Hadoty
PRIVACY
The complete proposed notice for adult identity, household records, story data, model processing, voice, retention, security, and privacy rights.
This notice explains how Hadoty handles information in its Android application, public website, support routes, and private services. Accounts belong to adults. Family profiles are adult-managed records and never child accounts. Hadoty is designed for supervised family use and does not knowingly invite a child to create credentials, buy a subscription, or contact support independently.
Hadoty does not request contacts, precise location, school, exact child date of birth, advertising ID, public child profile, child credentials, payment-card data, or family voice cloning. Camera and broad-storage access are outside the launch app.
Hadoty uses information to authenticate adults; create and authorize households; personalize requested private stories; generate, review and deliver approved text/media; synchronize reading and routines; provide offline packages; verify purchases; prevent abuse; secure accounts; deliver optional notifications; provide support; process reports, exports and deletion; meet legal obligations; and operate reliable services.
Depending on the country and purpose, processing relies on performance of the requested service, consent for optional voice/notifications/analytics, legitimate security and operational interests where recognized, and legal obligations. Where applicable law requires another basis or explicit consent, Hadoty must obtain it before that processing begins.
Hadoty removes emails, phone numbers, addresses, school names, account identifiers and unrelated profile details before a story task is sent to a model. Identity, account, household membership, billing records and raw voice are not placed in Gemini prompts. Owner-approved minimized story instructions and story content may be processed through Google Gemini global endpoints, which do not promise processing in Doha. Preview models remain internal-only and disabled in production.
Generated text, image and narration tasks record model, prompt, schema, safety and language versions without placing ordinary story content in operational logs. Each private draft requires adult review before approval.
Adult recipe voice is disabled unless specifically launched and consented. When enabled, recording is uploaded to encrypted temporary storage, transcribed, shown for correction and deleted immediately after transcription, with a hard maximum of one hour. Read-to-parent launch processing stays on device; Hadoty does not upload or retain the audio or a full transcript. The server may receive minimized progress, pause and assistance counters.
Hadoty does not sell personal information, use an advertising network, build an advertising profile, or provide a public community at launch. Information is disclosed only to authorized household adults, service providers acting for Hadoty, Google Play for purchases, advisers or authorities when legally necessary, or a successor under protections that preserve this notice.
The launch processor register names Google Cloud, Firebase, Google Gemini/Vertex AI, approved Google speech services when enabled, and Google Play. Exact purposes, locations and retention boundaries appear in the published subprocessors notice.
The selected application data region is Google Cloud me-central1 in Doha. Firestore, private media, tasks, and key material are designed to remain co-located there. Authentication and global provider control-plane processing may follow the provider's documented infrastructure. Minimized story content may use Gemini global endpoints under the approved boundary. Hadoty must disclose and protect cross-border processing as required by the law applicable to the adult account.
Hadoty uses encrypted transport, private server-only data access, least-privilege keyless service identities, short-lived signed media access, KMS-protected sensitive material, Android Keystore protection for offline packages, App Check/Play Integrity, rate limits, immutable audit events and adult recent-authentication gates. No service can promise absolute security. Report suspected security issues through the published support contact without sending story content or credentials by email.
An authenticated adult can review or change household/profile preferences, revoke sessions, disable optional voice/analytics/notifications, export eligible account/household data, delete a profile or household, and request account deletion. Account deletion disables access, allows seven days to cancel, then purges active authentication, application data, private media, device tokens and linked analytics within 30 days, subject to disclosed financial, security, legal and backup exceptions.
Adults may also request access, correction, deletion, restriction, objection, portability, consent withdrawal, or complaint handling where applicable. Hadoty may verify identity and household authority, and may refuse or narrow a request only with a lawful reason.
Hadoty does not ask children to create accounts and does not use family-profile information for advertising. The adult owner decides what profile details and stories are appropriate. If information was provided without appropriate adult authority, contact Hadoty for review and deletion.
Material changes receive notice where required. A new version and effective date will be published; renewed consent will be requested where law requires it. Privacy questions and rights requests may be sent to amirmolotfy@gmail.com until a verified @hadoty.com privacy address is operational.