Last Updated: October 9, 2026
Welcome to Hilloo ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a secure experience when using our mobile application (the "App") and related services.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use Hilloo. By accessing or using the App, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
To provide our real-time social and communication services, we collect the following categories of information:
A. Information You Provide to Us
Account & Profile Data: When you register, we collect your phone number for SMS OTP verification, your display name, profile avatar, and optional bio.
User Content: Photos, videos, text messages, stories, post comments, reactions, and voice notes that you compose, upload, or send through the App.
Communications: Feedback, support inquiries, and customer service communications.
B. Permissions & Device Data We Collect Automatically
Camera & Photos/Media Library: We request camera and photo storage access (CAMERA, READ_MEDIA_IMAGES, READ_MEDIA_AUDIO) to enable you to capture and share photos/videos in stories, feed posts, and direct/group chats.
Microphone & Audio: We request microphone access (RECORD_AUDIO, MODIFY_AUDIO_SETTINGS) to enable real-time 1-on-1 and group voice/video calls and to record voice messages.
Location Information: With your permission, we collect precise and approximate GPS coordinates (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION) solely to power the Nearby Discovery Radar feature. Location data is only accessed when you actively use the map discovery feature.
Contacts: With your explicit consent (READ_CONTACTS), we access phone contacts solely to help you discover friends who are already registered on Hilloo and to facilitate invite requests. We do not sell or share your contact list with third parties.
Foreground Services: We utilize foreground services (FOREGROUND_SERVICE, FOREGROUND_SERVICE_MICROPHONE) to maintain active, uninterrupted audio and video call sessions when you switch apps or place the App in the background.
Push Notification Tokens: We collect Firebase Cloud Messaging (FCM) device tokens (POST_NOTIFICATIONS) to deliver incoming call alerts, message notifications, and reaction updates.
2. How We Use Your Information
We use the information we collect for the following purposes:
Authentication & Security: To verify your phone number via OTP, protect your account, and prevent fraud or unauthorized access.
Real-Time Communication: To connect voice/video calls and deliver messages using real-time communication protocols.
Social Features: To display your posts, 24-hour expiring stories, reactions, comments, and nearby radar discovery.
Push Notifications: To notify you of new messages, missed/incoming calls, and social interactions.
App Performance & Improvement: To diagnose technical errors, improve performance, and optimize user experience.
3. Third-Party Services & Processors
We work with reputable third-party service providers that process data on our behalf under strict data protection terms:
Agora RTC & Chat SDK: Powers real-time voice/video calls and chat transmission. Audio/video streams are transmitted in real time and are not recorded or stored on Agora servers.
Google Firebase: Used for Firebase Cloud Messaging (FCM) to deliver push notifications and device synchronization.
OpenStreetMap: Used to display interactive map tiles for the Nearby People discovery feature.
We do not sell, rent, or trade your personal information to third parties for advertising or marketing purposes.
4. Data Security
We implement industry-standard administrative, technical, and physical security measures to safeguard your personal data:
All data transmitted between the App and our backend servers is encrypted using Transport Layer Security (TLS / HTTPS).
Authentication tokens and private session identifiers are securely stored on your device and validated on all private requests.
Cleartext traffic is disabled on Android (android:usesCleartextTraffic="false").
5. Data Retention and Account Deletion
Stories: Image and video stories expire and are automatically hidden after 24 hours.
Account & Data Deletion: You have the right to request deletion of your account and all associated personal data (profile, posts, messages, stories).
To request account deletion, navigate to Profile > Settings > Delete Account within the App, or contact our support team at
boitok405@gmail.com
.
Upon deletion, your personal information will be permanently purged from our active databases within 30 days.
6. Children's Privacy
Hilloo is not intended for use by children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal identifiable information from children under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately, and we will take steps to remove such information.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When changes are made, we will update the "Last Updated" date at the top of this policy and notify you within the App when appropriate. We encourage you to review this Privacy Policy periodically.
8. Contact Us
If you have any questions, concerns, or privacy requests regarding this Privacy Policy or your personal information, please contact us:
Email: info@hilloo.com.au Â
Website: https://hilloo.com.au
App Name: Hilloo