Privacy Policy

HUIO ("HUIO", "we", "us", or "our") is an AI-powered translation and multilingual communication platform operated from Lima, Peru. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our website, applications, and related services (collectively, the "Services").

For any privacy-related question or request, contact our team at legal@huioapp.com.

• Account data: name, email address, hashed password, preferred language, and profile information you provide.
• Translation content: source text you submit, generated translations, source and target language pairs, and conversation metadata stored in your translation history.
• Usage and analytics data: pages visited, features used, device type, browser, approximate location derived from IP, and timestamps.
• Billing data (future): when paid plans launch, billing identifiers and transaction metadata processed by our payment provider. We do not store full card numbers.
• Consent records: the date and time you accepted this Privacy Policy.

• Provide, operate, and improve the Services and AI translation features.
• Authenticate you, secure your account, and prevent fraud or abuse.
• Maintain your translation history so you can review past activity.
• Communicate service updates, security notices, and support replies.
• Measure performance, debug issues, and improve product quality.
• Comply with legal obligations under applicable Peruvian and international law.

We use strictly necessary cookies to keep you signed in and remember your preferences, and limited analytics cookies to understand aggregate usage. You can clear or block cookies through your browser settings, but some parts of the Services may not function correctly without them.

We rely on a small number of trusted processors to operate HUIO:

• Supabase — authentication, database, and secure storage of account and translation data.
• Google Gemini — large language model used to generate translations. Text you submit for translation is transmitted to Google for processing under their terms.
• Paddle (planned) — payment processing and tax handling for future paid plans. Card data is handled directly by Paddle and never stored on our servers.

Each provider is bound by its own privacy and security commitments and processes data only as needed to deliver the relevant functionality.

We apply industry-standard safeguards including TLS encryption in transit, encryption at rest, hashed credentials, role-based access controls, row-level security policies on user data, and least-privilege service accounts. No system is perfectly secure, but we work continuously to protect your information and respond quickly to incidents.

We retain account and translation data for as long as your account is active. When you delete your account, associated personal data is removed from active systems within 30 days, except where retention is required to comply with legal obligations or to resolve disputes.

HUIO operates from Peru and uses providers located in other jurisdictions, including the United States and the European Union. Where personal data is transferred internationally, we rely on contractual safeguards and provider commitments to maintain a comparable level of protection.

Depending on where you live, you may have rights under the EU General Data Protection Regulation (GDPR), the Peruvian Personal Data Protection Law No. 29733 and its regulations, and equivalent local laws. These include:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your account and associated personal data ("right to be forgotten").
• Export a copy of your data in a portable format.
• Object to or restrict certain processing activities.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with the Peruvian National Authority for the Protection of Personal Data (Autoridad Nacional de Protección de Datos Personales) or your local data protection authority.

To exercise any of these rights, including account deletion or data export, email legal@huioapp.com. We respond within the timeframes required by applicable law.

HUIO is not directed to children under 14 years of age, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Services and update the "Last updated" date above.

HUIO — Lima, Peru
Email: legal@huioapp.com