Hivroj Privacy PolicyLast updated: 9 November 2026 1. Information we collect • Account: name, username, email address, date of birth (only for the 18+ age limit) and password (only a hashed form is stored). With Google or Apple sign-in, the name, email address, profile photo (only as a suggested profile photo) and account ID that service shares; your Google / Apple password never reaches us. • Profile and content: profile photo, bio, posts, photos, comments, likes, follows. The photos and text of your posts (caption, location tag, hashtags) are stored on Cloudflare under an unguessable name and shown from there to people who see the post; when you edit a post its previous text is deleted shortly after, and when you delete a post it is deleted together with its photos and text. • Messages: direct messages and the photos and files sent in messages are end-to-end encrypted. Our servers relay and store messages only in encrypted form and know who wrote to whom and when. Emoji reactions to messages and read, delivered and viewed receipts are not encrypted. If you report a message, that message and up to 5 messages before it (with the photo, if it is one) are sent from your device in readable form for review; once the report is resolved they are deleted after 180 days, except for child-safety reports, which are not deleted after a set time and are kept until the reporting or reported account is deleted. How password recovery works and its limits: section 8. • Location (if you allow it): approximate location for your city and Nearby. Your precise location is not stored. • Technical: notification token, app crash reports, security issues detected on your device (e.g. a modified app, root / jailbreak, a debugger) and, for security, the IP address used at sign-up. • Account security: a hash of a random identifier unique to your app installation (not the identifier itself) and your connection IP address. Used only to detect fake accounts and banned accounts coming back; kept for 90 days and never used for ads. • Support: requests you send from Settings › Help & support, screenshots you attach (visible only to the support team), your app version and device type. • Sign-up statistics: which app screens were reached before creating an account (launch, sign-in, sign-up), recorded only with the installation identifier hash; it does not identify you and is used only as aggregate counts. 2. How we use data To provide the service, protect your account and the community (spam, fake accounts, abuse), improve the app and meet legal obligations. Your data is not sold. 3. Automated content moderation • Shared photos and profile photos are scanned for nudity by an AI model running on our own servers. Photos are not sent to another company for this. • If enabled, photos are sent to Microsoft PhotoDNA to match known child sexual abuse imagery. • Post, comment and profile text is compared against a list of prohibited terms. • As a result, content may be hidden or removed; your account may receive a warning or, for a period, be restricted from posting, commenting, messaging or appearing in Discover. Human moderators review suspicious content. Every decision about you is notified with its reason and you can appeal it (Settings › Account status). • Encrypted messages are not scanned. 4. Service providers Supabase (database, authentication), Cloudflare (storing photos and post text; relaying encrypted messages and storing encrypted message backups), Google Firebase (notifications, crash reports), Google AdMob (ads), Talsec (freeRASP, app security: results of device and app security checks — e.g. root / jailbreak, a modified app, a debugger —, device model, operating system and app version, and a device identifier not linked to your account; used to detect abuse and for the app's security report), a map and address service (based on OpenStreetMap) and, if enabled, Microsoft PhotoDNA. These providers process data only to provide the service. 5. Ads and sponsored content • The app shows Google AdMob ads. Your advertising identifier is used only to the extent you allow; you can turn it off in your device settings. • Ads from brands Hivroj partners with are always labelled "Ad · Brand name". Our server decides which ad to show based on profile information such as your country, city, the languages you speak, your app language, your age range and gender. • Brands receive only aggregate numbers (impressions, clicks, breakdowns by country and language; groups smaller than 50 are merged). Your personal data is not shared with brands. • To measure ads and avoid showing you the same ad too often, which ads you saw and tapped is kept for 35 days. 6. Retention • If you delete your account it is hidden immediately; unless you sign in again within 90 days, it is permanently deleted together with all your data. • Disappearing messages and view-once photos are deleted when they expire. • Photos and files sent in messages are deleted from our servers 90 days after upload; the message text is not deleted. • Account security records (installation identifier hash, IP) are deleted after 90 days, ad impression records after 35 days. • Support conversations are deleted 2 years, screenshots 180 days after the request is closed. Sign-up statistics are deleted after 180 days. • Records subject to mandatory legal reporting (e.g. detected child sexual abuse material) are kept for as long as the law requires. 7. Your rights • A copy of your data: Settings › Download my data. • Correction: you can edit your profile at any time. • Deletion: Settings › Delete account, or hivroj.com/delete-account. • Appealing a moderation decision: Settings › Account status. • Questions and requests: Settings › Help & support. We answer legal requests within 30 days. 8. Security Data travels over encrypted connections and access is restricted. • Your messages are end-to-end encrypted; if you forget your password, you can recover them with your email. • For this recovery, your account's message key is stored on our servers, encrypted with a separate secret key (the account vault). Anyone with access to both the database and that secret key — including Hivroj — can therefore open your messages and message backups. Someone who obtains only a copy of the database or only of the backup storage cannot; someone who can change the live database can, by taking over your account. • Someone who takes over your Hivroj password, your email account or the Google / Apple account you sign in with can also open your messages on a new device. Keep them safe. • The message key belongs to your account and is not renewed automatically over time: anyone who obtains it can also open your earlier messages. 9. Google sign-in and Google user data • With Google sign-in we receive only your name, email address, profile photo and Google account ID from Google. They are used only to create your account, sign you in and set up your profile. • Hivroj's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This information is not used for advertising, is not sold, and is not transferred to third parties except as needed to provide the service. • You can remove Hivroj's access at any time in your Google Account settings (Security › Third-party apps). 10. Legal basis We process your data to provide the service (performance of a contract); to protect accounts and the community and prevent spam and abuse (legitimate interests); for optional features such as location and personalised ads (your consent, which you can withdraw at any time); and to meet our legal obligations (e.g. reporting child sexual abuse material). 11. International transfers Your data is stored on servers in the European Union (Ireland). Our service providers (section 4) may also process data in other countries; these transfers are made with legal safeguards such as standard contractual clauses. 12. Age limit Hivroj is for people aged 18 and over. 13. Changes If this policy changes, we will announce it in the app and on hivroj.com. For significant changes we will let you know before they take effect. 14. Contact Privacy questions and data requests: privacy@hivroj.com Anything else: support@hivroj.com, or in the app under Settings › Help & support.