Privacy

Account data

HOTF verifies a provider-issued sign-in identifier to recognise your account. It stores your favourites, boost history, wallet and credits, and subscription references in Google Cloud Firestore, served through Cloudflare. The iOS app stores a session token in the Keychain; the website stores one in browser storage. Provider email is not stored by our account API. Existing legacy topic records may contain an account identifier as their author.

Payments

Apple handles iOS purchases and Stripe handles web purchases. We do not store card details. We store transaction references to grant credits, recognise subscriptions, and prevent receipt reuse. These providers may retain transaction records under their own policies.

Deletion

Use Account & Support → Delete account in the iOS app. After Apple confirmation, deletion removes your account record, favourites, wallet, boost history and score contributions, and legacy topics you authored. It revokes the Apple sign-in grant and invalidates HOTF sessions. An interrupted deletion retains only the data needed to finish cleanup; retry in the app. Completion is explicitly confirmed.

Receipt identifiers remain as anonymous replay markers without an account link. A keyed security marker is retained to prevent old sessions from restoring deleted data; it contains account state and a deletion time, without a name, email, or provider subject. Apple subscriptions must be cancelled separately. Web subscriptions are cancelled and their linked Stripe customer removed during deletion.

Infrastructure and contact

Cloudflare, Google Cloud, Apple, and Stripe process service requests under their own infrastructure and retention policies. Server requests may include an IP address and user agent. We do not sell account data or use advertising tracking. Emailing support shares the information you include with ONICO LTD for handling that request. Contact dan@onicogroup.com for privacy or access questions.