HobbifyPrivacy Policy
This policy explains how your data is processed when you use the Hobbify mobile app (“Hobbify”). The publisher and data controller of Hobbify is Mustafa Emir Cil. Contact: [email protected].
What data do we collect?
- Account information: email address, username, bio, city and the hobbies you pick. If you sign in with Google or Apple, the email and identifier those providers give us are used (a random address if you choose Apple “Hide My Email”). Your password exists only for email sign-up and is stored hashed.
- Location: approximate only (a ~1 km area). Your exact location is not stored and never shown to others; other users only see an approximate distance. You can leave the People list by turning off “Discoverable”.
- Content: plans you create, messages, posts, comments, letters and friendships.
- Photo: your profile photo, if you upload one. Camera/photo access is used only when you choose.
- Device token for notifications: a code for your device is stored so we can send push notifications.
- Safety records: blocks, reports and moderation actions.
Why do we use it?
To run your account, show plans and people that match your hobbies, provide messaging and notifications, prevent abuse and keep the app safe. We do not sell or share your data for advertising and we do not track you for ads.
Who is it shared with?
Your data is processed only by the service providers we need to run the app:
- Supabase (database, authentication, file storage): hosted in the European Union (Frankfurt).
- Google Firebase Cloud Messaging and Apple Push Notification service: device token and notification text, to deliver notifications.
- Resend: sending verification and password-reset emails.
- Google / Apple sign-in: if you choose them, authentication goes through those providers.
Some of these services may process data outside the EU (for example in the US) under the contractual safeguards of the provider. We do not share your data with third parties unless legally required.
What do other users see?
Your username, profile photo, bio, hobbies and public content are visible to other users. Your messages are shared only with the person or group you talk to. People you block cannot see you or message you.
How long do we keep it?
As long as your account is open. Old notifications are deleted automatically after 60 days. When you delete your account, your account and your data are permanently deleted.
Your rights
- Access and portability: Profile → Privacy and data → “Export my data”.
- Deletion: Profile → Privacy and data → “Delete my account”. If you cannot access the app, request it on the support page.
- Correction and objection: edit your profile in the app or write to [email protected]. You can exercise your other GDPR/KVKK rights at the same address.
- Notification preferences: can be turned off per category inside the app.
Security
Data is encrypted in transit and access is protected with row-level authorization. No system is entirely risk-free; if you notice a security problem, please tell us.
Changes
If we update this policy we will publish it here and, for important changes, notify you in the app.