Loading…
Legal
Effective 22 August 2026 Published 18 August 2026 Last updated 22 August 2026
Updated 22 August 2026. The effective date for the advertising change described below was brought forward from 1 September 2026 to 22 August 2026. That is shorter than the 14 days of notice described under Changes to this policy. Nothing else in this policy changed. The opt-out below is unchanged and open to you, before or after that date.
What is changing on 22 August 2026
From 22 August 2026 we start using your data to target haio ads, not only to measure them. Until now this page said we did not build advertising audiences or remarketing lists. We now do. That means we can show haio ads to you again after you leave the site, and ask Google to show haio ads to other people it judges to be similar to you.
What we give Google for this is a hashed copy of your email address, never the address itself, plus the record of which haio.sg pages your browser opened. The full explanation is in Advertising below.
If you would rather be left out, email [email protected] and we will exclude your account, before or after 22 August 2026. There is a second control that covers your browser too, described under How to opt out.
haio (“haio”, “we”, “us”) is a Singapore property platform that helps you search properties, view transaction data, get valuations and affordability estimates, read market insights, and request home services. This Privacy Policy explains what we collect, how we use it, and the choices you have. It covers the haio website at haio.sg and the haio mobile apps for Android and iOS; see The haio mobile app below. By using haio you agree to this policy.
From 22 August 2026 we use Google Ads for two different things. They are not the same thing, and the second one is new.
Measuring our ads. When you start a paid haio+ subscription, we tell Google Ads that a subscription happened, and we send a hashed copy of your email address with it, along with the amount, the currency and our order reference. Hashing turns your address into a fixed string of letters and numbers using SHA-256, which cannot be turned back into your address, and we do the hashing on our own servers before anything leaves haio, so what Google receives is the hash and never the address. Google matches that hash against Google accounts so we can see which of our ads led to subscriptions.
Targeting our ads. This is the new part. We also use that hashed email address, together with the record of which haio.sg pages your browser opened that Google’s advertising tag collects, to build advertising audiences and remarketing lists in Google Ads. In plain terms: we can show haio ads to you again after you have left the site, and we can ask Google to show haio ads to other people whose behaviour Google judges to be similar to yours.
The difference matters, so here it is in one line. Measuring is us counting something that already happened, after it happened. Targeting is us reaching you, and people like you, afterwards. Before 22 August 2026 this page told you we did the first and not the second. We now do both, and we are saying so here rather than adding it quietly to a list.
What we do not send. We do not sell your personal data. We do not send Google your name, your phone number, your home address, the properties you saved, or what you typed into search. Google’s advertising tag does record which pages of haio.sg your browser opened, and some of those page addresses name a specific property or project, so a page you opened can be part of what an audience is built from even though we never hand over your saved list or your searches.
How to opt out. Email [email protected] and we will add your account to our exclusion list. From then on we do not send Google Ads a hashed identifier for you, for measurement or for audiences, and we leave you out of any customer list we upload to Google. You do not need to give a reason, we do not ask you to justify it, and it changes nothing else about your account or your subscription. Being honest about the limit: we can stop sending, and we can remove you from a list we uploaded, but we cannot reach inside Google’s own systems and delete what is already there, so use the Google control below if that is what you want.
That exclusion covers what haio sends. It cannot reach the record Google’s tag keeps in your own browser, because we have no way to tell which browser is yours. To switch that half off, turn off ad personalisation in your Google Ad Settings, which applies across Google whether or not you have a haio account, or block or clear cookies for haio.sg in your browser. Google enforces both at its end, which is what makes them work even for people we could not identify to exclude.
If you sign in with Google, the Google account information we receive (your name and email address) is used to authenticate you, to populate your haio profile, and, if you start a paid subscription, for the advertising purposes described under Advertising.
We do not sell your Google user data. From 22 August 2026 we do use it for advertising, in the hashed form described above: to measure which of our ads led to subscriptions, and to build advertising audiences and remarketing lists so that haio ads can be shown to you and to people Google judges to be similar to you. Your name is not sent, and your address is hashed before it leaves haio.
This page has now said three different things, so the history is worth stating plainly rather than quietly overwriting. Before 12 August 2026 it said we did not use Google account information for advertising at all. From then until 22 August 2026 it said we used it to measure our ads but not to target them. From 22 August 2026 we do both. Each time the earlier promise stopped being true we replaced the sentence rather than leave a promise here that our own behaviour would break.
haio’s use of information received from Google APIs adheres to the Google API Services User Data Policy. That policy’s Limited Use requirements apply to Google’s sensitive and restricted permissions, such as Gmail and Google Drive. haio asks Google for two basic sign-in permissions only, your email address and your basic profile, and does not request access to Gmail, Drive, your contacts, your calendar, or any other Google service. You can revoke haio’s access at any time from your Google Account permissions.
Account data, saved items, and service-request details (including uploaded media) are stored using Supabase, our database and authentication provider. We rely on Supabase’s infrastructure and security controls to keep your data safe.
We use cookies and similar technologies to keep you signed in and to maintain your session. These are necessary for authentication and basic functionality.
Google’s advertising tag also sets cookies on haio.sg. They let a subscription be matched back to the ad that led to it, and from 22 August 2026 they are also what places your browser into the advertising audiences and remarketing lists described under Advertising. Until 22 August 2026 this section said we did not use cookies to build advertising profiles. That is no longer accurate, so it has been replaced with this.
You can refuse this half without asking us. Turning off ad personalisation in your Google Ad Settings, or blocking or clearing cookies for haio.sg, keeps your browsing out of it. Neither one signs you out or breaks the site: the cookies that keep you signed in are separate, and are not used for advertising.
The haio app for Android and iOS displays the haio website inside the app. It is the same service, the same account, and the same data described above. Signing in, saving a property or submitting a service request in the app is handled exactly as it is on the web. The app does not maintain a separate profile of you.
What the app collects beyond the website: nothing. It does not collect a device or advertising identifier, does not track you across other apps or websites, does not use your precise or approximate location, does not access your contacts, and contains no advertising SDK. Third-party advertising and measurement pixels used on the website are disabled inside the app. That includes the Google advertising tag, so the advertising audiences and remarketing lists described under Advertising are built from browsing on the website, never from your use of the app.
Push notifications. The app does not send push notifications and does not register for them, so no push token is created or stored. If we add them, we will ask for your permission first and update this policy before they go live.
Device features the app uses. Vibration for touch feedback, your device’s share sheet when you tap Share, and network status so the app can tell you when you are offline. Photos or videos you attach to a service request are chosen by you and uploaded as described above. None of these send us anything you have not asked us to send.
Backups and deletion. The Android app opts out of Android’s automatic app-data backup, so your haio session is not copied to your Google Drive. Uninstalling the app removes its local data from your device; to delete your haio account and the data held in it, email us as described under Your rights.
We keep your information for as long as your account is active or as needed to provide the service. Service-request details are retained for as long as needed to fulfil the request and for our records. You may ask us to delete your data as described below; we will do so unless we are required to retain it for legal or operational reasons.
haio is a Singapore service and handles personal data under Singapore’s Personal Data Protection Act 2012. That Act works on stated purposes: we may use your data for the purposes set out in this policy and told to you before they start, and not for others. Advertising, both measuring our ads and targeting them, is one of those stated purposes from 22 August 2026, which is why it is written out under Advertising rather than folded into “improving the service”. You can withdraw consent to the advertising purpose at any time by the route described there, and we will act on it.
You can request access to, correction of, or deletion of your personal data by emailing us at [email protected]. You can also revoke Google sign-in access from your Google Account at any time.
We may update this Privacy Policy from time to time. When we do, we will revise the effective date above.
If an update changes how we share your information, we will publish the new version here at least 14 days before it takes effect, and we will email account holders at the address on their account. That gives you time to read it, and to opt out, before it applies to you. Continued use of haio after an update takes effect means you accept the revised policy.
Questions about this policy or your data? Email [email protected], which routes to the haio team.