Privacy Policy

Last updated: November 1, 2026

This policy explains what data we collect when you use the Hoppo app, why we use it, who we share it with and what your rights are. For users in Türkiye, the KVKK Information Notice (in Turkish) also applies; this policy complements it.

1. Who we are

Hoppo is published by Akatra ("we"). We are the controller of your personal data (as defined in the GDPR). You can reach us about any privacy matter at hoppochat@gmail.com.

2. What data we collect

Sign-in. When you sign in with Google or Facebook, we receive your email address, name and account ID from that account. We never ask for your phone number.

Profile. Name, date of birth, gender and who you want to meet; optionally a bio, job, city, interests and intention; up to 6 photos. Your date of birth is never shown to others, only your age. People under 18 cannot sign up; we check this on our servers.

Location. Only with your explicit consent. We do not store your exact location; we store coordinates rounded to about 1 km. Other users only see a distance in kilometers. You can turn on "Hide my distance" or withdraw consent in settings.

Interactions. Likes, super likes, matches, messages (text; Premium members can also send photos), blocks and reports.

Coins and subscription. Your coin balance, coin transaction history and Premium status. Payments are made through Google Play; we never receive your card details, Google processes them.

Security records. Message rate limits and similar technical records used to prevent abuse.

3. Why we use your data and our legal basis

Where we rely on consent, you can withdraw it at any time; this does not affect processing that took place before you withdrew it.

Your gender and who you want to meet are used only to show you suitable people; they are not used for advertising or any other purpose and are not shared with anyone for any other purpose.

4. Who we share your data with

• Other users: your profile (name, age, photos, optional fields you fill in, distance) and your messages are visible to the relevant users as part of how the app works. Your date of birth and exact location are never visible.
• Supabase: database, authentication and file storage. Your data is stored in the EU, on servers in Frankfurt (AWS eu-central-1). Your photos are kept in non-public storage and shown only through short-lived signed links.
• Meta (Facebook): for authentication, if you sign in with Facebook.
• Google: for authentication, if you sign in with Google; and for payments and subscriptions through Google Play.
• Authorities: courts and competent authorities, when required by law.

We do not share your data with anyone other than those listed here, and we do not sell it. If another kind of sharing becomes necessary, we will update this policy and, where required, inform you and ask for your consent first.

5. International transfers

Your data may be transferred from Türkiye to servers in the EU, and to other countries for Google and Meta (Facebook) sign-in and Google Play. We make these transfers in line with Article 9 of the KVKK (as amended by Law No. 7499) for Türkiye and Chapter V of the GDPR for EU/EEA users, using legal safeguards such as standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework.

6. How long we keep your data

• We keep your data for as long as your account is open.
• When you delete your account, your records, including your profile, photos, messages, likes, location and wallet, are permanently deleted right away.
• If the law requires us to keep certain records (for example, in response to requests from authorities), we keep them only for the period required and only for that purpose.
• Sign-in and security records are kept for up to 6 months.
• Deleted data is also permanently removed from system backups within 30 days at the latest.

7. Deleting your account

You can delete your account in the app under Settings. Deletion cannot be undone. Because Premium is managed through Google Play, deleting your account does not cancel your subscription automatically; you need to cancel it in Google Play separately. If you cannot access the app, you can request deletion as described on the Delete account page.

8. Security

We use measures such as an 18+ age check, blocking and reporting tools, message rate limits and non-public storage for photos. No system can be 100% secure; we take reasonable technical and organizational measures.

9. Children

Hoppo is not for people under 18. If we learn that someone under 18 has signed up, we close the account and delete their data.

10. Your rights in the EU/EEA (GDPR)

If you are in the EU/EEA, you have the right to:

• Access: request a copy of your data
• Rectification: have inaccurate or incomplete data corrected
• Erasure: have your data deleted (you can also do this by deleting your account in the app)
• Restriction: request that processing be restricted
• Portability: receive the data you provided in a common, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: at any time, where processing is based on consent
• Complaint: lodge a complaint with the data protection authority where you live, work or where the infringement took place

To exercise your rights, write to hoppochat@gmail.com. We may ask for reasonable additional information to verify your identity. We generally respond within one month.

11. Your rights in Türkiye (KVKK)

Your rights under Article 11 of the KVKK and how to apply are described in the KVKK Information Notice.

12. Changes

We may update this policy. We will announce important changes in the app or in another appropriate way. The current version is always available in the app and at hoppochat.com.

13. Contact

Akatra · hoppochat@gmail.com