. It cannot see the rest of your library
Health (iOS)	Step and hydration reminders. Stays on your iPhone, never uploaded
Motion	Used with your own Hai Robo robot, and with AirPods for the posture and nod features you turn on. Stays on your phone
Apple Music (iOS)	Control playback of your library
Precise location	Nearby places, weather and the cab pickup point, only when you ask. Sent to Google, Apple or the cab app to answer; never tracked or stored by us
Bluetooth	Connect to the optional motorised dock
Local Network	Connect to your paired computer companion on your Wi-Fi
Notifications	Deliver timers, alarms and reminders

You can change any permission in your device Settings at any time.

7. Who we share data with (sub-processors)

We share data only with the providers needed to run the app, under data-protection agreements:

Provider	What they do
Supabase	Hosting, authentication and database (your account, synced data, and any feedback recordings you submit).
Google	Gemini AI (generates assistant replies, answers questions about your Mac’s screen, translates what you say, and tags reels you save), Places (nearby places, from your location when you ask, and address autocomplete), and Google Sign-In.
Apple (iOS only)	Sign in with Apple, Speech recognition, WeatherKit, and App Store purchases. Apple processes the payment for Hai Robo Plus and tells our server when a subscription renews, lapses, is cancelled or is refunded.

We do not sell your data and do not share it for advertising.

8. Storage, retention and deletion

• Saved data (such as places, orders, expenses, ideas and memory) is stored on your device and, when you are signed in, backed up to your account so it syncs across your devices.
• Deleted items sync to your other devices as “deleted” for 30 days, then are permanently removed from our servers.
• Usage/quota counters are kept for 30 days, then automatically deleted.
• AI requests (your voice text, questions, Mac screenshots, reel cover images and translation recordings) are not stored on our servers: they are forwarded to the AI provider, the reply is returned, and nothing is retained on our servers.
• Feedback recordings (opt-in): audio and video are kept for 30 days. A daily automated job removes media older than 30 days from the feedback storage bucket and clears the stored file paths. The text transcript and rating are kept indefinitely while your account exists, as they contain no recording of you. Deleting your account removes your feedback answers outright (the recordings, the video if you enabled it, and the transcripts) rather than merely unlinking them from you. To have a recording deleted sooner without closing your account, email admin@koreidea.com from your account address.
• Plugin submissions: your account identity, the uploaded bundle, its manifest and our review decisions are kept for as long as the plugin is listed, so we can show authorship and handle reports about it. An unsubmitted draft stays private to your account. Deleting your account also unpublishes your plugins, and erases the uploaded bundle files along with them: they are removed from the gallery, so nobody can install or update them again. Copies already installed on other people's devices keep working, but receive no further updates. We do this because the alternative is keeping your code and your name in a public gallery after you have asked to be erased.
• Plugin reports: kept for 180 days after the report has been actioned, then automatically deleted. A report that has not been actioned is never automatically deleted, at any age. This asymmetry is deliberate: a report ageing quietly out of an unread queue is exactly the failure the retention rule exists to prevent, so we would rather hold the record than lose evidence nobody has looked at. Deleting your account removes the reports you filed.
• Purchase and subscription records, and the log of the subscription notifications Apple sends us, are kept while your account exists so we can honour and verify your subscription, and are deleted with it. Neither contains payment details.
• Deleting your account triggers an immediate server-side deletion that erases the data tied to your account.
• A nightly automated job enforces the 30-day windows above.

9. Security

We protect your data with TLS encryption in transit, access controls, and provider-side encryption at rest. On-device sensitive data (such as face summaries and your session token) is stored in the platform secure store: Apple Keychain on iOS, Android Keystore on Android.

10. Your rights

In the app you can:

• Access / export your data: Settings → Your data → Export.
• Correct it: edit any saved item in the app.
• Erase it: Settings → Your data → Clear all my data, or Account → Delete account.
• Withdraw consent: Account → Sign out.

To exercise any right or raise a concern, contact us at admin@koreidea.com. We respond within the timeframes required by applicable law.

11. Delete your account

You can permanently delete your Hai Robo account and the data tied to it:

• In the app: open Hai Robo → tap the settings gear → Account & sync → Delete account → confirm. This immediately and permanently deletes your account and all synced data.
• By email: send a request from your account’s email address to admin@koreidea.com with the subject “Delete my account.” We will delete your account and data within 30 days.

What is deleted: your profile (name, email), saved places, orders, expenses, conversational memory, any feedback recordings and their transcripts, device records, your purchase and subscription records, and the log of the subscription notifications Apple sent us about your account. All of it is deleted permanently.

A subscription notification that arrives from Apple after you have deleted your account is recorded without any account identifier, so the promise holds going forward and not only at the moment you ask.

What may be kept: anonymized, aggregated logs with no personal identifiers, retained only for security and abuse prevention.

12. Region-specific rights

India (DPDP Act, 2023)

You are the Data Principal; we are the Data Fiduciary. You may access, correct, update and erase your personal data, nominate a person to exercise your rights, and raise grievances with our Grievance Officer (admin@koreidea.com), who responds within statutory timeframes.

EEA / UK (GDPR)

You have the rights of access, rectification, erasure, restriction, portability, and objection, and to lodge a complaint with your data protection authority. Our legal bases are consent and performance of our service.

California (CCPA/CPRA)

You have the rights to know, delete, correct, and to opt out of “sale”/“sharing”. We do not sell or share your personal information and do not use it for cross-context behavioural advertising.

13. Children

Hai Robo is intended for users 18 and over and is not directed to children.

14. International transfers

Your data may be processed on servers operated by our sub-processors outside your country, with appropriate safeguards as required by applicable law.

15. Changes to this policy

We will update this policy as the app changes and revise the effective date above. Material changes will be highlighted in the app or on this page.

16. Contact

KOREIDEA INNOVATIONS PRIVATE LIMITED
Grievance Officer: Surendra Bharath Palle
admin@koreidea.com