Privacy Policy

Effective Date: September 10, 2026

This Privacy Policy explains how Tinker Apps Inc. ("we," "us," or "our") collects, uses, discloses, and protects personal information in connection with Hi-Jack (the "Service").

1. Information We Collect

• Account Information: a verified phone number, username, display name, and optional avatar photo.
• User Content: photos, captions, and reactions sent between friends.
• Social Graph: your friend connections, pending friend requests, your personal invite link, and any users you've blocked.
• Contacts, if you allow it: a one-way scrambled (hashed) version of your phone contacts' numbers, used only to check which of them are already on Hi-Jack. We never upload or store your contacts' names or raw phone numbers, and a hash can't be reversed back into a real number.
• Reports: if you report a user or a Hi-Jack, the details you submit. Reports are reviewed by us and never shown to the person you reported.
• Technical Information: device information, app version, crash data, analytics, usage information, and a push notification device token.
• Communications: messages sent to us for support, feedback, or other inquiries.

Hi-Jack collects your phone number to verify your account and, only if you enable it, to find friends from your contacts — but never displays your (or anyone else's) phone number to other users. We don't collect or display an email address for public use, and it's never exposed to other users.

2. How We Use Information

• Provide, operate, maintain, and improve the Service.
• Create and manage user accounts.
• Deliver the core Hi-Jack loop — sending, receiving, accepting, and declining Hi-Jacks — and push notifications for it.
• Maintain the friend graph, invite links, and enforce who can send you a Hi-Jack.
• Enable Feed/sharing features, and enforce each user's own sharing/visibility choices.
• Operate safety features: blocking, reporting, and account deletion.
• Respond to support requests and communicate with users.
• Monitor usage, troubleshoot issues, and improve safety and reliability.
• Comply with legal obligations and enforce our terms.

3. Photos and Sharing

A Hi-Jack you send is stripped of location and other EXIF metadata on your device before it's ever uploaded, and it's only visible to the friend you sent it to — unless and until they accept it and choose to share it more broadly (with friends, mutual friends, or nobody; their choice). You control the same setting for Hi-Jacks you accept. Blocking someone immediately cuts off their access to your content going forward. Please avoid sending sensitive personal information in a photo or caption.

4. Sharing of Information

We may share information:

• With service providers that help operate the Service, such as hosting, analytics, authentication, and push-notification vendors (including Google/Firebase and Apple).
• With other users, but only the content and profile details you've chosen to share through the Service's own visibility settings.
• When required by law, regulation, legal process, or governmental request.
• To protect the rights, safety, and security of our users, our company, and others.
• As part of a merger, acquisition, financing, or sale of business assets.

We do not sell your personal information, and we do not use it for third-party advertising.

5. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Deleting your account permanently removes your profile from search and friend lists and ends your session immediately; some records tied to your interactions with other users — for example, a Hi-Jack you sent that a friend still has a copy of — may persist as part of their own account history.

6. Your Choices

• You may update certain account information within the app.
• You may block or report another user, or a specific Hi-Jack, at any time.
• You may delete your account at any time using the self-serve Delete Account option in Settings.
• You may turn push notifications on or off from your device's system settings.

7. Children

Hi-Jack's primary audience is teenagers and young adults; it is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information inappropriately, please contact us so we can review and take appropriate action.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information — including server-enforced access rules that determine exactly who can read a given photo or profile, re-checked on every access rather than cached. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Processing

Your information may be processed or stored in jurisdictions outside your province, territory, or country, including where our service providers (such as Google/Firebase) operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised effective date.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact:

Tinker Apps Inc.
Winnipeg, Manitoba, Canada
info@tinkertray.app