Privacy Policy

This Privacy Policy applies to the Hurroz app and website (hereby referred to as the "Application") for mobile devices and web, created by Sulabh Rastogi / SollyLabs (hereby referred to as the "Service Provider"). Hurroz is an ad-supported service. This policy explains what information the Application collects, how it is used, and the choices you have.

By downloading or using the Application, you agree to this Privacy Policy. If you do not agree, please do not use the Application.

Who Can Use Hurroz

The Application is not directed to children. You must be at least 18 years old to create an account or use the Application. The Service Provider does not knowingly collect personal information from anyone under the age of 18. If you believe a person under 18 has provided us with personal information, please contact us at [email protected] and we will delete it.

Information We Collect

The Application collects information in the following ways:

Information You Provide

  • Account information: your email address, used for account creation and authentication.
  • Content you create: writing, entries, posts, articles, photos, and any other content you create within the Application's features (described below).
  • Communications: messages you send us for support or feedback.

Information Collected Automatically

  • Your device's Internet Protocol (IP) address.
  • Device information, such as operating system and device identifiers.
  • Usage information, such as the features and pages of the Application you use.
  • Approximate (coarse) location, derived from your IP address or device settings.
  • Diagnostic and crash data, used to identify and fix problems.
  • An advertising identifier, used for advertising as described in the Advertising section below. On iPhone, only if you allow it.
  • Information about the ads shown to you in the app, such as which ad spaces were shown, on which type of phone (iPhone or Android), and whether an ad loaded. We use this to measure how advertising performs in the app.

Your Content and Its Privacy

The Application offers several distinct ways to write. Different features handle your content differently, and it is important you understand the difference.

  • Personal Notes (end-to-end encrypted, formerly called Inner Sanctum): Personal Notes entries are protected with end-to-end encryption. They are encrypted on your device, and the Service Provider cannot read their contents. Personal Notes content is never sent to any advertising or artificial intelligence service.
  • Daily5, Sol, Verve, and other personal writing: this content is encrypted in transit and encrypted at rest on our infrastructure. Encryption at rest protects your data from unauthorized outside access, but it is not end-to-end encrypted, which means the Service Provider's systems can technically access this content in order to operate, sync, back up, and support these features.
  • Anonimo (anonymous public posts): content you choose to publish to Anonimo is shared publicly with other users without your name attached. It is not encrypted from other users, because it is intended to be read by them. Your identity is kept separate from the post.
  • Spotlight (public articles): articles and chapters you choose to publish to Spotlight, with their cover pictures, are public and viewable by other users.
  • MoodStatus (public photo posts): the photo, caption, and any link or place name you choose to post to MoodStatus are public and viewable by other users, shown with your MoodStatus pen name or your display name.
  • Photos: photos you attach to entries in Daily5, Personal Notes, Anonimo, and MoodStatus are handled with the same privacy level as the feature you attach them to.

You choose what to keep private and what to share. Private content is not made public unless you explicitly publish or share it.

Artificial Intelligence Features

The following features use Google's Gemini AI service and send the relevant content you submit to them to Google for processing:

  • Sol — your reflection text is sent to Gemini to generate the AI companion's response and insights.
  • Verve — your prompts and inputs are sent to Gemini to generate journal inspiration.
  • Depth Check — your Sol reflection text is sent to Gemini to produce a reflection depth score.
  • Spotlight cover pictures — when you choose a cover picture for an article or chapter, its title and text are sent to Gemini to suggest a short line, a search word, and a colour for the cover. Only the search word, never your writing, is then sent to Unsplash to find photos. The photo you choose is copied to Hurroz's storage and shown with your article or chapter.
  • Anonimo, Spotlight, and MoodStatus — public posts and comments are sent to Gemini for automated content moderation checks before and after they appear. For MoodStatus, the photo is checked together with its caption.

Apart from MoodStatus moderation, which checks the photo together with its caption, only the text of your entry, post, comment, or prompt is sent. No account information — such as your name, email address, or phone number — is included in these requests.

The following features do not use AI at all: Daily5 and Personal Notes. Content in these features is never sent to any AI service.

Important points about AI features:

  • Personal Notes content is never sent to any AI provider.
  • Your content is sent to AI providers only to generate a response for you.
  • The Service Provider does not use your content to train its own AI models, and instructs its AI providers not to use your content to train their models. However, each AI provider also handles data under its own privacy terms.
  • Google LLC is a signatory to established data protection frameworks and provides data protection standards that are equivalent to or greater than those required under applicable law. Google's data handling is governed by their privacy policy at policies.google.com/privacy.

Advertising

Hurroz is an ad-supported service. Advertising is handled differently in the mobile app and on the website, and it is worth knowing which is which.

In the mobile app

The app displays advertising provided through Google AdMob (part of Google's Mobile Ads services). To serve and measure advertising, the app and its advertising partners may access and use:

  • An advertising identifier and similar device identifiers.
  • Approximate (coarse) location.
  • Information about your interaction with ads and the app.

This information may be used to deliver, personalize, and measure advertising, and some of this activity constitutes tracking across apps and websites owned by other companies. This advertising data is shared with Google and its advertising partners. Google AdMob also lets other advertising companies, such as PubMatic, bid to show an ad in the app, and passes them this information for that purpose.

  • On iPhone: Hurroz asks for your permission first, using Apple's own "Allow tracking" question, and uses your advertising identifier only if you choose Allow. If you choose not to allow it, everything in Hurroz still works, and you may still see ads that are not personalized to you. You can change your answer at any time in your iPhone's Settings, under Privacy & Security, then Tracking.
  • On Android: you can reset or delete your advertising identifier, or turn off ad personalization, in your phone's settings (usually under Privacy, then Ads).

On the website

The website displays advertising provided through Adsterra, an advertising network operated by Adsterra Group Ltd. Adsterra is a separate company from Google, and is not connected to the AdMob advertising used in the mobile app.

Website ads are not loaded until you accept cookies. When you first visit, a banner asks whether you accept. Your choice is stored in a cookie named hurroz_consent for twelve months, and you can change it at any time.

  • If you accept: Adsterra loads its ads and may set cookies and similar identifiers, and may access your Internet Protocol (IP) address, browser and device information, and your interaction with the ads. Adsterra may use this to select, personalize, and measure the advertising you see, including across other websites.
  • If you decline: no Adsterra code is loaded at all, and no advertising cookies are set. You are shown information about Hurroz's own features in place of ads.

Adsterra's handling of data is governed by its own privacy policy at adsterra.com/privacy-policy.

Each ad on the website is loaded inside a separate frame, so the advertising code has no access to the content of the page you are reading.

Applies to both

Advertising is not shown while you are writing. Ads appear only in browsing and public areas of the Application. Your writing is never sent to any advertising network, and Personal Notes content is never sent to any advertising network under any circumstances.

Third-Party Services

The Application relies on third-party services that have their own privacy policies governing how they handle data:

  • Supabase — database, authentication, and storage.
  • Google Gemini API — AI processing for Sol, Verve, and Depth Check, moderation of Anonimo, Spotlight, and MoodStatus, and Spotlight cover-picture suggestions.
  • Unsplash — photos for Spotlight cover pictures. Only a search word is sent, never your writing.
  • Google Firebase — analytics, crash reporting, and notifications.
  • Google AdMob — advertising in the mobile app.
  • PubMatic — an advertising company that bids through Google AdMob to show ads in the mobile app.
  • Adsterra — advertising on the website.
  • Google — sign-in and related services.
  • Apple — Sign in with Apple, on Apple devices.
  • Cloudflare — website hosting and content delivery.

How We Use Your Information

  • To provide, operate, sync, and back up the Application's features.
  • To authenticate your account and keep it secure.
  • To provide AI-powered features when you choose to use them.
  • To display advertising that supports the free service, and to measure how it performs.
  • To understand usage, fix problems, and improve the Application.
  • To communicate with you about support requests and important updates.

Your Rights and Choices

  • Access and export: you can export your entries from within the Application.
  • Account deletion: you can delete your account directly within the Application. Deleting your account removes your account and associated personal content, subject to limited retention described below.
  • Advertising controls: on iPhone, you choose in Apple's "Allow tracking" question and can change your answer at any time in your iPhone's Settings. On Android, you can reset or delete your advertising identifier, or turn off ad personalization, in your phone's settings. On the website, you can decline advertising cookies in the consent banner, and no advertising code will load.
  • Contact: you can contact us at any time with privacy questions or requests.

Depending on where you live, you may have additional rights under laws such as the EU/UK General Data Protection Regulation (GDPR) or India's Digital Personal Data Protection Act. These may include the right to access, correct, or delete your personal data, or to object to certain processing. To exercise these rights, contact us at [email protected].

Data Retention

The Service Provider retains your information for as long as your account is active and for a reasonable period afterward. When you delete your account, your personal content is removed, although some information may be retained for a limited time where required for legal, security, backup, or fraud-prevention purposes. Public content you have published (such as Anonimo posts, Spotlight articles, or MoodStatus posts) may remain visible unless you remove it before deleting your account.

Security

The Service Provider takes reasonable measures to protect your information, including:

  • End-to-end encryption for Personal Notes entries.
  • Encryption of other content in transit and at rest.
  • Secure authentication, including email (one-time code or password), Google sign-in, and Sign in with Apple.
  • Optional biometric security (Face ID / Touch ID) on supported devices.

No method of transmission or storage is completely secure, and the Service Provider cannot guarantee absolute security.

International Users

The Application uses service providers that may store and process data in countries other than your own. By using the Application, you understand that your information may be transferred to and processed in such countries.

Changes to This Policy

The Service Provider may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Application after changes take effect means you accept the updated policy.

Contact Us

If you have any questions about this Privacy Policy or your data, please contact the Service Provider at [email protected].

Last updated: September 25, 2026