Privacy notice

Who is responsible

Hoozefa Inc. operates hoozefa.com and its progressive web app and is responsible for the personal information described in this notice. Contact book@hoozefa.com with the subject “Privacy request” for access, correction, deletion or another data-rights request.

AI pilot measurement

For eligible signed-in travelers, we may randomly show an AI planning invitation or a standard planner invitation. We store the assigned group and date, AI usage counts and estimated costs, and compare later booking outcomes. Chat content is not shown in pilot reports. Both groups retain access to normal search and the AI guide.

What this early version stores

When you sign in, Hoozefa receives your account identifier, email and an optional display name. It stores the profiles, trip plans, favorites, applications, listings, uploads, carts, reviews, host messages and guide conversations you choose to create.

Google Maps discovery

When you choose a Google place search, your destination, category and language are sent to Google. Your device coordinates are shared only if you choose “Use my location.” Names, addresses, pins and photo information returned by Google are displayed live and are not saved into Hoozefa’s directory. Photos and contributor images load from Google when you open them. Hashed network identifiers and request counts help prevent abuse and enforce usage limits. Google processes information under its Privacy Policy.

Preferences you choose to share

Food, faith-related interests, children’s ages and accessibility preferences are optional planning details. Please avoid entering sensitive medical information, identification documents or children’s full names. We use these details to tailor your plan and display your saved preferences.

Hosts and public information

Approved listing descriptions, host business names, uploaded listing media and reviews can be displayed publicly when the marketplace launches. Contact and application details are used to review and manage the host relationship. Public photos may contain location or other metadata; remove unwanted metadata before uploading. Media is not currently automatically stripped of metadata or scanned by a dedicated antivirus service.

Local host support

When you apply through a recruiter’s personal link and confirm sharing, that recruiter can see your host business name, city, application and listing status, listing views, carts and booking counts. They can see their commission from your bookings and record support notes for Hoozefa administrators. They cannot access traveler identities, conversations, payment details or your private application documents. Your original recruiter attribution stays with your host account for future eligible bookings.

AI guide conversations

When live AI is connected, your message and recent conversation are sent to OpenAI to prepare an answer, with web search when needed. Saved name and food preferences are included only when you select that option. Your conversations are saved in your account and can be deleted from the guide history. The AI cannot make a booking or payment for you.

Traveler reviews

Hosts can review the booking account after a completed, paid experience. You can see, reply to and report your reviews. Hosts with a confirmed, paid booking can view your traveler reputation; it is not a public directory. Hidden reviews do not count toward your rating.

Travel Together

Travel Together is optional and for adults. Only the name or nickname, profile photo, exact self-reported age in years, city, date, activity, languages, intention, travel-group type, adult and child counts, and introduction you submit are shared with signed-in travelers who have an open matching plan. Existing bookings, saved trips, emails and current device location are not shared automatically. Your birth date stays private and is used to calculate your age. Matching uses both adult contacts’ age, travel-group and language preferences. One adult represents a couple or family; children do not have matching profiles. Photos and ages are not identity verification. Both people must accept a connection before chat is enabled. You can hide a plan, close it, end a connection, or block a traveler. Moderators can review reports and the associated conversation. After an accepted connection’s travel date, a participant who confirms they met can publish a star rating and optional feedback about the other adult. Future eligible matches can see the rating history and recent feedback; the reviewer’s account email, photo and birth date are not displayed with it. Meetings are self-reported and reviews may be reported and moderated. Closed plans, reviews and chat/report records are retained for abuse review.

Signed safety agreements

We retain your private signature name, account identifier, acceptance time, agreement version, exact accepted text and withdrawal record. You can access and save your own copy in Safety & agreements. Moderators can access signature records. Signing is separate from optional marketing consent.

Nearby weather & suggestions

Happening now requests device location only when you tap Near me. The browser rounds coordinates before sending them to Hoozefa to find a nearby city; we do not save that position to your account or share it with other travelers. Weather requests send only the selected city reference point to MET Norway through our server. A city you choose manually and your temperature unit are remembered on this device. Shared weather and AI suggestions are cached to reduce repeated requests. AI suggestions send the city, forecast and public discovery information to OpenAI, without your account details or exact position.

Map location

The map requests device location only when you choose “Use my location.” The approximate marker stays in the current page and is not saved to your account or shared with travelers. Map tile providers receive requests for the area you view.

Browser storage

Your language choice is stored on your device. A temporary planning draft and referral code can be stored during the browsing session. Saved account data is stored on the server. The app keeps basic icons, photos and an offline help page on your device for the installed experience.

Host messages

On-site messages are stored for the traveler and host in that conversation. Automatic checks block contact details and numbers to keep bookings and communication on Hoozefa. Rejected message bodies are not stored; attempt counts are kept to limit abuse. Text filters have limits and may sometimes block legitimate wording. Use the booking fields for dates and group sizes.

Messages and marketing

Application and account updates appear in your dashboard. Resend delivers sign-in codes and account, application, booking, cancellation and receipt messages from book@hoozefa.com. It receives the recipient address and message content and returns delivery, bounce and complaint events. Replies route to our configured support inbox. Marketing is separate and optional; change your profile preference or use a campaign’s unsubscribe link. We retain limited suppression records to honor opt-outs.

Service providers and disclosures

Our hosting and storage infrastructure uses OpenAI Sites and Cloudflare. Resend provides email delivery; OpenAI provides requested AI responses; Google provides the optional place-search and photo features; map tile providers and MET Norway support maps and weather. Providers receive the data needed for their service under their applicable terms. Authorized Hoozefa personnel may access account, booking and moderation records for support, security and legal duties. Messages are not end-to-end encrypted. Hosts receive the booking information necessary to provide a booked experience. Recruiters receive only the limited host information described above. We may disclose necessary information for valid legal requests, fraud prevention, protection of rights or a lawful corporate transaction.

We do not sell personal information or share it for cross-context behavioral advertising in this release. We do not use third-party advertising pixels. We do not intentionally infer a person’s religion from a destination or food choice. Do not upload identity documents or full payment-card details. Checkout is disabled and we do not currently collect card numbers on this site.

Why we process information

We use account and transaction information to provide the services you request; security, moderation and limited product measurement to protect and improve the service; and records needed to meet legal duties. Where consent is required, including optional marketing and sensitive preferences, we seek it separately. When European or UK data-protection law applies, the relevant bases are contract, legitimate interests balanced against your rights, legal obligations or consent, as appropriate to the purpose. Optional preferences that reveal beliefs or health needs require your explicit permission; you can leave them blank and remove them later.

Retention and deletion

Profiles, saved plans and conversations remain while needed to provide the account service, until you remove them or make a verified deletion request. You can delete guide conversations and memory in the AI guide. Host-profile closure removes public listings but is not deletion of all related account data. We retain records needed for open bookings, refunds, disputes, fraud prevention, agreement evidence, accounting and legal obligations for the period those purposes require, taking applicable limitation and statutory retention periods into account. We review deletion requests individually; there is no automatic whole-account deletion schedule in this release. Backup copies may expire later under the infrastructure provider’s retention practices. We will explain a lawful retention exception when responding to a request.

Cookies and device storage

Essential sign-in cookies are restricted from browser scripts and sent only over HTTPS. The sign-in challenge lasts up to ten minutes and an email session up to thirty days unless you sign out or it is revoked. Browser language, planner, referral and install preferences and the app’s offline assets are separate device storage; clear your browser’s site data to remove them. The service worker does not cache private API responses. Optional external maps and photos can disclose your network address and the area or content requested to their providers. Blocking storage may prevent sign-in or saved preferences from working.

Your choices and rights

Depending on your location, you may request access or a portable copy, correction, deletion, restriction, objection, withdrawal of consent, or limits on use of sensitive information. Email book@hoozefa.com from your account address where possible. Tell us the request and enough information to locate the account; do not send a password or sign-in code. We verify identity proportionately, respond within the applicable legal deadline, and explain any extension or lawful exception. An authorized representative may contact us with evidence of authority. You may appeal a refusal by replying “Privacy appeal,” and complain to your competent data-protection authority. We do not discriminate against you for exercising a protected right. Withdrawing consent does not undo earlier lawful processing.

International use and children

Service providers may process information in the United States and other countries, where laws may differ. Where applicable law requires transfer safeguards, those safeguards must be established for the relevant provider and transfer; this notice does not itself constitute such a safeguard. Accounts and traveler matching are for adults. Adults may supply limited group counts and children’s ages for family planning, but should not submit children’s names, contact details or identity documents. Contact us if you believe a child created an account or personal information was submitted without proper authority.

Security and changes

We use access controls, protected sessions, request validation, usage limits and private-record ownership checks. No online service can guarantee absolute security. Report a suspected vulnerability or account incident privately to book@hoozefa.com, without accessing other people’s data or disrupting the service. Material changes to this notice will carry a new date; we will give additional notice or seek permission when the law requires it.

Hoozefa Inc. terms & conditions · Safety & agreements