Privacy policy

Last updated: October 2026. Operator: Hacall (hacall.com). Questions: use the contact details on hacall.com.

What we do not collect

No email address or phone number is needed to create an account.
We never use your camera. Holograms are made from an avatar or a photo you choose.
No advertising trackers, no third-party analytics, and no payment details (the service is free).

What we store

Account: your username, a scrambled check value for your password and for your 12-word code (we never receive the password or the words themselves), and your public encryption key with your private key in locked form.
Profile: what you enter: display name, bio, link, avatar or photo, and your privacy choices. Your profile is public.
Posts: photos, images, videos, music and captions you upload. These are public, together with their like, comment, share and view counts.
Social activity: who you follow, what you like, comment on and share to your profile, and the activity list we show you (who liked, commented on, shared or followed). Follows, comments and reposts are public; your likes are visible as counts.
Messages: text, photos, documents, voice messages and shared posts are end-to-end encrypted in your browser. We store only the encrypted data and basic details needed to deliver it (who, when, which conversation). We cannot read the content.
Calls: audio goes directly between the two devices, encrypted. Nothing is recorded. Our server only passes the connection setup.
Views: to count views and shares once per visitor, we keep a short-lived record of network addresses for a few hours.
Security logs: short-term counters of attempts per network address to stop abuse.

Cookies and local storage

We use one essential cookie to keep you logged in. Your browser also keeps your unlocked message key and your language choice on your device.

How long we keep data

Until you delete it. Deleting a post removes it with its likes and comments. Deleting your account (Settings → Account) removes your profile, posts, likes, comments, follows, messages and files.

Your rights

You can see and change your data in the app and delete your account at any time. Under the GDPR you may also ask us for a copy of your data or complain to your data protection authority.

Where data is kept

The service runs on Replit infrastructure. Encrypted messages remain unreadable to the hosting provider and to us.