Privacy

Hafsaka · Last updated 10 November 2026

What the app keeps

• Your account: your name, your phone number (you sign in with it), your program and year, and, if you add them, a photo and a Telegram username. If you use a password, only a one-way key made from it is kept, never the password.
• Your week: the courses and groups you pick, classes you add yourself, your changes to them, and a history of those changes.
• What you share as you go: where you've checked in (a study place or a circle's spot, until you leave), Will go / Won't go on classes, your circles and the spots they make, friends, friend requests, blocks, and photo reports.
• On campus (phone apps, only if you turn it on): your phone works out by itself whether you're on campus; the server gets only "on" or "off" and since when. With it on, the time you spend in study places (the library, Beit Studentim, study rooms) is kept for your own study stats.
• Where you stood when you start a new spot for a circle, so the circle can find it.
• Devices: for each device signed in, a label such as "iPhone app", the app version, and the days you signed in and were last seen. On iPhone and Android, a push token, so friend requests and invites can reach you; on Android also a key made by your phone, which seals each notification for it.
• Usage statistics: which parts of the app are opened and when, kept under a code instead of your name. Nothing kept links the code back to you.

What stays on your phone

• Stars and hidden friends. They are never sent to the server.
• Your location, apart from the two cases above (On campus "on"/"off", and a new spot). The app uses it on the phone to suggest where you are and to show your own dot on the map.
• Your contacts. Find from contacts sends the numbers once to find which of them use the app; they're compared and forgotten, not stored.

Who sees what

• Friends (both of you said yes): your week, check-ins, On campus, Will go answers, photo and phone number.
• Friends of friends, people in your circles, and anyone who searches for your name or your exact phone number: your name card only (name, photo, program, year, Telegram username).
• Nobody sees a class you keep to yourself. Someone you block can't invite you or ask to be friends.

Services the app uses

• Cloudflare runs the app, its database and photos, and the "Verify you are human" check on the sign-in screen.
• WhatsApp (Meta) delivers your sign-in code to your number. If a code can't be sent, your number is kept for up to 30 days so the app can message you once it can.
• Apple delivers notifications to the iPhone app.
• Google (Firebase Cloud Messaging) delivers notifications to the Android app. Each one is sealed with your phone's key before it leaves our server, so Google carries it without being able to read who or what it's about.

Deleting your account

In the app: Settings → Delete account. It deletes your account and everything in it straight away: your week, check-ins, friends, requests, circle memberships (a circle you own passes to its longest-standing member), photo, phone number and devices. The usage statistics under a code stay, since nothing links them to you. You can also email hello@hafsaka.com and ask for it to be deleted. To delete only part of it, remove it in the app (a photo, your number, a class, a friend, a check-in), or email and say what to delete.

How long things are kept

As long as your account exists, unless you delete them sooner (a photo, your number, a class, a friend). Sign-in codes last 10 minutes, and a number waiting for a code that couldn't be sent is kept 30 days at most. Cloudflare keeps the database's own recovery history for 30 days, and occasional private backups are made to recover from mistakes; an account deleted in the app isn't in any made after.

Changes

If this page changes, the date at the top changes too, and anything important is said in the app.