1. Who we are
HalaWays is a travel-services platform operated by Halawa Travel & Tourism. In this policy, “HalaWays,” “we,” “us,” and “our” refer to that operator and the HalaWays services.
This policy applies to the HalaWays iOS and Android apps, our customer-facing web services, and communications with our support team.
2. Information we collect
Account and profile information
We may collect your mobile number, name, email address, birthday, gender, nickname, profile photo, preferred language, country, city, region, and time zone. Mobile-number verification records, including one-time-password status and timing, are used to secure registration and sign-in.
Identity and traveler information
When you save a passport or make a booking, we may collect traveler names, birth dates, nationality, gender, passport or travel-document details, document images, and other information required by the selected travel provider or applicable law.
Travel, booking, and transaction information
We collect searches, selected travel options, booking references, itineraries, purchased products, passenger or guest details, support history, wallet activity, payment status, refund information, and related provider responses.
Messages, media, and support submissions
If you use chat, voice, document scanning, photo upload, or public issue reporting, we process the messages, prompts, audio, photos, screenshots, attachments, and location shares you choose to send.
Device and technical information
We may collect device identifiers, push-notification tokens, device platform, operating-system version, app version, language, network and request information, IP-derived security data, and diagnostic logs. Our public forms use essential session data to provide security protections such as CSRF and abuse prevention.
3. How we use information
- Create, verify, secure, and maintain your HalaWays account.
- Search, price, reserve, purchase, deliver, and support flights, hotels, eSIMs, insurance, packages, restaurants, and other travel products.
- Process payments, wallet activity, refunds, accounting, fraud prevention, and transaction reconciliation.
- Provide AI-assisted travel conversations, voice transcription, personalized suggestions, maps, nearby-place results, and customer support.
- Send booking, service, security, and support communications, including push notifications when enabled.
- Monitor reliability, investigate bugs, prevent misuse, comply with legal obligations, and improve the service.
We do not sell personal information or use it for third-party behavioral advertising.
4. Device permissions
HalaWays asks for device access only when a feature needs it. You can deny or later change permissions in your device settings, although the related feature may stop working.
- Camera and photos: profile images, chat attachments, passport capture and document scanning.
- Microphone: voice messages and voice-enabled assistance.
- Location: nearby-place searches, maps, location sharing, and relevant travel suggestions.
- Notifications: booking, account, support, and travel-service updates.
- Network and eSIM capabilities: service connectivity and supported eSIM activation flows.
6. AI-powered features
HalaWays uses AI to understand travel requests, generate responses, help structure booking details, transcribe audio, and assist with documents. Content you submit to these features may be sent to configured AI or speech providers to produce the result.
Do not include passwords, one-time codes, card security codes, or information that is unrelated to your travel request in an AI conversation or support report.
7. Payments and saved methods
Payment credentials are collected or processed by supported payment providers. HalaWays stores transaction records and, where you choose to save a payment method, tokenized gateway references and limited card metadata. We do not store raw card numbers or CVV security codes.
8. Data retention
We keep information for as long as needed to provide the service, maintain your account, resolve disputes, prevent fraud, meet contractual obligations, and comply with accounting, tax, aviation, insurance, payment, and other legal requirements.
Retention periods vary by record. Account profile data can generally be deleted after a verified request. Some booking, payment, refund, audit, fraud-prevention, or legal records may be retained where required, then deleted or anonymized when the retention purpose ends.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, tenant separation, request validation, tokenized payment references, and restricted storage for uploaded files. No system can guarantee absolute security.
10. Your choices and rights
You can update profile details in the app, manage device permissions in system settings, and choose whether to enable notifications. Depending on applicable law, you may also request access, correction, deletion, restriction, or a copy of personal information.
To request account and associated-data deletion, follow the instructions on our Support page. We may need to verify that the request comes from the account owner.
11. Children
HalaWays accounts are not directed to children. An adult may provide information about a minor traveler when arranging a legitimate trip, but the adult is responsible for having authority to provide that information.
12. International processing
Travel services are international by nature. Information may be processed in countries where a provider, airline, hotel, payment processor, cloud service, or other supplier operates. Data-protection laws in those countries may differ from those in your location.
13. Changes to this policy
We may update this policy when our services, providers, or legal obligations change. The effective date at the top identifies the current version. Material changes may also be communicated through the app or another appropriate channel.
14. Contact us
Questions, privacy requests, and complaints can be sent through our Support page or by email at support@halaways.com.