Privacy policy

Version v0.1-draft · Proposed effective date 2026-10-26 · Consent version recorded in the app 2026-10-26-draft

This policy explains what the Hoof app (“Hoof”, “we”) collects, why, who else receives it, how long we keep it and what you can do about it. It covers the Hoof iOS and Android apps and this website.

For counsel: name the legal entity that acts as data controller, its address and commercial registration, and confirm every section against the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

1. What we collect

Account

Your Saudi mobile number, used to sign in with a one-time code sent by SMS. We do not use passwords.
Your name, the language you choose, the role you pick during onboarding, your stable’s name and its city.
Your settings: height unit, default reminder lead time, notification toggles, sound and quiet hours.

What you and your team enter

Horses: names, photos, breed, colour, sex, date of birth, height, microchip and passport numbers, status.
Health records, vet and farrier visits, medications and doses, feed plans and their history, feed and medication ticks, calendar events and reminders, show jumping levels and results, pinned notes and contacts you add (for example a vet’s name and phone number).
Documents and attachments you upload (images and PDF files, up to 20 MB each).
The activity log of who changed what and when on each horse.

Team and invites

When you invite someone we store their mobile number, the role you give them and whether the access covers your whole stable or one horse.

Devices and notifications

A push notification token for each device you sign in on, its platform (iOS or Android) and app version.
The notifications we send you, kept in your in-app inbox.

Subscriptions

Your plan, its period and status, and store transaction identifiers that RevenueCat sends us. We never see or store your card or payment details; payments are handled by Apple or Google.

Consent and security records

Which version of this policy and the terms you accepted, and when (the version is shown at the top of this page), plus your optional choices for notifications and offers.
Sign-in records: the time, your IP address and a device identifier, used for rate limiting and to stop abuse. One-time codes are stored only in hashed form and expire after 5 minutes.

This website does not use cookies, analytics or tracking scripts. The app contains no advertising trackers, and we do not sell your data.

2. How we use it

To create your account, sign you in and keep it secure.
To run the service: show your horses and records to you and to the team members you allow, send reminders (vaccinations, deworming, dental, farrier, documents, feed times, medication doses) and other notifications you turned on.
To show a heat alert from May to September using the daily forecast for your stable’s city (you can turn it off).
To manage your free trial and subscription and to apply read-only mode when a plan ends.
To answer you when you contact support.
To send offers and news only if you opted in; you can opt out at any time in the app.

For counsel: state the legal basis under the PDPL for each purpose (consent, contract, legitimate interest, legal obligation).

3. Who can see your data inside Hoof

As a horse’s owner you see everything about your horses, and you decide who is on your team.
Team members see only the horses they were given access to, and only what their role allows. For example, a groom does not see documents or contacts, and a farrier sees only hoof-related health records. These rules are enforced by our server.
The owner and the team of a horse can see the names and roles of the people working on it, and the activity log of changes.
If you work on horses owned by someone else, that owner controls those horses and their records.

4. Service providers

We use these providers to run Hoof. They process data on our behalf and only for the purpose listed.

Cloudflare — hosting of our servers, database (Cloudflare D1) and files (Cloudflare R2). Files are private and are only reachable through short-lived links after a permission check.
Authentica — sends the SMS sign-in code. It receives your mobile number and the code.
Expo, Apple Push Notification service and Google Firebase Cloud Messaging — deliver push notifications to your device. They receive your device token and the notification text.
RevenueCat, Apple App Store and Google Play — subscriptions and purchases. RevenueCat receives your Hoof user ID and your store purchase records; Apple and Google handle payment.
Open-Meteo — weather forecasts. It receives only the location of your stable’s city, never your name or phone number.

For counsel: some providers may store or process data outside Saudi Arabia. Confirm the PDPL cross-border transfer basis and list the countries.

5. The free trial rule

The 14-day free trial is available once per mobile number. To enforce this, we keep a one-way hash of your mobile number, and the date your trial was used, even after you delete your account. The hash cannot be turned back into your number and is used for nothing else.

6. How long we keep data

Account data and the content you enter: while your account exists.
Expired one-time codes and invites: deleted or made unusable after they expire (5 minutes for codes, 14 days for invites).
When a plan ends, nothing is deleted: your horses become read-only and you can still view, export and delete.
After account deletion: only the hashed mobile number for the trial rule. Database backups may keep deleted data for a limited time before they are overwritten.

For counsel: confirm the backup retention period (Cloudflare D1 point-in-time recovery) and any legal retention duties.

7. Your rights and choices

Export your data

In the app, go to Account → Export my data. You get a ZIP file with CSV and PDF files and your attachments. It contains only your own account and your own horses; horses you work on for other owners are not included.

Delete your account

In the app, go to Account → Delete account and type the confirmation word. Deletion is permanent and removes:

your account, your stable and the horses you own, with all their records, feed plans, calendar, results and documents, and all your uploaded files;
your sessions and push tokens, so you are signed out on every device;
your membership of other people’s teams.

It does not delete horses owned by other people, even if you added records to them; those stay with their owners. It also does not cancel a store subscription: cancel your subscription in the App Store or Google Play settings, because deleting your account does not stop auto-renewal.

Other rights

You can correct your details in the app, change notification and marketing choices at any time, and contact us to ask about, correct or delete your data at support@alialnujaidi.com.

For counsel: list the data subject rights under the PDPL, response times, and how to complain to the Saudi Data and AI Authority (SDAIA).

When you sign up you must accept this privacy policy and the terms of use. Notifications and offers and news are optional. We record each consent with its version and time. If we change this policy in a way that matters, we will show the new version in the app and ask you to accept it again.

9. Children

Hoof is meant for adults who own or care for horses. The account holder must be old enough under Saudi law to agree to these terms.

For counsel: set the minimum age.

10. Security

Data is encrypted in transit. Access is checked on every request against the horse’s team and roles. Sign-in codes and refresh tokens are stored hashed, sign-in attempts are rate-limited, and files are private.

11. Contact

Questions or requests about your data: support@alialnujaidi.com.