Privacy Policy

1. Information we handle

Information you provide. When you create or use an account, we may handle your email address, sign-in method, account identifier, display name, profile image, preferences, content you submit, messages, contacts or connections you choose to make, and support correspondence. Some services offer guest access or do not require an account. Authentication providers may supply the account details you allow them to share; they manage their own passwords.

Activity and transactions. Depending on the feature, we may handle usage history, interactions, balances, points, rewards, invitations, shared content, and transaction or purchase status. A store or payment provider handles payment details when a paid feature is available; we may receive a receipt or transaction identifier needed to provide the feature and address support requests.

Device and network information. Our services and providers may process IP address, browser type, device model, operating system, service version, language, country or selected city, installation or account identifiers, advertising identifiers, cookie identifiers, diagnostic data, crash information, session duration, and interactions such as page views or ad impressions. Some usage reports use a one-way hash of a generated installation identifier rather than the original identifier.

Location and permissions. A feature that needs your location may request approximate or precise device location. Depending on the feature, coordinates can be used on your device or sent to an external data provider to return a requested result. That provider may also receive your IP address. We do not need precise location for every service. You can change location and notification permissions in your device settings.

Information from others. We may receive limited information from sign-in providers, stores, advertising and analytics providers, or other users when needed to operate a feature, confirm a transaction, respond to a report, or prevent abuse.

2. How we use information

• Provide requested features, maintain accounts, restore access, save preferences, and deliver content or notifications.
• Support interactions between users and maintain shared records where a feature depends on them.
• Measure use and performance, fix errors, improve reliability, and understand whether our services work as intended.
• Show, measure, and secure advertising where advertising is part of a service.
• Protect accounts, prevent fraud and misuse, answer support and privacy requests, and meet legal obligations.

Where applicable law requires a legal basis, we rely on providing a requested service, our legitimate interests in operating and protecting it, your consent for processing that requires consent, or compliance with a legal obligation. You may withdraw consent through the relevant controls without affecting earlier lawful processing.

3. Tracking, cookies, and advertising

Our website uses essential session technology for sign-in and security. Our hosting and security providers may also process standard server logs, including IP address, browser information, and pages requested, to operate and protect the website. The public website does not load optional analytics. Your browser can clear or block cookies, although blocking essential cookies may affect sign-in.

Some mobile services send HostlyFlow usage statistics such as session duration, service version, selected language or city, and activity or advertising events. Where advertising is available, Google AdMob and its partners may process advertising identifiers, IP address, device information, and ad interactions to deliver and measure ads, prevent fraud, and personalize ads where permitted. Device advertising controls and any consent choices presented to you affect that processing. Declining optional tracking does not prevent essential service or security processing.

4. When information is shared

We share information with providers that help us operate a feature: hosting and security providers; Google Firebase for authentication, data storage, and configuration; Google AdMob for advertising where enabled; Ably for real-time communication where used; OneSignal for notifications where configured; and AlAdhan for requested location-based results where that feature is used. These providers may process information under their own policies and may operate in other countries. See Google's privacy policy, Firebase privacy information, Ably's privacy notice, and OneSignal's privacy policy.

When a feature lets you publish a profile, share content, communicate, or appear in a public ranking, the information you choose to make visible can be seen by other users. Recipients may keep their own copies. We may also disclose information when required by law or to protect the security and rights of users and HostlyFlow. We do not publish account email addresses as part of public profiles.

5. Retention and deletion

We keep account and feature data while needed to provide the service, resolve support or security issues, or meet legal requirements. Local preferences generally remain on your device until you clear them, subject to device backup settings. We keep logs and analytics for a limited period appropriate to their purpose. Providers may apply their own retention periods.

You can request account deletion through the account settings in the service you use, where that control is available. You can also email support@hostlyflow.com for help with account deletion or another privacy request. We may verify ownership before deleting an account and its associated personal data, and aim to complete verified requests within 30 days. Shared records may be removed or anonymized so other users' records remain consistent. We may retain information where needed for security, fraud prevention, legal obligations, or unresolved disputes and will explain the reason when it applies.

In the current account-deletion review workflow, completed or rejected request records and account-block markers are retained for 30 days after completion; unverified requests may be retained for up to 90 days. Backups, device copies, recipients' copies, and independently controlled provider records may persist until their applicable retention periods end.

6. Your choices and rights

Depending on where you live, you may request access, correction, portability, or deletion of personal data, or object to or restrict certain processing. Contact support@hostlyflow.com and describe your request. We may need to verify your identity before acting. You can also manage device permissions, notifications, and advertising preferences using the controls described above. If you believe a child has provided information that should be removed, contact us.

7. Security and international processing

We use access controls, encrypted connections, and other reasonable measures to protect data, but no system is completely secure. Providers may process information outside your country; where required, we use applicable safeguards for international transfers. Please do not send passwords, sign-in tokens, or full payment details to support.

8. Changes and contact

We may update this policy as services or data practices change. The effective date at the top shows when this version took effect. If a change requires additional notice or consent, we will provide it as required.

HostlyFlow
Email: support@hostlyflow.com
Website: hostlyflow.com