Privacy Policy

1. Two Kinds of Data Controller

Because Hora works with your own or an adult family member’s server, responsibility for data is split:

• The Developer is responsible only for the limited processing described in section 3 (crash diagnostics, app updates and push delivery, and this website).
• The owner of each server you connect to is a separate, independent controller. They decide how your account, videos, messages and other content on their server are stored and used. We have no access to that data and are not responsible for it. You should review the policy of each server owner before you connect, and direct requests about that data to them.

2. What the Developer Does NOT Collect

We do not collect, and the app does not send to us, any of the following: your name, email, avatar, account identifiers, contacts, phone number, precise location, IP-based tracking, or the content of your videos and messages. Hora contains no advertising, no analytics, and no attribution or tracking SDKs. We do not sell or share personal data, and we do not build profiles or make automated decisions with legal or similarly significant effects.

Hora does not use Google Sign-In or any third-party social login. Signing in happens on your group’s server using a one-time email code or a device secret, and those credentials go to that server, not to us.

3. Data the Developer Does Process

3.1 Crash and error diagnostics (Sentry)

In production builds only, the app sends technical error reports to Sentry (Functional Software, Inc.) on Sentry’s EU (Germany) region, so that we can find and fix bugs. Personally identifying information is disabled (sendDefaultPii is off): we do not attach your name, email, account ID or IP address. We use Sentry solely for crash and error diagnostics: application logging to Sentry is disabled, and there is no performance tracing, session replay or behavioural tracking. A report may contain: device model, operating-system version, app version, error messages and stack traces, diagnostic breadcrumbs, and — for certain errors only — a local file path of a recording on your device, technical video metadata (duration, resolution, file size), an HTTP status code, and the address of the server you were connected to. Nothing is sent in development builds.

Legal basis (GDPR): our legitimate interest in keeping the app stable and secure (Art. 6(1)(f)). Retention: per Sentry’s default retention (about 90 days). Because these reports are not linked to your identity, they are effectively anonymous to us.

3.2 App updates and push delivery (Expo / Apple / Google)

The app uses Expo (650 Industries, Inc.) to check for over-the-air updates and to deliver push notifications. If you turn on notifications, the app creates an Expo push token and sends it only to the server you are connected to — not to us. Delivering a notification necessarily passes through Expo’s push service and Apple (APNs) or Google (FCM). You can turn notifications off at any time in your device settings.

3.3 This website and invitation links (horavlog.com)

Invitation links have the form https://horavlog.com/join?server_url=…&token=… so that your phone can open them in the app. The horavlog.com domain is ours, but it is a static site that does not log or store this information; the app reads the server address from the link and connects you to that server directly. These legal pages are also served here and do not log visitors.

4. Data Stored on Your Device

Most of your data lives only on your phone, under your control, and we cannot see it:

• your recorded videos, in the app’s storage;
• group and message metadata, in a local database on the device;
• sign-in tokens and a device secret, in the operating system’s secure storage.

On iOS, the device secret is stored so that it can be included in your iCloud Keychain if you have that enabled, to help you restore access on a new device. The app does not automatically delete videos or messages by a timer; you remove them by deleting them, leaving a group, or uninstalling the app (which removes the local database and secure-storage items).

5. Data You Send to a Group Server (Third Party)

When you connect to a server and use Hora, you send data to that server’s owner, who processes it under their own policy. Depending on the server, this can include: the email address you use to receive a sign-in code, a device secret, your display name, the short videos you publish, message and group metadata (time, hourly slot, membership), your push token, and any report you submit. We do not receive this data and are not responsible for how a server owner handles it. Please read the relevant server owner’s privacy information and contact them for any request about that data.

6. Children

Hora is intended only for people aged 18 or over. It is not directed to children, and we do not knowingly process data of minors. If you believe a minor is using the app, contact us at support@horavlog.com. Where this policy refers to your “family”, it means adult members of your family; the app is for people aged 18 or over.

7. International Transfers

The limited processing we perform involves: Sentry in the EU (Germany); Expo, Apple and Google, which may process data internationally as part of update and notification delivery. Any group server you connect to is located wherever its owner hosts it, which is outside our control. Where the GDPR applies to our own processing and a transfer to a third country takes place, we rely on an appropriate transfer mechanism (such as an adequacy decision or Standard Contractual Clauses).

8. Your Rights

Depending on where you live, you may have rights under the GDPR, the Russian Federal Law No. 152-FZ, the CCPA and similar laws — for example to access, correct, delete or restrict your data, to object to processing, or to data portability.

Please note that we hold almost no personal data about you: only the anonymous crash diagnostics in section 3, which are not linked to your identity. For anything concerning your account, videos or messages, the relevant controller is the owner of the server where that data is stored — please contact them. For requests about our own limited processing, write to support@horavlog.com. If the GDPR applies to you, you may also lodge a complaint with your local data-protection authority.

9. Deleting Your Account and Data

• Your accounts and content on connected servers: use Account deletion in the app’s general settings. Every compatible server permanently deletes your account, your videos and messages, your memberships and sessions. Groups you created remain when other members are present and ownership is transferred to another member; a group with no other members is deleted.
• Data on your device: after every server confirms deletion, Hora removes their credentials, connections and cached chat records, resets your profile settings and opens onboarding again. Recorded videos stored on your device are not deleted. Uninstalling removes the app’s remaining local database and secure credentials, but does not by itself delete an account from a server.
• Crash diagnostics: these are anonymous and not linked to you; if you still wish to request deletion, write to support@horavlog.com.

See Delete Your Hora Account for step-by-step instructions and how to request deletion directly from a server operator.

10. Changes and Contact

We may update this policy; a material change will be published here before it takes effect. Questions and requests: support@horavlog.com.