Privacy Policy

Effective Date: October 28, 2026

This Privacy Policy explains how Tinker Apps Inc. ("we," "us," or "our") collects, uses, discloses, and protects personal information in connection with Hi-Jack (the "Service"). It describes what the app actually does. Where something is a limitation rather than a protection, we say so.

1. Information We Collect

• Phone number. Verified by SMS at sign-up. It is never shown to other users.
• Date of birth. Collected once to confirm you are 13 or older. Stored separately from your public profile and never shown to other users.
• Profile. Username, display name, optional avatar photo, optional bio.
• Photos and captions you send or receive, and reactions to them.
• Social graph. Friends, pending requests, your invite link, blocked accounts, streaks.
• Contact matching identifiers. See section 3.
• Device and delivery data. A device identifier, push notification tokens, your app version, iOS version, and the time you last used the app.
• Time zone. Used so notifications are not sent overnight.
• Subscription status for Hi-Jack Plus, via RevenueCat and Apple. We never receive your payment card details.
• AI prompts. If you use Generate with AI, the text you type and any photo you attach. See section 5.
• Usage analytics. Screen views and feature events through Firebase Analytics. Analytics does not use the advertising identifier (IDFA).

2. Photos

Photos are resized, re-encoded and stripped of location and EXIF metadata on your device before upload, so we never receive the original camera file. Images sent as Hi-Jacks carry a small Hi-Jack watermark.

Photos are stored on Google Firebase Storage and access is controlled by our security rules, which limit each image to the people entitled to see it. Photos are not end-to-end encrypted. They are encrypted in transit and at rest, but we are technically able to access them, and we will do so where necessary to investigate a report or comply with law.

3. Finding Friends From Your Contacts

Being findable. By default, someone who already has your phone number in their contacts can see you as a suggestion in Hi-Jack. You can turn this off at any time in Settings › Discovery › Contact Discovery, which removes the identifier described below.

Matching your contacts. If you allow contacts access, phone numbers from your address book are sent to our server, converted immediately into a keyed identifier, and then discarded. We do not store the phone numbers themselves, and we never receive your contacts' names.

What a keyed identifier is, honestly. Each number is put through HMAC-SHA-256 using a secret key held on our server. Without that key the result cannot be turned back into a phone number by guessing, which a plain hash of a phone number would allow. It is not anonymous: it is the same for the same number every time, so it can link records together, and we treat it as personal information.

Retention. If you enable "Tell me when contacts join", we keep those identifiers so we can match a future sign-up. They expire 90 days after the app last refreshed them, and turning the setting off deletes them immediately. If you leave it off, matching happens once and nothing is kept.

4. Advertising

Hi-Jack shows optional rewarded video ads from Google AdMob, which you choose to watch in exchange for a Super Hi-Jack credit. Ads are never forced on you.

If you are 18 or older, iOS asks whether Hi-Jack may track you. If you allow it, Google may use your device's advertising identifier (IDFA) to personalize and measure the ads you watch. If you don't, or you are under 18, ads are not personalized and the advertising identifier is not used. Where the law requires it, such as in the EU and UK, Google's consent form asks you first. You can change your choice in the app's settings where offered, and in iOS Settings › Privacy & Security › Tracking.

5. Generate with AI

Hi-Jack Plus can generate an image from a description. When you use it, your prompt and any photo you attach are sent to OpenAI to produce the image and are handled under OpenAI's policies. We do not log the text of your prompts. Do not include personal information about yourself or anyone else in a prompt.

6. Push Notifications

We send notifications about Hi-Jacks, friend requests, group activity, and — if you enable it — when someone in your contacts joins. Notification content may appear on your Lock Screen. You can turn notifications off in iOS Settings, and contact-join notifications separately in the app.

7. Who We Share Information With

• Other users, only as the app describes: your profile, photos you send, and who currently holds your Lock Screen.
• Google (Firebase) — authentication, database, file storage, notifications, analytics, and AdMob.
• Apple — subscription billing and delivery of notifications.
• RevenueCat — subscription status.
• OpenAI — only prompts and photos you submit to Generate with AI.

We do not sell personal information.

8. Deleting Your Account

You can delete your account from Settings. This immediately ends your session, deletes your sign-in record, releases your username, and removes your contact-matching identifiers, your discovery suggestions, and your notification records.

What is not deleted, and why. Photos you already sent to other people remain in their copies of those Hi-Jacks, along with records of interactions involving them, such as reactions and group results. We cannot remove content from another person's account. Reports you filed are retained for safety purposes. Your profile is marked deleted so it no longer appears in searches, friend lists or suggestions.

9. Children

Hi-Jack is for people aged 13 and over. We ask for your date of birth at sign-up and do not allow accounts for anyone under 13. If you believe a child under 13 has created an account, contact us and we will remove it.

10. Your Choices

• Turn contact discoverability and contact monitoring on or off, and delete stored identifiers.
• Choose who can see an accepted Hi-Jack, or keep it private.
• Block or report any account, which stops contact between you.
• Turn off notification categories, including contact-join notifications.
• Delete your account.

Depending on where you live you may have rights to access, correct, or delete your personal information. Contact us and we will respond as required by applicable law.

11. Security and International Processing

Information is encrypted in transit and at rest and protected by server-side access rules. No system is perfectly secure. Our infrastructure is operated by Google in the United States, so your information is processed there.

12. Changes

We will update this policy when the app changes and will revise the effective date above. Material changes will be surfaced in the app.

13. Contact Us

Tinker Apps Inc. — info@tinkertray.app