Privacy Policy

• Account — your email address and authentication identifiers, managed through Supabase Auth (including Google sign-in if you use it).
• Your content — the conversations, trip itineraries, and preferences you create while using HipiMind, so they are available across your sessions.
• Voice — audio you speak is processed to provide real-time replies and audio guides. We store the resulting transcript as part of your conversation, not the raw audio stream.

HipiMind Plus is billed by Stripe. Stripe handles the card details — they never reach our servers. What we keep is the record of the subscription itself: the Stripe customer and subscription identifiers, which plan you are on, whether it is active, and when the current period ends. That is what the app reads to decide whether Plus is switched on for you.

We use one analytics tool: a self-hosted Umami instance. It is cookie-less — it stores no identifier in your browser and cannot recognise you on a return visit. What it records is which pages and features are used and an approximate region derived from your IP address. None of it is used for advertising, and HipiMind shows no ads. We do not load Google Analytics or any other third-party analytics or advertising tag.

We use third-party services to run HipiMind, including Supabase (accounts and database), Google Maps and Generative Language APIs (places and planning), Stripe (subscription billing), our self-hosted Umami (usage analytics), and our own API hosted on Render. These providers process data only to deliver the features you use.

We use your data to provide and improve the service: authenticating you, remembering your trips and preferences, and generating itineraries and audio guides. We do not sell your personal data.

Email contact@hipimind.com from the address you signed up with and say what you want removed. We delete on request and confirm by reply.

What gets deleted. Your account and its authentication identifiers, the conversations, itineraries and preferences you created, and the transcripts kept from voice sessions. If you subscribed to Plus, the subscription record goes too; Stripe keeps its own billing records, which we cannot delete on your behalf. Ask instead for a single conversation or itinerary to be removed and we will do that without touching the rest.

Email the same address to see or correct what we hold. Signing out ends your session on this device at any time.

Under the Personal Data Protection Act 2010 you may also ask us to limit how we process your data, and withdraw a consent you previously gave — write to the address above and we will act on it. Withdrawing consent for something the service depends on may mean we can no longer provide that feature. If you are not satisfied with how we have handled a request, you may complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), Malaysia.

This notice is published in English and in Bahasa Malaysia (Notis Privasi). If there is any conflict or inconsistency between the two versions, the English version prevails.

Notis ini diterbitkan dalam bahasa Inggeris dan Bahasa Malaysia. Sekiranya terdapat sebarang percanggahan antara kedua-dua versi, versi bahasa Inggeris yang akan digunapakai.