Privacy Policy

1. What we collect

• Your mobile number and name, to sign you in and show you to your team. We also keep your language, the role you pick at sign-up, your stable’s name and city, and your settings.
• Stable and horse data: names, photos, health records, visits, medications, feed, appointments, results, expenses and their receipts, documents and contacts that you or your team add, and each horse’s change history.
• Mobile numbers you invite to your team, and the role you give each one.
• If you join the Community: the profile, claim, horse-link, stable, report and block details described in section 4.
• Device details needed to send notifications and fix problems: your push token, a device id created by the app, the platform and app version, and sign-in records (time and IP address).
• Your subscription status from the App Store. We never see your card or store payment details.
• Your acceptance of this policy and the terms, with version and time, and your notification and offer choices.

We don’t collect your location or your phone’s contacts, and the app has no advertising, analytics or tracking tools.

2. How we use it

We don’t sell your data, show ads, or use your horses’ data for anything else.

• To run the app: Today, reminders, reports and your data export.
• To run the Community if you join it: points, rankings, achievements, verifying claims, and handling reports.
• To send the notifications you chose, and your sign-in code. Community notifications have their own switch in Notification settings.
• To show the heat alert based on the weather forecast for your stable’s city.
• To run your free trial and subscription, and to answer your support messages.
• To send offers and news only if you agreed to them.

3. Who sees your data

Only your team, according to the role you give each person on each horse. Amounts and expenses are visible to the owner only — except that vets and farriers see the fees of the visits they recorded themselves. Records you add to a horse someone else owns are part of that horse’s file, held by its owner.

The Community is the only public part of Hoof, and only for what section 4 lists. Your horses’ files, health records, expenses, documents, team and private results are never public.

We use trusted providers for hosting, SMS, notifications and subscriptions (see section 5). They must protect your data and can’t use it for their own purposes.

We may disclose data if a competent authority requires it under applicable law.

4. The Community (optional)

The Community is optional. It is built only on official show-jumping results published by the Saudi Arabian Equestrian and Polo Federation. Private results you keep in a horse’s file are never used.

• Official results: the Hoof team uploads each class after the federation publishes it: rider and horse names, federation IDs (SAEF, FEI and horse IDs), placings, round times and faults, and prize money. We use them to calculate points, rankings and achievements, and they are public — including for riders who don’t use Hoof, who appear as unclaimed profiles. If anything is wrong, use Report in the app or email us.
• Your Community profile (if you join): display name, optional photo, city, whether you are a rider, and your privacy choices.
• Claiming your rider profile: the SAEF ID (and optional FEI ID) you enter, and a photo of your federation membership card. We ask you to cover your national ID number; we don’t read the card automatically and never store national ID numbers. Only the Hoof team sees the card photo, through temporary links, and it is deleted as soon as your claim is decided, or after 30 days if it isn’t. While reviewing a claim the Hoof team also sees your Hoof name and mobile number.
• Linking a horse: the federation horse ID you add to one of your horses. Its photo, breed and age appear on the public horse profile only after we approve the link and only if you make that horse public.
• Stables: requests to join a stable and the owner’s decision. Joining a stable in the Community gives no access to its horses or data.
• Reports and blocks you make, and the Hoof team’s decisions on them. Blocking someone hides their photo from you and stops their stable requests.

What others can see: your display name (or federation name), your photo if you allow it, your city, stable, federation IDs, official results, points, ranks and achievements. Never public: your mobile number, expenses, health records, documents, team or private results. You can hide your profile at any time; official results stay visible as federation data.

Leaving: leaving the Community deletes your claim, public profile and Community photo; your official results stay as unclaimed federation data. Deleting your account does the same.

The Hoof team’s actions on results, claims and reports are kept in an audit record for 5 years.

5. External services

• Cloudflare: hosting for the server, database, files, backups and this website.
• Authentica (Saudi Arabia): sends your sign-in code by SMS; receives your mobile number and the code.
• Expo and Apple Push Notification service: deliver notifications to your device; they receive your device token and the notification text. Notifications never carry amounts.
• RevenueCat and the App Store: subscriptions. RevenueCat receives an internal account id (not your number or name) and your purchase history; Apple handles payment.
• Open-Meteo: weather forecasts. Our server asks with a city’s coordinates only, with no personal data.

6. Storage and security

Your data is encrypted in transit and at rest, and only staff who need it to run the service can access it.

• The database (Cloudflare D1) and files (Cloudflare R2) are stored in Cloudflare’s Eastern Europe region, the closest region available to Saudi Arabia — so your data is stored outside the Kingdom.
• Files are private and open only through temporary links after your access is checked. Our server checks your role on every request. Membership card photos are kept in a separate private area that only the Hoof team can open.
• We never store your sign-in code itself, only a hash; it expires after 5 minutes, and sign-in attempts are limited.
• We back up the database every night; each backup is deleted automatically after 30 days.
• The app keeps a copy of the data you last viewed on your phone, and its sign-in keys in the phone’s secure storage, so ticks work offline.

7. Permissions

• Notifications: for reminders, invites and Community updates; you can turn them off in your phone’s settings or in the app.
• Photos and camera: to add horse, document and receipt photos, your Community photo and your membership card photo, only when you choose to.
• Files: to upload a file you pick, and to save and share your exports.

The app doesn’t ask for your location, microphone or contacts.

8. How long we keep it

• We keep your data while your account exists.
• If your plan ends your horses become read-only — nothing is deleted.
• When you delete your account we delete your data and files immediately, and they are wiped from backups automatically within 30 days.
• Membership card photos are deleted when your claim is decided, or after 30 days if it isn’t.
• Official federation results are kept as public sports records, also after you leave the Community or delete your account.
• Data export files are deleted after 24 hours; invites expire after 14 days.
• After deletion we keep only a one-way hash of your mobile number, from which the number can’t be recovered (so the free trial can’t be repeated), and purchase records detached from your account.

9. Export and account deletion

Export: in Account → Export my data you get one ZIP file with CSV tables, a PDF summary and your attachments, for your account and your own horses only, plus your Community data if you joined.

Delete account: in Account → Delete account, then type the confirmation word. Deletion is immediate and permanent. It removes your account, stable, horses and all their records and files, your Community profile and claim, your sessions on every device and your membership of other people’s teams. It doesn’t touch horses owned by others. Deleting your account doesn’t cancel your subscription — cancel it in your Apple ID settings.

10. Your rights

• Access and correct your data.
• Export your data in one file from Account.
• Delete your account for good from Account.
• Hide your Community profile, or leave the Community, at any time.
• Ask us to correct federation data shown about you, or to remove a photo.
• Withdraw consent to notifications or offers at any time.

For anything else, email support@hooof.app and we’ll reply within 30 days.

11. Age

Hoof is for people aged 18 and over. Younger people, including riders who compete in Children and Junior classes, may use Hoof and the Community only with the permission and supervision of a parent or guardian, who is responsible for that use. The app doesn’t ask for a guardian’s approval, and younger riders appear in the Community like any other rider. We don’t knowingly let children under 13 create an account; if you learn of one, email us and we’ll delete it. A parent or guardian can also ask us to hide a rider’s photo or correct their details.

12. Changes to this policy

If we change anything important, we’ll tell you in the app before it takes effect, and publish the new version here with its version number and date.

13. Contact us

For any question about your privacy: support@hooof.app