Privacy & Cookie Policy

EastAssist ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy & Cookie Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application and services.

1. Information We Collect

1.1 Account Information

• Email address (required for registration and communication)
• Nickname (optional, displayed in your profile)
• Profile avatar (optional, uploaded to our secure storage)

1.2 Subscription and Payment Information

• Subscription plan type
• Purchase records and transaction history
• Payment processing is handled by Apple/PayPal; we do NOT store credit card information

1.3 Communication Data

• Chat messages with our AI assistant and customer service agents
• Message timestamps and delivery status
• Chat history is retained for service quality and customer support purposes

1.4 Inquiry Information

• Personal and business travel inquiry details
• Travel dates, number of travelers, service preferences
• Phone number and specific requirements (if provided)

1.5 Device and Usage Information

• Device type and operating system version
• App usage statistics
• Crash reports and error logs (for technical support)

1.6 Information We Do NOT Collect

• Precise geolocation data (unless you voluntarily share in chat)
• Contacts from your address book
• Photos from your gallery (except when you upload an avatar)
• Biometric data

2. How We Use Your Information

We use the collected information to:

• Provide and maintain our services
• Process subscriptions and payments
• Facilitate communication between you and our customer service agents
• Respond to your inquiries and support requests
• Send important service notifications
• Improve our services and develop new features
• Detect and prevent fraud or abuse

3. Information Sharing and Disclosure

3.1 Third-Party Service Providers

We share limited information with trusted service providers who assist in operating our services:

• Apple/PayPal: Payment processing (transaction details only)
• Supabase: Authentication, database, and file storage

3.2 What We Do NOT Do

• We do NOT sell your personal information to third parties
• We do NOT rent or lease your data to advertisers or data brokers
• We do NOT share your chat messages with anyone except assigned customer service agents

4. Data Security

We implement industry-standard security measures to protect your information:

• All data transmission is encrypted using HTTPS/TLS protocols
• Passwords are hashed and never stored in plain text
• Database access is restricted to authorized personnel only
• Automated backups to prevent data loss

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

In accordance with Hong Kong Personal Data (Privacy) Ordinance (PDPO) and international privacy standards, you have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data

7. Cookies and Tracking Technologies (Cookie Policy)

Our website and mobile app use minimal tracking technologies to ensure core functionality without invasive advertising models.

• Session tokens for authentication (stored locally)
• Anonymous usage analytics (no personally identifiable information)
• We do NOT use advertising trackers or third-party marketing cookies

8. Contact Information

For privacy-related questions or to exercise your data rights, please contact us through: