This policy describes what Hooky (the mobile app and the service behind it) collects, why, and how long it keeps it. It is written to match what the code actually does.
The deep analysis sends a small number of still frames from your video to a third-party vision model provider — currently Anthropic — so it can describe what is on screen. This happens only after you explicitly turn it on in Settings, and only for analyses you start yourself. You can withdraw that consent at any time in Settings; the quick check keeps working without it. Frames are sent for that single request and are not retained by us.
The deep analysis may also send the audio track (the first 90 seconds, sound only — never the picture) to ElevenLabs for speech-to-text, so the report can say what is spoken and when the first word lands. It runs under the same consent, for that single request, and we do not store the audio or the transcript. ElevenLabs handles the audio under its own privacy policy and may process it outside the European Union.
Payments are handled entirely by Apple's App Store and Google Play. We never see or receive your card number. We use RevenueCat as the intermediary that tells our service whether a purchase is valid; RevenueCat receives the store's purchase receipt and the account identifier described above.
RevenueCat's integrations that send purchase data to advertising networks are switched off.
We use three services to understand how Hooky is used and which of our ads work: Google Analytics for Firebase (Google), the Meta SDK (Meta Platforms) and the TikTok Business SDK (TikTok).
What is sent: app installs and opens, sessions, which screens you open, when an analysis starts and finishes, when a purchase screen is shown, and when a purchase starts and completes — with its amount, currency, product and the store's transaction ID. If a purchase is cancelled or fails, or an analysis does not finish, that is sent too, with only the technical error code. Firebase also records basic device data (model, system version, country, app version) and an app-instance identifier. What is never sent: your videos, the frames, your reports, file names, or anything you typed.
Where you are matters. In the European Union and the European Economic Area, the United Kingdom and Switzerland — and whenever the app cannot tell which region you are in — Meta and TikTok start, and Google's advertising signals turn on, only after you allow Ad measurement in the app. Everywhere else, Meta and TikTok start when you open the app and receive the app events above for ad measurement, and Google's advertising signals are on by default.
Google Analytics for Firebase runs in every region for in-app analytics. Google's advertising consent signals (Consent Mode) follow the rule above. In our Google Analytics settings, Google signals and ad personalization are switched on: while the advertising signals are on, Google may use this data to measure and personalise ads.
Advertising identifier. On iOS, your device's advertising identifier (IDFA) is read only if you allow Apple's tracking dialog; you can change that at any time in iOS Settings → Privacy & Security → Tracking. On Android, these SDKs can use the device's advertising ID; you can reset or delete it in your device settings.
Your switch. Hooky → Settings → Ad measurement is available in every region. When you turn it off, Google's advertising consent is set to denied and Meta and TikTok send no events; Firebase keeps only the in-app analytics, without advertising use.
We do not sell your personal data for money. For ad measurement we share the app events listed above with Meta, TikTok and Google; some laws (for example in California, USA) may treat this as “sharing”. You can turn it off at any time with the Settings → Ad measurement switch; on iPhone, Apple's tracking permission also applies. Google, Meta and TikTok process the data above under their own privacy policies, including outside the European Union.
When the app crashes or something fails in the app or on our server, an error report goes to Sentry (Functional Software, Inc.) and is stored in its European Union region, so we can find and fix the fault. The report contains the type of error, where in our code it happened, which screen of the app or which server endpoint was involved, the device model, the system and app version, and whether the session ended in a crash. It never contains your videos, frames, reports, anything you typed, your account or advertising identifier, or your IP address. It is not linked to you and is not used for advertising.
Hooky is not directed to children. You must be at least 13 years old (or the minimum age of digital consent where you live, if that is higher) to use it.
When a purchase screen is shown, its button is tapped, or a purchase completes, the app tells the server only the screen's name and the event. That request carries no account, device identifier or any other field; it is written to a log line and used solely for aggregate counts.
Processing and storage run on Google Cloud in the European Union (europe-west3). Data may be processed in other countries by the third parties named above.
You can delete your account and everything stored against it from inside the app (Settings → Delete account) or by following these steps. Deletion is immediate and permanent.
Two things survive it, and only to stop a delete-and-rejoin loop from handing out free credits: the date of your last free spin (kept 30 days) and a yes/no flag that the one-time welcome credit was already given. Neither holds anything about you, and neither can be linked back to your Apple or Google account. The app says the same thing on the delete screen.
For any other request — access, correction, complaint — write to pekgoz25gursel@gmail.com.
If this policy changes materially, the app will show the new version before your next deep analysis.