Privacy Policy for Hainect

## 1. Controller Abdiaziz Mohamed. Contact: contact@hainect.com. ## 2. What we process and why ### To create an account - Email, name and password are required to create an account. - Without them you cannot create an account, but you can read the site. - All other information is optional, including a profile photo. We send a confirmation email when you create an account. ### How we use and keep your data - **Account:** email, name, hashed password (transformed so it cannot be read) and an optional profile picture. Kept until you delete the account. - **The network:** questions, answers, followed and saved questions. What you publish is visible to everyone, with your name and any profile picture unless you choose to publish anonymously. Kept until you delete it or the account. - **AI on posts:** AI checks posts and answers questions. AI reviews and AI answers are stored for as long as the post exists and are deleted with it. They are not used to train AI. - **The AI's memory:** the AI keeps short lessons from public posts, without names, links or contact details, to give better answers. They are deleted together with the post. - **AI chat on the web:** conversations with the AI on hainect.com (the chat about a question and the idea helper) are kept so you can continue them, until you delete them or the account. Visitors' conversations are deleted after 30 days. - **App AI chat:** messages go to an AI service only if you agree. We do not store them. - **Translation:** AI translates public posts and notices into your language. Kept for at most 30 days, not linked to any account. - **Reports:** used to check content. Kept for at most 12 months. - **Daily AI limit:** a hashed IP address (turned into a code) and a random installation ID. Kept for at most 7 days. - **Support email:** emails to contact@hainect.com are kept as long as the matter requires, at most 12 months. - **Cookies and local storage:** a necessary sign-in cookie, a cookie with a random ID that keeps a visitor's AI chat together (at most 30 days) and a cookie with the country you visit from, used only to choose the language. Language and theme are stored locally in your browser. No tracking. Our web host keeps server logs with IP addresses for a short time for security. ### Why we may use the data (GDPR) - Accounts and the network are needed for our contract with you (Art. 6(1)(b)). - AI on posts relies on that contract and our legitimate interest in a safe service (b and f). - App AI chat requires your consent (a). - Translation and AI limits rely on legitimate interest (f). - Reports rely on legal obligation and legitimate interest (c and f). No ads, no tracking, no third-party analytics. We never sell data. ## 3. Who has access we use providers for hosting the website and server and for AI services (answers, checks and translation). They process data only on our behalf and may not use it to train AI. We also use an email service. Hosting, server, database and email are in the USA. On request, we tell you which companies they are. No one at Hainect, administrators included, can read your private AI chats, see your full email address or see who wrote an anonymous post. ## 4. Transfers outside the EU providers may process data in the US under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Contact us if you want a copy of these safeguards. ## 5. Your rights **You have the right to object at any time to processing based on legitimate interest.** You can: - find out what data we have about you; - correct mistakes and delete data; - ask for restriction of processing – for us to pause using your data; - get your data to move it to another service; - object to how we use your data; - withdraw consent at any time (in the app: Settings → AI). Delete posts and your account in the app or on the web. For help or to use your rights, email contact@hainect.com. We reply within a month. You can complain to the Swedish Authority for Privacy Protection (IMY), imy.se. **Users in the USA.** If you live in California or another US state with a privacy law, you have the right to know what personal data we collect, why and who we share it with, to get a copy, to have it corrected or deleted, and to opt out of sale or sharing for targeted advertising. We do not sell personal data, share it for advertising or use sensitive data to infer things about you. To use your rights, email contact@hainect.com – an authorised agent can also do it for you. We reply within 45 days and will not treat you worse for using your rights. If we refuse a request, you can appeal by replying to our email. ## 6. Automated decisions - **Before publication:** AI automatically checks posts to stop content that breaks the terms of use. - **How it works:** the AI compares the text with the rules in the terms of use. If it breaks them, it is not published. - **If a post is stopped:** you are told why. You can request a human review of the decision. Email contact@hainect.com. - **No profiling takes place:** we do not build a profile of you from your behaviour. ## 7. Children Hainect isn't for children under 13. Where the law requires it, the app checks the age range with Apple or Google Play. Apple and Google only give an age range (for example "13 or older"); it never leaves the phone and isn't stored by Hainect. In some EU countries the age of digital consent is 14–16: if you're younger than that, ask a parent or guardian before you agree to the AI chat in the app. ## 8. Changes we update this policy when the service changes and show the date at the top. ## 9. Users worldwide We give the same protection and the same rights to all users, wherever they live. If the law where you live gives you more rights, we follow it too. We never sell or share personal data for advertising. If a security incident affects your data, we inform you and the relevant authorities as the law requires.