Privacy Policy
Last updated: October 8, 2026
This document describes how the app actually works. Have it reviewed by a qualified lawyer for your jurisdictions (e.g. Morocco Law 09-08, GDPR for EU users) before publishing.
This policy explains what HoleApp ("we", the app published by MOHAMED ET TAMMAR) collects, why, who it is shared with, how long it is kept, and how you can delete it. Contact: ettammar.dev@gmail.com.
1. Anonymous by design
You don't create an account with an email, phone number or password. The app uses an anonymous Firebase account tied to your device. Other users only see your nickname, age, city, a rounded distance, avatar, interests, personality and bio. They never see your date of birth, exact location, internal account identifiers, or anything you keep private unless you explicitly reveal it to a specific match and they accept.
2. What we collect
| Data | Why | Visible to others? |
|---|---|---|
| Date of birth | Verify you are 18+; show your age | Only your age |
| Gender, who you're interested in, age and distance preferences | Matching | Gender is used for matching only |
| Approximate location (rounded on your device, stored as a ~5 km area), city, country | Suggest people nearby; show "~10 km away" | City and a rounded distance |
| Nickname, bio, interests, personality, avatar | Your anonymous profile | Yes |
| Optional private info: first name, "more about me", private photo | Identity reveal feature | Only to matches you choose, after they accept |
| Messages and photos you send in chats and rooms | Provide messaging; safety review of reported content | To the people in that chat/room |
| Likes, passes, matches, blocks, mutes, reports | Matching and safety | No (matches are visible to both people) |
| Purchase token and subscription status (no card details) | Verify Premium with Google Play | No |
| Device push token, app instance identifiers, app attestation results | Notifications; protecting the service from abuse (Firebase App Check / Google Play Integrity) | No |
| Advertising ID and ad interaction data (free users) | Show ads via Google AdMob; ad measurement and fraud prevention | No |
| App usage events and crash logs | Analytics (Firebase Analytics) and stability (Crashlytics). We don't log message content, nicknames or locations in analytics. | No |
Your IP address is processed by Google infrastructure to deliver the service; we don't store it in our database.
3. Automated processing and moderation
Messages, nicknames and bios pass through an automatic filter that blocks links in public places, contact details in public rooms, spam, scams, sexual solicitation, hate speech and signs that a user may be under 18. Photos you receive in a chat stay hidden until you tap to view them, and can be reported. Reported content (including a copy of the reported message) is reviewed by our moderators. Accounts may be restricted, suspended or banned for breaking our Community Guidelines.
4. Who we share data with
We don't sell your personal data. We use service providers acting on our behalf: Google Firebase (authentication, database, storage, functions, messaging, analytics, Crashlytics, App Check), Google Play (billing, integrity) and Google AdMob (advertising for free users; AdMob may collect the advertising ID and device information as described in Google's policies). We may disclose information to authorities where required by law, and we report child sexual abuse material to the relevant authorities.
5. Ads and consent
Where required (for example in the EEA/UK), you are asked for consent before personalised ads are shown, and you can change your choice in Settings › Ad privacy choices. Premium subscribers see no ads.
6. Retention
- Profile and account data: until you delete your account.
- Conversations that were ended (unmatch / block): deleted 30 days after ending.
- Passed profiles: forgotten after 30 days.
- Reports: kept while open and up to 180 days after they're resolved, for safety and legal obligations.
- Anti-abuse rate-limit records: about 7 days.
- Analytics and crash data: according to Firebase retention settings.
7. Deleting your data
Settings › Delete account permanently deletes your profile, matches, the messages you sent, your photos, room memberships and other personal data. If you can't access the app, see how to request deletion.
8. Security
Data is encrypted in transit (TLS) and at rest by Google Cloud. Access is restricted by security rules so each user can only read what they're allowed to; sensitive actions run on our servers.
9. Adults only
The app is not intended for anyone under 18. If we learn that a user is under 18, the account is blocked and removed.
10. Your rights
Depending on where you live you may have rights to access, correct, delete or object to processing of your data. Contact ettammar.dev@gmail.com with your account code (Settings › Account).
11. Changes
We'll notify you in the app of material changes.
ملخص بالعربية
لا نطلب بريداً إلكترونياً أو رقم هاتف. نجمع تاريخ الميلاد للتحقق من أن عمرك 18 عاماً أو أكثر، وموقعاً تقريبياً فقط، ومعلومات ملفك المجهول، ورسائلك. لا يرى الآخرون إلا اسمك المستعار وعمرك ومدينتك ومسافة تقريبية. نستخدم خدمات Google (Firebase وAdMob وGoogle Play). يمكنك حذف حسابك وبياناتك نهائياً من الإعدادات.
HoleApp · MOHAMED ET TAMMAR · ettammar.dev@gmail.com