Privacy Policy
We collect only what HopeCore needs to work, we don’t sell your data and we don’t show ads. Here are the details, in plain language.
This is a translation provided for convenience. If it differs from the Ukrainian version, the Ukrainian version prevails.
Who is responsible for your data
HopeCore (the mobile app and the website hopecore.link) is operated by its developer, an individual based in Ukraine (“we”, “HopeCore”). We decide why and how your personal data is processed, which makes us the data controller.
For anything about your data, write to privacy@hopecore.link.
What data we process
| Category | What exactly | Why |
|---|---|---|
| Account | Email address, password, username, display name, profile photo, bio, app language, account creation date. | Registration, sign-in, showing your profile to others. |
| Your content | Posts (videos, photos, captions, chosen sound), comments, likes and saves, private messages, reactions, shared content, friend requests, your friends and blocked lists. | Running the app: posting, viewing, search, chats. |
| Safety and moderation | Reports and their outcomes, moderator decisions, earlier versions of edited messages (30 days), action counters used against spam, two-step verification settings. | Protecting people and the service, handling reports, preventing abuse. |
| Technical data | IP address, device type, app and OS version in our providers’ technical logs; an app authenticity signal (Firebase App Check). | Security, fixing failures, protecting against forged clients. |
| On your device | Chosen theme, language, text size, image and video cache, search history. | Convenience. This stays on your phone and never reaches us. |
Camera and photo library. The app accesses the camera and photos only when you choose to add a picture or video. We don’t read your contacts and we don’t collect location.
Ads and tracking. HopeCore contains no advertising or analytics libraries, we don’t track you across apps and we don’t sell data.
How we use data
- to create your account, let you sign in and use the app;
- to show your posts, profile and messages to the people they are meant for;
- to send service emails: email confirmation, password reset, two-step verification codes;
- to handle reports, fight spam, fraud and prohibited content, and to protect users, especially children;
- to comply with the law and respond to lawful requests from authorities.
Legal bases (for users in the EU and UK): performance of a contract (the Terms of Service), our legitimate interest in keeping the service safe, compliance with legal obligations and, where needed, your consent.
Automated and human moderation
To keep HopeCore safe, we review the content you share publicly.
- Automated checks. Posts (caption, images, video frames), comments, sound titles, and profile name, bio and photo are sent to OpenAI’s moderation service. It assesses whether they contain sexual content, violence, self-harm, hate or threats. The data is sent only for this check.
- Known child sexual abuse material (CSAM). Images served through our media domain are checked by a Cloudflare tool that compares them with databases of known material. On a match, access to the file is blocked and we report it to the competent authorities as required by law.
- Private messages are not scanned automatically. A moderator sees a message only when it has been reported: the message itself, a few earlier messages for context and, if it was edited, its earlier versions.
- An automated decision may hide content until a person reviews it. If you think that was a mistake, write to support@hopecore.link and we will review it.
Who receives your data
We don’t sell personal data. To run the service we use providers (processors) that act on our instructions:
| Provider | Purpose |
|---|---|
| Google (Firebase, Google Cloud) | Authentication, database, server functions (Frankfurt, Germany), website hosting, app authenticity checks, delivery of service emails. |
| Cloudflare | Storage of videos, photos and avatars (R2), fast delivery (CDN), CSAM detection, domain DNS and email. |
| Oracle Cloud | Search server (Frankfurt, Germany): an index of public posts and profiles. |
| OpenAI | Automated checks of public content for prohibited material (see above). |
| Apple, Google Play | App distribution and payment processing if you buy paid features. We never see your payment details. |
We may also disclose data when the law requires it or when it is necessary to protect life, people’s safety or our rights, including reporting child sexual abuse material.
International transfers. Providers may process data in the EU, the US and other countries. We choose providers with an adequate level of protection and rely on the standard contractual safeguards they offer.
What other users can see
Your username, display name, profile photo, bio and posts are public. Private messages are visible only to participants of the conversation. Your email is never shown to other users.
How long we keep data
- Account data and content are kept while your account exists.
- When you delete your account, we immediately delete your profile, posts, comments, chats, media files, sounds, username and service records. Data disappears from providers’ backups within a limited time under their policies.
- Earlier versions of edited messages are kept for 30 days so that you and others can report them.
- If content is subject to a report to law enforcement, we may keep it and related data for as long as the law requires.
- Technical logs held by providers are kept under their own policies, usually briefly.
Your rights
You can at any time:
- view and change your profile data in the app (“Profile” → “Edit”);
- delete your account together with all your content: “Settings” → “Delete account” (details);
- request a copy of your data, correction or restriction of processing, object to processing or withdraw consent by writing to privacy@hopecore.link. We reply within 30 days;
- lodge a complaint with a data protection authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU, the supervisory authority of your country.
Children
HopeCore is intended for people aged 13 and over. We do not knowingly collect data from younger children. If you learn that a child under 13 has created an account, write to us and we will delete it.
Data security
We protect data with encryption in transit (HTTPS), database access rules, app authenticity checks and optional two-step verification. No system is 100% secure, so we recommend a unique password and turning on two-step verification. Report vulnerabilities to security@hopecore.link.
Changes to this policy
If we make material changes, we will let you know in the app or by email before they take effect. The date of the latest revision is shown at the top of the page.
Contact
Privacy questions: privacy@hopecore.link. General support: support@hopecore.link.