Privacy policy

Last updated 12 October 2026

Aino is a travel app launching in winter 2027. This site, joinaino.com, lets you join the waitlist. This page explains what we collect, why, who sees it, and what you can do about it. Aino is made by Daybound Oy (business ID 3658438-6), Aaltotie 2 C, 33180 Tampere, Finland. Daybound Oy is the controller of your data. You can reach us at hello@withaino.com.

What we collect

When you join the waitlist, we store:

• Your email address.
• The time you signed up.
• How you found us. This is the UTM parameters in the link you used (utm_source, utm_medium, utm_campaign, utm_content and utm_term), the website that sent you, and the page you landed on.
• Your browser language and time zone.
• Your device type: mobile, tablet or desktop.
• The cookie choices you made.

We also count visits with cookieless statistics. If you allow them in the cookie banner, analytics and marketing tools collect more. The next section explains both.

Cookies and tracking

Cloudflare Web Analytics (Cloudflare, Inc.) is always on. It uses no cookies and no fingerprinting, and it does not build a profile of you. It counts page views, referrers, country and device.

Everything else runs only if you allow it. The cookie banner has two categories, Analytics and Marketing, and you choose each one separately. Nothing in these categories loads before you make a choice. Rejecting all is as easy as accepting all. You can change your choice at any time from Cookie settings in the site footer. We store your choice in your browser's local storage for 12 months.

Analytics:

• Google Analytics 4 (Google Ireland Ltd) records page views, scrolling, clicks, your approximate location and your device. Google keeps this data for 14 months.
• Microsoft Clarity (Microsoft Corporation) makes heatmaps and session recordings of how the page is used. Text you type into form fields is masked and not recorded.

Marketing:

• Meta Pixel (Meta Platforms Ireland Ltd) measures which Facebook and Instagram ads lead to signups and builds ad audiences. If you join the waitlist with Marketing allowed, your email address is hashed in your browser and sent to Meta to match your signup to an ad.
• TikTok Pixel (TikTok Technology Ltd, Ireland) does the same for TikTok ads, including the same hashed email matching when you sign up.

These are the cookies they set:

With the matching consent, we measure these events: page views, scroll depth, clicks on the main buttons, which FAQ questions you open, reaching the FAQ and the footer, and a completed waitlist signup.

Why we collect it

We use your email address to tell you when Aino is ready and to offer you early access to the beta. Our legal basis is your consent, under Article 6(1)(a) of the GDPR. You give it when you submit the form.

We use the signup details about how you found us to learn which channels bring people to the waitlist. Our legal basis is our legitimate interest, under Article 6(1)(f) of the GDPR. The same applies to the cookieless statistics from Cloudflare.

For analytics and marketing cookies, our legal basis is your consent, under Article 6(1)(a) of the GDPR and section 205 of the Finnish Electronic Communications Services Act.

We do not sell your personal data. We do not combine it with other sources to build profiles beyond the ad matching described above.

Who sees it

The waitlist form is sent through Formspree (Formspree, Inc., USA), which acts as our processor.

Cloudflare sees the cookieless statistics. If you allow them, Google and Microsoft see analytics data, and Meta and TikTok see marketing data, as described above.

The site runs on Cloudflare. Like any host, Cloudflare keeps standard server logs for security, which can include your IP address, browser type and the time of your visit. We do not use those logs to identify you.

We may also share data if the law requires us to.

Transfers outside the EU

Formspree, Google, Microsoft, Meta, TikTok and Cloudflare may process data in the United States or elsewhere outside the EEA. Where a provider is certified under the EU-US Data Privacy Framework, we rely on that. Otherwise we rely on the European Commission's standard contractual clauses.

How long we keep it

We keep your email address and the details about how you found us until you unsubscribe. If you never do, we delete them at the latest 12 months after Aino launches publicly.

Google Analytics keeps its data for 14 months. Cookies expire as listed in the table above. Your cookie choice is kept in your browser for 12 months.

Your rights

Under the GDPR you can:

• Ask for a copy of the data we hold about you.
• Ask us to correct it if it is wrong.
• Ask us to delete it.
• Ask us to restrict how we use it.
• Ask for it in a format you can take elsewhere.
• Object to how we use it, including the processing we base on our legitimate interest.
• Withdraw your consent at any time. This does not affect anything we did before you withdrew it.

You can withdraw cookie consent at any time in Cookie settings in the site footer. For the ad platforms, you can also use Meta's and TikTok's own ad settings.

To use any of these rights, email hello@withaino.com. We may ask you to confirm the address so we know the request comes from you.

If you think we have handled your data badly, you can complain to the Finnish Data Protection Ombudsman at tietosuoja.fi. You can also complain to the supervisory authority in the country where you live.

Children

The waitlist is for people aged 16 and over. If you are under 16, please do not sign up. If we learn that someone under 16 has joined, we will delete their data.

Changes

If we change this policy, we will post the new version on this page and update the date at the top. If a change affects how we use your data in a meaningful way, we will email you about it before it takes effect.

Contact

Questions about this policy or your data: hello@withaino.com.