1. Introduction
HKI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.
2. Information We Collect
We may collect the following types of information:
- Personal Information: Email address, name, and profile information when you create an account with Sign in with Apple or Google Sign-In. If you use Apple's "Hide My Email," we receive the relay address Apple generates for you instead of your real email address.
- Purchase and Subscription Data: If you subscribe to HKI Premium, we receive your subscription status, the product purchased, and transaction records from Apple's App Store or Google Play. Payment is processed entirely by Apple or Google — we never see your payment card details.
- AI Chat Content: The messages you send to the in-app AI assistant, together with the article context needed to answer them.
- Usage Data: Information about how you interact with our app, including pages viewed, stories read or listened to, content preferences, and feature usage.
- Device Information: Device type, operating system, unique device identifiers, and mobile network information. If you enable notifications, we also store your device's push notification token.
- Location Data: Approximate location based on IP address (we do not collect precise GPS location)
3. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our services
- Process your subscription and unlock Premium features
- Generate answers to the questions you ask the AI assistant
- Deliver the notifications you ask for
- Personalize your experience and deliver relevant content
- Communicate with you about updates, news, and features
- Analyze usage patterns to enhance app functionality
- Detect, prevent, and address technical issues and security threats
4. Information Sharing and Disclosure
We do not sell your personal information. We share information only with the service providers we rely on to operate HKI, or when the law requires it:
- Supabase — hosting, database, and account authentication for our backend
- RevenueCat — subscription management; receives your account identifier and purchase history so your Premium access works across devices
- PostHog — product analytics; receives app usage events linked to your account identifier. You can opt out at any time (see Section 7).
- OpenAI — processes your AI assistant messages to generate responses. Under our API agreement this content is not used to train OpenAI's models, and OpenAI may retain it for a limited period for abuse monitoring.
- Tavily — when the AI assistant searches the web to answer you, it receives search queries derived from your question (never your name or account details)
- Expo — delivers push notifications; receives your device's push token and the notification content
- Apple and Google — sign-in and payment processing under their own privacy policies
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets
These service providers may use your information only to deliver their services to us, under agreements that require them to protect it to a standard consistent with this policy. Apple and Google process sign-in and payments under their own privacy policies.
5. Data Security
We implement industry-standard security measures to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We keep personal information only as long as it is needed:
- Account data (profile, bookmarks, saved items, chat history, push notification tokens) is retained while your account exists and deleted when you delete your account. Server-side chat and search logs are kept in de-identified form, permanently unlinked from your account. Residual copies may persist in backups for a limited period before being purged.
- Subscription and transaction records are retained for as long as required for accounting, tax, and legal compliance.
- Analytics events are retained only as long as needed for product analysis; opting out (Section 7) stops further collection.
- Aggregated or de-identified data that can no longer identify you may be retained for analytics and service improvement.
7. Your Rights and Choices
You have the following rights regarding your personal information:
- Access and update your account information at any time
- Delete your account and associated data directly in the app: open the Account tab and choose "Delete account". Deleting your account does not cancel an active subscription — manage or cancel it in your device's App Store or Google Play subscription settings.
- Opt out of analytics at any time with the toggle in the app's Account tab
- Request access to or correction of your personal data by emailing privacy@air.city
- Opt-out of promotional communications
- Control cookie preferences through your browser settings
Providing personal data is voluntary. You can use HKI's free reading and listening features without an account; account features such as bookmarks, chat history, and Premium require the information described above, and we cannot provide them without it.
8. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at:
Aircity Operating System (HK) Limited
Email: privacy@air.city
Website: https://air.city