Privacy Policy

Operated by: Hayati Labs Limited

1. Introduction and Scope

Welcome to Hayati AI (“Hayati,” “Hayati AI,” “we,” “us,” or “our”), an artificial intelligence companion and entertainment platform operated by Hayati Labs Limited, a company registered in the State of New York, United States, with an office in California.

This Privacy Policy (“Policy”) explains how we collect, use, process, disclose, retain, and protect personal information when you access or use our website at https://hayati.ai and its associated products, features, and services (collectively, the “Services”).

Hayati provides fictional AI companion experiences for adults. The Services may include text conversations, AI-generated images, audio, video, fictional romantic interactions, subscriptions, and Lulu virtual credits.

By using the Services, you acknowledge that you have been provided with this Policy. Where consent is legally required for a particular processing activity, we will seek that consent separately.

This Policy applies to visitors, registered users, paying customers, and individuals who contact us regarding the Services.

Hayati is intended exclusively for adults aged 18 or older, or the higher applicable age of majority in their jurisdiction.

2. Information We Collect

2.1 Account and Registration Information

When you create or manage an account, we may collect:

• Email address;

• Username or account identifier;

• Login credentials or authentication-related information;

• Account preferences and settings;

• Registration and account activity records;

• Subscription status and Lulu credit balance;

• Communications with customer support.

We collect only information reasonably necessary for the relevant purposes.

2.2 AI Conversations and User-Submitted Text

When you interact with AI companions, we process information such as:

• Text prompts and messages you submit;

• AI-generated responses;

• Conversation history and supported contextual information;

• Character preferences and interaction settings;

• Content moderation signals and relevant safety records.

Conversation content may include personal or sensitive information voluntarily disclosed by users.

Hayati does not require users to disclose their real names, personal identities, or sensitive personal information during AI conversations.

Hayati does not use users' conversation data to train or fine-tune AI models.

2.3 Payment and Transaction Information

When you purchase subscriptions, Lulu credits, or other paid digital features, we may process:

• Transaction identifiers;

• Purchase amounts and currencies;

• Payment status;

• Subscription and renewal information;

• Lulu purchase and consumption records;

• Refund, cancellation, and dispute records;

• Limited payment method details provided by payment processors.

Payment card information is handled by authorized payment service providers.

Hayati does not need to receive or store full payment card numbers or card security codes to provide the Services.

2.4 Device and Technical Information

When you access the Services, we may automatically collect:

• IP address;

• Browser type and version;

• Operating system and device type;

• Device and browser settings;

• Language preferences;

• Access timestamps;

• Log and diagnostic information;

• Security and fraud-prevention signals.

This information supports platform functionality, troubleshooting, security, and service administration.

2.5 Usage and Analytics Information

We may collect information about how the Services are used, including:

• Pages and features accessed;

• Session activity;

• Feature usage frequency;

• Subscription and purchase interactions;

• Error and performance information;

• Aggregated engagement statistics.

Where analytics technologies require consent, they will be subject to the applicable cookie consent controls.

2.6 Approximate Location Derived from IP Address

Hayati may infer a user's approximate geographic location, such as country or general region, from their IP address or related network information.

This information may be used for localization, language preferences, security, fraud prevention, regulatory compliance, and permitted analytics.

IP-based location estimates may be inaccurate.

2.7 Precise Device Location

Hayati does not currently request precise GPS coordinates or device-provided location permissions.

We do not use device GPS functionality to track users' precise physical movements.

2.8 Language and Dialect Preferences

Hayati may process language preferences and infer preferred Arabic dialects or communication styles from user selections and conversation context.

This may include preferences for regional Arabic varieties, such as Gulf, Saudi, Levantine, or Egyptian Arabic.

Such information is used to personalize the fictional AI experience.

Language or dialect preferences are not treated as definitive evidence of nationality, ethnicity, or other protected characteristics.

2.9 Cookies and Similar Technologies

Hayati uses or may use cookies and similar technologies for authentication, security, preferences, website functionality, analytics, and advertising measurement.

Where legally required, non-essential cookies and tracking technologies are subject to prior consent.

Users are provided with cookie consent and preference-management options as described in Section 9.

2.10 Third-Party Authentication

If third-party authentication options are offered, Hayati may receive limited information from the relevant authentication provider, such as an email address or authentication identifier.

The information received depends on the specific integration and permissions granted.

This section applies only to authentication methods actually made available through the Services.

3. How We Use Personal Information

Hayati may use personal information to:

1. Create, authenticate, and administer user accounts;

2. Provide AI companion conversations and requested digital content;

3. Maintain supported conversation context and user preferences;

4. Process subscriptions, Lulu credits, payments, and refunds;

5. Deliver customer support and respond to inquiries;

6. Detect and prevent fraud, abuse, unauthorized access, and security threats;

7. Apply content moderation and enforce platform policies;

8. Maintain, troubleshoot, and improve platform functionality;

9. Conduct permitted analytics and measure service performance;

10. Comply with applicable legal and regulatory obligations;

11. Communicate important service, account, billing, and policy updates;

12. Conduct marketing or advertising activities where legally permitted and subject to applicable consent requirements.

We do not use users' private conversations for unrelated AI model training or fine-tuning.

4. Legal Bases for Processing

Where applicable data protection laws require a legal basis for processing, Hayati relies on one or more of the following:

Performance of a Contract: Processing necessary to provide requested services, maintain accounts, deliver AI interactions, and administer purchases.

Legitimate Interests: Processing reasonably necessary for security, fraud prevention, abuse detection, technical troubleshooting, and service administration, where those interests are not overridden by applicable individual rights.

Legal Obligations: Processing necessary to comply with applicable laws, regulatory requirements, lawful requests, tax obligations, or legally required records.

Consent: Processing based on valid consent where required, including certain non-essential cookies, tracking technologies, and marketing communications.

Where processing relies on consent, users may withdraw that consent in accordance with applicable law.

Withdrawal does not invalidate processing lawfully carried out before withdrawal.

5. Sensitive and Intimate Information

Hayati is an adult-oriented fictional AI companion platform.

Users may voluntarily disclose sensitive or intimate information in conversations, including information concerning relationships, sexual interests, emotional experiences, health, or other private matters.

Hayati does not require users to provide such information to create an account.

Users are encouraged not to submit unnecessary sensitive personal information, government identification numbers, financial credentials, or confidential information about other people.

Sensitive conversation content may be processed to provide requested AI interactions, maintain supported context, apply safety moderation, and meet applicable legal obligations.

Where a specific category of sensitive personal information requires additional legal safeguards or a particular legal basis, Hayati will apply the requirements of the relevant law.

Hayati does not sell intimate conversation content to advertisers or data brokers.

6. AI Processing, Model Training, and Automated Decisions

6.1 AI Processing

User messages are processed by AI systems to generate requested responses and deliver fictional companion experiences.

Processing may involve authorized AI infrastructure and service providers acting on behalf of Hayati.

6.2 No Training on User Conversations

Hayati does not use users' conversation data to train or fine-tune AI models.

Hayati does not authorize its AI service providers to use user conversations for unrelated general-purpose model training.

Processing messages for inference, supported conversation context, content moderation, and security is distinct from training AI models.

6.3 Automated Content Moderation

Hayati uses AI-based moderation systems to identify and restrict prohibited content and potentially abusive activity.

Moderation may result in blocked requests, restricted outputs, or other actions consistent with our published policies.

Users may contact info@hayati.ai regarding relevant moderation decisions or complaints.

6.4 Automated Decisions

Automated systems may support content moderation, security screening, and fraud detection.

Hayati does not intend these systems to make decisions producing legal or similarly significant effects on individuals without the safeguards required by applicable law.

Where applicable law provides rights concerning qualifying automated decisions, users may exercise those rights by contacting us.

7. Information Sharing and Disclosure

Hayati may disclose personal information to the following categories of recipients where necessary and legally permitted.

7.1 AI and Technical Service Providers

Authorized providers may process information to deliver AI inference, hosting, storage, infrastructure, security, and technical support.

7.2 Payment Service Providers

Payment providers may process transaction and payment information to authorize payments, administer subscriptions, investigate disputes, and handle refunds.

7.3 Analytics and Operational Providers

Authorized providers may process permitted technical or usage information to support analytics, performance monitoring, troubleshooting, and business operations.

Where consent is required for particular tracking technologies, such processing will be subject to the applicable consent controls.

7.4 Legal and Regulatory Disclosures

Hayati may disclose information where required by applicable law, valid legal process, or lawful requests from competent authorities.

We may also disclose information where legally permitted and reasonably necessary to protect rights, safety, security, or prevent serious harm.

7.5 Advertising and Measurement Providers

Where applicable, advertising or measurement providers may receive information through permitted tracking technologies, subject to applicable privacy law and consent requirements.

Hayati does not sell private AI conversation content to advertising providers.

7.6 Business Transfers

In connection with a merger, acquisition, restructuring, financing, or lawful transfer of business assets, information may be disclosed or transferred subject to applicable confidentiality and data protection obligations.

8. Data Security

Hayati implements reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Measures may include access restrictions, authentication controls, monitoring, secure communications, and appropriate service-provider safeguards.

No online service or electronic storage system can guarantee absolute security.

Users should protect their account credentials and promptly report suspected unauthorized access to info@hayati.ai.

Where a personal data breach triggers legally required notifications, Hayati will provide the applicable notices within the required timeframe.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small data files stored on a device or browser when visiting a website.

Similar technologies may include pixels, local storage, and other browser-based identifiers.

9.2 Categories of Cookies

Strictly Necessary Cookies

Used for essential functions such as authentication, security, session management, and core website operation.

These cookies may operate without consent where legally permitted.

Functional Cookies

Used to remember supported preferences, such as language or interface settings.

Analytics Cookies

Used to understand website traffic, feature usage, and technical performance.

Advertising and Measurement Cookies

Used, where applicable, to measure campaigns, attribution, or advertising effectiveness.

9.3 Third-Party Technologies

Some cookies or tracking technologies may be provided by authorized third-party service providers.

Their use is subject to applicable contractual arrangements, privacy requirements, and consent obligations.

9.4 Cookie Consent and Preference Management

Where required by applicable law, Hayati provides cookie consent controls allowing users to:

• Accept All — consent to eligible non-essential cookies;

• Reject Non-Essential — decline non-essential cookies;

• Manage Preferences — select available cookie categories individually.

Strictly necessary cookies may remain active where legally permitted.

Cookies and tracking technologies requiring prior consent must not be activated until valid consent has been obtained.

Consent choices must not be obtained through misleading or coercive interface practices.

9.5 Changing or Withdrawing Cookie Consent

Users may change or withdraw their consent through the available Cookie Settings mechanism.

Users may also manage cookies through browser settings, although browser controls may not provide the same functionality as the website's consent mechanism.

Withdrawal applies to future consent-based processing and does not automatically reverse processing lawfully carried out before withdrawal.

9.6 Regional Requirements

Cookie and tracking requirements vary by jurisdiction.

Hayati will apply consent, disclosure, and preference-management requirements where applicable, including relevant European and United Kingdom privacy and electronic communications rules.

10. Data Retention and Deletion

Hayati retains personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by applicable law.

Retention periods may vary according to the type of information, service needs, security requirements, legal obligations, and dispute-resolution needs.

10.1 Account and Conversation Data

Account information and conversation records may be retained while an account remains active to provide the Services and supported conversation context.

10.2 Automatic Account Deletion

When a user deletes their account through the supported deletion process, eligible account information and associated conversation history are automatically deleted from active systems.

Certain information may remain temporarily in backups or with authorized processors according to applicable deletion schedules.

10.3 Legal and Operational Exceptions

Some records may be retained where reasonably necessary or legally required for:

• Tax and accounting obligations;

• Payment and transaction records;

• Fraud prevention and security;

• Legal claims or disputes;

• Compliance with lawful requests;

• Other mandatory recordkeeping obligations.

Such retention will be limited to appropriate purposes and periods.

10.4 Deletion Requests

Users may exercise applicable deletion rights through supported account controls or by contacting info@hayati.ai.

Hayati will respond in accordance with applicable law and explain any legally permitted exceptions where required.

11. Your Privacy Rights and Choices

Depending on applicable law, users may have rights to:

• Request access to personal information;

• Correct inaccurate information;

• Request deletion;

• Request data portability;

• Object to certain processing;

• Restrict certain processing;

• Withdraw consent where processing relies on consent;

• Opt out of certain marketing or advertising activities;

• Exercise rights relating to qualifying automated decisions;

• Lodge a complaint with a competent data protection authority.

Users may also manage available account preferences and cookie consent choices.

To exercise applicable rights, contact:

info@hayati.ai

Hayati may request information reasonably necessary to verify the requester's identity or authority.

We will respond within applicable legal deadlines.

We will not unlawfully discriminate against users for exercising their privacy rights.

12. Regional Privacy Disclosures

12.1 European Economic Area and United Kingdom

Where the EU General Data Protection Regulation, UK GDPR, or related laws apply, Hayati will comply with applicable requirements concerning legal bases, transparency, individual rights, international transfers, and appropriate safeguards.

Users may have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, subject to legal conditions.

Users may also complain to an applicable supervisory authority.

12.2 United States Privacy Laws

Depending on their state of residence and the applicability of relevant legislation, users may have rights concerning access, correction, deletion, portability, and certain opt-outs.

Where legally required, Hayati will provide mechanisms for exercising applicable rights concerning targeted advertising, sale or sharing of personal information, or qualifying profiling activities.

Hayati does not sell private AI conversation content.

12.3 California Privacy Disclosures

Where the California Consumer Privacy Act, as amended, applies, eligible California residents may exercise the rights provided under that law.

Hayati will provide applicable notices and mechanisms concerning relevant categories of personal information, processing purposes, retention, and statutory rights.

Hayati will honor applicable opt-out and sensitive-personal-information requirements where legally required.

12.4 Gulf Cooperation Council and Other Jurisdictions

Hayati serves users in multiple jurisdictions, including countries within the Gulf Cooperation Council.

Where applicable local privacy laws impose additional requirements concerning consent, sensitive data, cross-border transfers, individual rights, or retention, Hayati will comply with those requirements.

Nothing in this Policy limits mandatory privacy rights available under applicable local law.

13. International Data Transfers

Hayati Labs Limited is registered in the State of New York, United States, and maintains an office in California.

Personal information may be processed in the United States or other jurisdictions where authorized service providers operate.

Data protection laws may differ between jurisdictions.

Where applicable law requires safeguards for international transfers, Hayati will implement appropriate measures, which may include contractual protections, applicable standard contractual clauses, or other legally recognized transfer mechanisms.

International transfers will be subject to applicable privacy and data protection requirements.

14. Children's Privacy and Age Restrictions

Hayati is exclusively intended for adults aged 18 or older, or the higher applicable age of majority.

Individuals below the required age must not access, register for, purchase, or use the Services.

Hayati currently uses an age self-declaration popup and does not conduct government-ID verification, biometric verification, or KYC as part of this process.

We do not knowingly provide the Services to minors.

If we become aware that an account belongs to an underage user, we may restrict or terminate access and take appropriate steps concerning associated personal information.

Parents or guardians who believe a minor has used the Services may contact info@hayati.ai.

15. Third-Party Websites and Services

The Services may contain links to third-party websites, payment providers, or external services.

Those third parties may operate under their own privacy policies and terms.

Hayati is not responsible for the independent privacy practices of third parties outside its control.

Users should review the relevant third-party privacy notices before providing information to those services.

16. Changes to This Privacy Policy

Hayati may update this Policy to reflect changes in applicable law, platform functionality, privacy practices, security requirements, or business operations.

The “Last Updated” date will be revised when changes are published.

Where required by applicable law, material changes will be communicated through an appropriate notice or consent mechanism.

Changes will not retroactively eliminate rights that cannot lawfully be waived.

17. Contact Information

For privacy inquiries, data protection requests, account deletion assistance, or questions about this Policy, contact:

Hayati Labs Limited Registered in: New York, United States

Office Address: 2004 Brockwell Ave Monterey Park, CA 91754 United States

Email: info@hayati.ai Phone: +1 347-741-9693 Website: https://hayati.ai

Related Policies

• Terms and Conditions

• Refund and Return Policy

• User Registration Policy

• Content Monitoring & Prohibited Content Policy

• Report Policy

• Complaints, Content Removal & Appeals Policy

• Copyright & DMCA Policy

18+ — Adult-only AI-generated content. Users must be at least 18 years old or the applicable higher age of majority.

© 2026 Hayati Labs Limited. All rights reserved.