Last updated October 1, 2026
This Privacy Policy describes how Virtual Horizons, the company that owns and operates AlohaConnect ("AlohaConnect," "we," "us," or "our"), collects, uses, discloses, retains and protects personal information when you use our mobile applications, websites, AI features and related services (the "Services"), and the choices and rights you have. Virtual Horizons is the controller of your personal information. This Policy is part of our Terms of Service. Please read it together with our Cookie Policy.
This Policy applies to Guests, Hosts (venue and rental owners, vendors, contractors, activity organizers and restaurants), event attendees who RSVP or upload media, co-planners, and anyone who visits our Services. It does not cover the practices of Hosts or third parties, who may have their own privacy policies. When a Host receives your information through a Booking, the Host is responsible for its own use of that information.
Account and profile: name, email address, phone number, password, profile photo, hometown, work, languages, interests, "about me" text and role (Guest, Host, vendor).
Bookings and events: dates, guest counts, event type, messages, special requests, dietary notes, meal choices, RSVP answers, seating assignments, guest lists and invitee names and emails you choose to add.
Listings and applications: property and service descriptions, addresses, photos and videos, pricing, availability, house rules, cancellation terms, business name, years in business, service areas, website and social links, Hawaii GE tax license number, contractor license, insurance details, references and contact details.
Identity and payout verification: when you connect payouts, you provide identity, tax and bank information directly to Stripe. We receive the status of your Stripe account and limited details needed to route payouts and meet tax-reporting obligations.
Payment information: when you pay, card details are collected by Stripe. We receive a payment token, card brand, last four digits, billing country, amount and transaction status. We never store full card numbers.
Communications: messages with other Members, support tickets, survey responses, reviews and ratings, and conversations with Kai.
User content: photos, videos, captions and other media you upload, including to event galleries.
Device and usage data: device model, operating system, app version, unique device and advertising identifiers (where permitted), browser type, language, IP address, time zone, crash reports, pages and screens viewed, searches, filters used, listings viewed, recently viewed items, clicks and the dates and times of access.
Location: approximate location from your IP address. With your permission, precise location from your device to show nearby listings, map views and directions. You can turn this off at any time in your device settings.
Push notification tokens to send booking, message and event alerts if you enable notifications.
Cookies and similar technologies, as described in our Cookie Policy.
We only access the following with your permission, and only for the stated feature: camera (to scan tickets and capture photos or videos), photo library (to upload media), contacts (if you choose to invite guests from your contacts; we only use the contacts you select), location (nearby results and directions), Face ID / Touch ID or fingerprint (handled entirely by your device; we never receive biometric data), and notifications. You can grant or revoke these permissions in your device settings.
Sign-in providers: if you sign in with Google, Apple or another provider, we receive your name, email and profile photo as permitted by your settings with that provider.
Payment partners: Stripe sends us payment and payout status, dispute and fraud signals.
App stores: Apple and Google tell us whether a subscription purchase is active.
Other Members: Hosts may provide information about Guests (for example, in reviews or damage claims), and event hosts may provide names and emails of people they invite.
Public and commercial sources: we may use public records, mapping and geocoding services and fraud-prevention services to verify Listings and prevent abuse.
To provide the Services: create and manage accounts; display Listings; process Bookings, tickets, reservations, subscriptions and payments; route payouts; issue tickets and wallet passes; enable messaging, RSVPs, event planning and galleries; and provide customer support.
To operate Kai: interpret your requests, recommend options, estimate costs and draft actions you ask for.
To keep the Services safe and trustworthy: verify identities and Listings, review vendor applications, detect and prevent fraud, spam, abuse and security incidents, enforce our Terms and policies, and resolve disputes.
To improve and personalize: analyze usage, troubleshoot, research and develop new features, personalize search results and recommendations, and remember your preferences.
To communicate: send booking confirmations, receipts, reminders, security alerts, policy updates and, where permitted, marketing and promotional messages you can opt out of.
To comply with law: meet tax, accounting, anti-money-laundering and sanctions obligations, respond to lawful requests, and establish, exercise or defend legal claims.
If you are in the European Economic Area, United Kingdom or Switzerland, we process personal information on these legal bases: performance of a contract (providing the Services and processing Bookings); legitimate interests (safety, fraud prevention, improvement, analytics and direct marketing to existing customers, balanced against your rights); consent (precise location, contacts, push notifications, certain cookies and marketing where required), which you may withdraw at any time; and compliance with legal obligations.
With other Members: to complete a Booking, we share necessary information between Guests and Hosts, such as your name, profile photo, event details, guest count, dates and messages. Reviews, public profile information and Listings are visible to other Members and may be visible publicly. Event hosts and co-planners can see RSVP responses for their events.
With service providers: we use vendors who process information on our behalf under contractual confidentiality and data-protection obligations, including cloud hosting and database providers, payment processing (Stripe), mapping and geocoding, push-notification delivery, email delivery, analytics and crash reporting, wallet-pass generation, AI model providers that process Kai conversations, and customer-support tools.
With payment and app-store partners: Stripe, Apple and Google receive information needed to process transactions and subscriptions, prevent fraud and comply with their legal obligations.
For legal and safety reasons: with law enforcement, government agencies (including the Hawaii Department of Taxation and county agencies), courts or others when we believe in good faith it is required by law, necessary to respond to legal process, to protect the safety of any person, to address fraud or security issues, or to enforce our Terms.
Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our business, subject to this Policy.
With your consent or at your direction, such as when you share a Listing link or connect a third-party service.
Aggregated or de-identified information that cannot reasonably identify you may be shared for any lawful purpose.
We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the past 12 months.
When you use Kai, your messages and relevant account and Listing information are sent to third-party AI model providers to generate responses. We configure these services so that, where available, your conversations are not used to train their general-purpose models. Conversation history is stored so you can continue planning and so we can improve quality and safety.
Do not enter sensitive information such as health details, government ID numbers, full card or bank numbers, or passwords into Kai. Kai's responses are generated automatically and may be inaccurate; no legal or similarly significant decision is made about you solely by automated means.
We keep personal information only as long as needed for the purposes in this Policy. Generally: account information is kept while your account is active and for a reasonable period after closure; Booking, payment and tax records for at least seven years to meet legal and accounting requirements; messages and reviews for as long as needed to provide the Services and resolve disputes; Kai conversations until you delete them or close your account; and logs and analytics for up to 24 months. We may retain information longer when required by law or to resolve disputes, prevent fraud or enforce our agreements. When information is no longer needed, we delete or de-identify it.
Profile and settings: update most account information in the app under Profile.
Marketing: unsubscribe using the link in any marketing email or by contacting Support. You will still receive transactional messages.
Push notifications, location, camera, photos and contacts: manage these in your device settings.
Cookies: see our Cookie Policy for choices about cookies and similar technologies.
Account deletion: request deletion of your account at any time through Help & support in the app or our Support page. Some information may be retained as described in Data Retention.
Depending on where you live, you may have the right to: know and access the personal information we hold about you; correct inaccurate information; delete your information; receive a portable copy; opt out of targeted advertising, sale or profiling with legal or similarly significant effects; restrict or object to certain processing; withdraw consent; and not be discriminated against for exercising your rights.
To exercise any right, contact us through our Support page or Help & support in the app. We will verify your request by matching information with your account and may ask for more details. You may use an authorized agent, who must provide proof of authorization. We will respond within the time required by law (generally 30 to 45 days). If we deny your request, you may appeal by replying to our decision; if your appeal is denied, you may contact your state attorney general or data-protection authority.
We honor Global Privacy Control signals as a request to opt out of sale or sharing, where required by law.
This section supplements this Policy for California residents under the California Consumer Privacy Act, as amended (CCPA).
Categories collected in the past 12 months: identifiers (name, email, phone, IP address, device IDs); customer records (payment and billing details); commercial information (Bookings, purchases, subscriptions); internet and network activity (usage, searches, interactions); geolocation (approximate and, with permission, precise); audio, electronic and visual information (photos, videos, messages); professional information (for Hosts and vendors: business details and licenses); and inferences (preferences used to personalize results).
Sensitive personal information: we collect precise geolocation (with permission), account login credentials, and, for Hosts through Stripe, government ID and financial account information. We use sensitive information only for purposes permitted by the CCPA, such as providing the Services and preventing fraud, and not to infer characteristics about you.
Sources, purposes and recipients of each category are described in the sections above. We disclose these categories to service providers, payment partners, other Members as needed for Bookings, and government authorities as required by law. We do not sell or share personal information and do not knowingly sell or share the information of consumers under 16.
Shine the Light: California residents may request information about disclosures to third parties for their direct marketing purposes; we do not make such disclosures.
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Nebraska, Rhode Island and other states with comprehensive privacy laws have rights similar to those described above. Nevada residents may request that we not sell covered information; we do not sell such information.
We are based in the United States, and our service providers may process information in the U.S. and other countries whose data-protection laws may differ from yours. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum to protect information transferred from the EEA, UK or Switzerland.
We use reasonable administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, access controls, role-based permissions, secure payment processing through PCI-DSS-compliant Stripe, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential. If we learn of a security breach affecting your information, we will notify you as required by law, including Hawaii Revised Statutes Chapter 487N.
The Services are not directed to children under 13 (or under 16 in the EEA and UK), and you must be 18 or older to create an account, book, list or pay. We do not knowingly collect personal information from children. Event hosts who add minors to guest lists are responsible for obtaining parental consent. If you believe a child has provided us personal information, contact us and we will delete it.
The Services may link to third-party websites, Host sites, social networks and map applications. Their privacy practices are governed by their own policies, and we are not responsible for them. When you sign in with Apple, Google or another provider, or make an in-app purchase, those providers' privacy policies also apply.
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, if changes are material, notify you by email or in the app before they take effect. Your continued use of the Services after the effective date means you acknowledge the updated Policy.
For questions, requests or complaints about this Policy or our privacy practices, contact Virtual Horizons, operator of AlohaConnect, through Help & support in the app or our Support page. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection authority.
© 2026 Virtual Horizons. AlohaConnect is operated by Virtual Horizons, Honolulu, Hawaii.