Privacy Policy

1.1 Information You Provide

• Account information: Hooko does not require you to create a traditional account. When you first open the app, an anonymous user identity is automatically created on our backend — no email, name, password, or social login is collected at this time. We may add optional sign-in (such as Sign in with Apple) in a future version; this Policy will be updated if and when that happens.
• Videos and media you upload: short-form video files you submit for AI analysis. These are processed to generate hook scores, transcripts, hashtags, and rewrite suggestions. Uploaded videos are automatically deleted from our servers immediately after the analysis completes (see Section 4 and Section 5).
• Communications: messages you send us through support channels (e.g., email).

1.2 Information Collected Automatically

• Device & technical information: device model, operating system version, app version, language, and time zone.
• Persistent user identifier: we use a stable user identifier provided by our subscription management provider to track your subscription entitlements and daily usage limits. On iOS this identifier is tied to your Apple ID and is persistent across reinstalls and devices signed into the same Apple ID, so your daily limits and subscription status follow your Apple ID even after uninstalling and reinstalling the app.
• Usage data: basic in-app events needed to operate the Service, such as the number of analyses you have run today (used to enforce daily limits).
• Subscription & purchase data: subscription status, plan tier, and renewal status — processed through our subscription management provider and the Apple App Store.

We do not currently use third-party crash reporting, analytics, or advertising SDKs. If we add any in the future, we will update this Policy.

1.3 Information from Third Parties

• Payment processors (Apple App Store and our subscription management provider): we receive subscription status and entitlements but do not receive your full payment card details.

1.4 Server Logs

Like virtually all internet-facing services, our backend providers generate standard server logs when your device communicates with them. These logs may briefly contain technical metadata such as your IP address, request timestamp, and HTTP status. We do not actively collect, profile, or sell this data; it exists solely for security, abuse prevention, and debugging, and is retained by our providers according to their standard log retention policies. We do not link these logs to your analysis content.

We do not knowingly collect precise location, contacts, health data, or biometric identifiers.

We use the information we collect to:

• Provide the core Service (video upload, AI hook analysis, scoring, transcripts, hashtag and rewrite suggestions).
• Maintain your anonymous identity and link it to your subscription entitlements.
• Manage subscriptions, entitlements, and daily usage limits.
• Improve, debug, and develop new features.
• Detect, prevent, and address fraud, abuse, security, or technical issues.
• Respond to support requests.
• Comply with legal obligations.

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR to process your personal data:

• Performance of a contract (Art. 6(1)(b)): to provide the core Service you requested ��� uploading your video, running AI hook analysis, returning scores/transcripts/hashtags, and managing your subscription entitlements and daily usage limits.
• Consent (Art. 6(1)(a)): where you actively submit a video for AI analysis. You can withdraw consent at any time by not submitting further videos; withdrawal does not affect processing already carried out.
• Legitimate interests (Art. 6(1)(f)): to keep the Service secure, prevent abuse and fraud, enforce daily usage limits, debug technical issues, and improve the Service. We balance these interests against your rights and freedoms.
• Legal obligations (Art. 6(1)(c)): to comply with applicable tax, accounting, and consumer-protection laws (primarily in relation to subscription/transaction records handled by Apple and our subscription management provider), and to respond to lawful requests from authorities.

We do not rely on automated decision-making that produces legal or similarly significant effects on you.

We share information only as described below. We do not sell your personal information.

• Service providers / processors acting on our behalf:
  • A cloud backend provider — anonymous authentication, database, and temporary video storage.
  • A subscription management provider — subscription entitlements and a stable user identifier used to enforce daily limits across reinstalls.
  • An AI analysis provider — video and audio content analysis. Uploaded video content and derived transcripts are sent to this provider solely to generate your analysis results.
  • Apple App Store — payment processing and receipt validation.
• Legal & safety: when required by law, subpoena, or to protect rights, safety, or property.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

When you submit a video for analysis:

• The video is temporarily uploaded to our cloud storage so that our backend can process it.
• The video is processed by a third-party AI provider to extract a transcript and generate hook, audio, and visual scoring.
• We instruct our AI providers not to use your data for their own model training where such controls are available. We do not use your video content to train our own models.
• As soon as the analysis is complete, your video file is automatically deleted from our storage by our backend. If the server-side deletion fails for any reason, the app also performs a client-side fallback deletion. We do not keep a copy of your video after the analysis result is returned.
• Generated outputs (scores, transcripts, hashtags, rewrite suggestions, and a small thumbnail) are saved only on your device (in local app storage) as your personal analysis history. We do not store your analysis history on our servers.

• Anonymous user record & subscription state (stable user identifier, plan tier): retained on our servers while the identifier is in active use. Because the identifier is tied to your Apple ID, it can persist across reinstalls.
• Uploaded videos: stored in our cloud storage only for the brief period required to run the analysis (typically seconds to a couple of minutes). The video is automatically deleted from our storage immediately after the analysis completes, including in failure paths via a client-side fallback. We do not retain backups of your videos.
• Analysis results (scores, transcripts, hashtags, rewrite suggestions, thumbnail): stored only on your device in the app's local storage. They are not uploaded to or stored on our servers. They remain on your device until you delete them from the History screen, uninstall the app, or clear the app's data. We cannot recover this history if you delete it or lose your device.
• Subscription & transaction records: retained as required by law and for accounting (handled primarily by the Apple App Store and our subscription management provider).
• Daily usage counters: keyed by your stable user identifier plus the calendar date and retained while your identifier is active. They are used solely to enforce daily analysis limits.

You can request deletion of your account and associated server-side data at any time (see Section 9).

We use industry-standard administrative, technical, and organizational measures to protect your information, including encryption in transit (TLS) and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

The Service is rated 4+ on the Apple App Store, but it is intended for users aged 13 and older (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe a child has provided us information, please contact us and we will delete it.

If you are a resident of the European Union, the United Kingdom, or another jurisdiction with a higher digital consent age, you must meet your local minimum age (which may be up to 16) to use the Service.

We are based in Ukraine and may process and store information in countries other than your own, including the United States and the European Union, through our service providers. Where required by law (e.g., GDPR/UK GDPR), we rely on appropriate safeguards such as Standard Contractual Clauses for international transfers.

Depending on your jurisdiction (e.g., GDPR/UK GDPR, CCPA/CPRA), you may have the right to:

• Access, correct, or delete your personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Data portability.
• Lodge a complaint with a supervisory authority.

Because Hooko does not currently offer a user-facing sign-in or in-app "Delete Account" button, to exercise these rights — including account deletion — please email us at nazariosnz@gmail.com from the device or Apple ID you use with the app and we will delete your associated server-side data (anonymous user record, daily usage counters, and any subscription metadata we control) within a reasonable timeframe. You can also:

• Delete individual analyses from the History screen (this removes them from your device; we do not hold a server copy).
• Uninstall the app or clear app data to remove all locally stored history from your device.
• Manage or cancel subscriptions through your Apple App Store account settings.

California residents (CCPA/CPRA):You have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information. We do not sell personal information.

EU / EEA / UK residents: In addition to the rights listed above, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data infringes the GDPR or UK GDPR. A list of EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en, and the UK authority (ICO) is available at https://ico.org.uk. We would, however, appreciate the chance to address your concerns directly first — please email us at nazariosnz@gmail.com.

Our Service relies on third parties whose privacy practices are governed by their own policies. Categories include the Apple App Store, our cloud backend provider, our subscription management provider, and our AI analysis provider. Please refer to the respective providers' privacy policies for details on how they process data on our behalf.

We may update this Policy from time to time. When we do, we will post the new version in the app and, where required, notify you in-app or by email. Continued use of the Service after an update constitutes acceptance of the revised Policy.

Hooko
Email: nazariosnz@gmail.com
Jurisdiction: Ukraine