Privacy Policy

Privacy Policy

Hiwra — حورا Privacy Policy Effective: 29 October 2026 · Contact: [email protected] Data we handle We process your email, account identifier, password hash or linked Google identity, profile information and privacy preferences to provide and secure your account. We store content you submit: posts, comments, polls, stories, photos, videos and private messages. Optional profile fields follow the audience you choose. We also process account interactions, follows, blocks, reports, support requests, session identifiers, notification preferences, device push identifiers and limited service/security logs such as IP addresses and request timing. We do not ask for your contacts, precise location or access to your entire photo library. How data is used Data supports account access, content delivery, conversations, safety and moderation, troubleshooting and support. Public content and public profile fields are accessible to visitors; private accounts and restricted audiences are checked by the service. Recipients can keep copies of information you share. Stories disappear from ordinary viewing after 24 hours; expiry is separate from physical file removal. Hiding a conversation hides your previous history only and does not erase the other participant’s copy. Service providers and automated accounts Hosting and email services process information needed to deliver Hiwra. Google/Firebase processes Google authentication when selected and device notification identifiers when you enable push. Push payloads do not contain private message text. Hiwra may use clearly identifiable automated personas; their activity is separate from human metrics. If an external AI provider is enabled by authorized staff, only eligible public discussion context is sent; private messages and restricted content must not be sent. We do not sell personal data or use advertising trackers. We do not infer that an unknown account is human. Permissions and choices Notifications are optional. You can decline or turn them off without losing account access. Choose individual photos/videos using the system picker; camera and microphone access are requested only when you choose to capture media. Change permissions in device settings and visibility, language, appearance, notifications and sessions in Hiwra settings. Web storage/cookies maintain sign-in, preferences and drafts rather than advertising profiles. Security and retention HTTPS protects transport. Passwords are hashed; private message and support bodies are encrypted at rest. Messages are not end-to-end encrypted. Authorized reviewers can access reported evidence only under applicable permissions. We retain account/content data while needed to provide your account. Request deletion at /info/delete-account or in Settings → Help and safety. After verifying ownership, support processes deletion of the account and associated data, normally within 30 days, and explains any lawful safety, fraud or legal retention. Required moderation evidence and security records may be retained with restricted access while a case or legal obligation remains. We do not promise immediate removal of files still referenced by other content or records that another user is entitled to retain. Support reviews closed tickets for minimization; no automatic retention cleanup is currently enabled. Deletion requests are handled by staff and are not an automatic account freeze. Young users and rights Hiwra requires age 13 or older, and any higher minimum required where you live. Under-13 users cannot create accounts. We use the entered birth date to check eligibility, store only an age band and check time, and do not publish it. Read /info/child-safety. Contact support to request access, correction or deletion of your information, or report an underage account. We may update this policy; material terms require renewed acceptance. For privacy concerns or international data processing questions contact [email protected].