Hookay
hookay.eu/privacy

Privacy isn't a setting here. It's our charter.

Most apps promise privacy in their terms of service. We wrote ours down as a charter: seven articles that bind every feature we ship, every contract we sign, and every request we answer. What we don't know about you, no one can query, sell, leak, or demand.

The commitment

The Hookay Privacy Charter

Not a marketing page and not fine print — the standard we hold ourselves to, versioned and public. Every product decision is checked against these seven articles before it ships.

Privacy Charter

v1.0 · Effective 2026 · Binding for all Hookay services
ART. 01

We collect the minimum.

Every feature is built to work with the least data possible. If a feature needs more than we're willing to know, we change the feature — not the principle.

ART. 02

Your location is never precise.

Hookay works with neighborhoods, never coordinates. We will never store, display, or process your exact position — and we will never know the routes you take.

ART. 03

Your conversations are yours.

Messages are encrypted so that their content belongs to the people in the conversation. We do not read them, mine them, or train on them.

ART. 04

We never sell, share, or advertise.

No ads, no ad networks, no data brokers, no "partners." Your sexuality is not inventory. Our revenue comes from subscriptions — from you, openly.

ART. 05

Everything stays in Europe.

All of Hookay runs on European infrastructure, operated by European companies, under European law alone. No provider in our chain answers to non-EU authorities.

ART. 06

Intelligence stays on your device.

AI features run locally on your phone. There is no server fallback: if your device can't do it, we don't do it. What the AI learns about you never leaves your hands.

ART. 07

You can always leave — completely.

Deletion means deletion: full, final, and available in the app at any time. An app built to be kept must be just as easy to leave.

// Amendment rule: this charter can only ever be changed in your favor. Any revision that would weaken an article will not be made. Changes are announced in advance and versioned publicly.
The concepts

What we replaced

Each of these swaps trades an industry habit for a better idea. You'll barely notice them — which is exactly the point.

Precise location Your neighborhood You see who's around Sachsenhausen — not who's standing 230 meters away. Proximity, not tracking.
Password Passkey No password to steal, guess, or phish. Your device is the key — and only yours.
Real-name policy Your name, your call You decide what you're called and who learns more. You're verified either way.
Readable chats Encrypted conversations What you write to each other belongs to you. Not to us, not to our servers.
Cloud AI AI on your device Smart features run locally on your phone. What the AI knows about you never leaves it.
Ad profile An honest subscription No ads means no reason to track you. You're the customer, not the inventory.

What we don't know about you

The most honest privacy policy is a list of blanks.

  • Your precise location
  • Your legal name
  • The content of your chats
  • Your movements through the city
  • Your ad profile — it doesn't exist
  • What our AI thinks about you
EU Sovereignty

European by charter, not by accident

Sovereignty doesn't mean "GDPR-compliant, hosted somewhere." It means your data lives in Europe, with European companies, under European law — from the first server to the last subprocessor.

Hosted in Europe

Every server runs in the EU, operated by European companies.

European law, end to end

No provider in our chain is subject to access by non-EU authorities.

Built for your rights

The GDPR isn't a hurdle for us. It's the blueprint.

No US cloud provider. No CLOUD Act exposure. No exceptions.

Transparency

When the state comes asking

Platforms for queer people receive government requests — and how a platform handles them is a privacy feature. We publish every category of request, twice a year, in plain numbers.

How we respond

Minimal, lawful, on the record

We comply only with legally binding orders under EU law, scrutinize every request for legal validity and scope, and challenge requests that are overbroad or lack a proper legal basis.

Where the law permits, we notify affected users before any data is disclosed.

Why it's possible

Architecture limits every answer

The most important line of defense isn't legal — it's structural. Precise locations, chat contents, and movement patterns can't be handed over, because they were never collected.

A request can only ever return what exists. At Hookay, that is deliberately little.

Government Request Report

Reporting period: Jul – Dec 2025
0
Requests received from government or law-enforcement authorities
0
Requests where any user data was disclosed
0
User accounts affected by any request
0
Gag orders or non-disclosure orders in effect
// Published every six months, including reports with nothing to report. Next report: Jul 2026.
Your rights

Built in, not begged for

Your GDPR rights are features in the app — not a letter exchange with a legal department.

Access

See what we see

Available in the app at any time, complete and in plain language.

Portability

Take everything with you

One tap exports your data in an open, machine-readable format.

Erasure

Leave when you want

Full deletion, simple and final. An app you're free to keep is an app you're free to leave.