HoKoJaHoKoJa
Terms of Service β†’
πŸ”’ Privacy Policy

Your Privacy Matters

Last updated: 26 April 2026 Β· Effective: 26 April 2026

This Privacy Policy explains how HoKoJa Ltd ("HoKoJa", "we", "us", "our") collects, uses, shares, and protects your personal information when you use our dating application and website at www.hokoja.com. By using HoKoJa, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Overview

HoKoJa is an exclusive, invitation-only dating platform. We are committed to protecting the privacy of all our members. We collect only the data necessary to provide a safe, personalised, and effective matchmaking experience.

This policy applies to all users of the HoKoJa mobile application and website. It complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

Our data controller is: HoKoJa Ltd β€” contact us at info@hokoja.com.

2. Data We Collect

We collect different types of data depending on how you interact with HoKoJa:

TypeExamplesPurpose
Personal InformationName, age, gender, email address, profile photos, biographyAccount creation, profile display, and identity verification
Location DataGPS coordinates, city, region, countryDistance-based matching and profile discovery
Usage DataSwipes (likes/passes), matches, messages sent, features used, session durationImproving matching algorithms and personalising your experience
Device InformationIP address, device type, operating system, browser type, unique device identifiersSecurity monitoring, fraud prevention, and app performance
Payment InformationBilling name, card last four digits, billing address, transaction IDsProcessing Premium subscriptions via Revolut Pro (we do not store full card details)
Profile PreferencesLooking-for settings, age range preferences, distance radius, interest tagsFiltering and surfacing compatible profiles
CommunicationsMessages sent between members, support tickets, feedback submittedDelivering messages, resolving disputes, improving safety
Invitation DataThe invitation code used to register, referrer informationAccess control, fraud prevention, and referral tracking

⚠ Special-category data (GDPR Article 9)

Some optional profile fields may reveal special categories of data:

  • Religion (optional profile field)
  • Ethnicity (optional profile field)
  • Sexual orientation (inferable from your gender + looking-for choices)

Filling in any of these fields constitutes explicit consent (GDPR Art. 9(2)(a)) for HoKoJa to use this information solely for matching purposes. You may delete these fields at any time from your profile editor; deletion is immediate and permanent.

3. How We Use Your Data

We use your data for the following purposes, each with an appropriate legal basis under GDPR:

Matching algorithmsContract performance

To suggest compatible profiles based on your preferences, interests, location and activity.

Profile verificationLegitimate interest / Contract

To confirm that profiles are genuine and reduce catfishing and fraud.

Real-time messagingContract performance

To deliver messages between matched members in real time.

Safety & securityLegitimate interest

To detect and prevent abuse, harassment, fraud, and account takeovers.

Service improvementLegitimate interest

To analyse usage patterns and improve the app, features, and user experience.

Marketing & communicationsConsent

To send promotional emails, push notifications, and in-app messages. You may opt out at any time.

Legal complianceLegal obligation

To comply with applicable laws, court orders, and regulatory requirements.

Payment processingContract performance

To process Premium subscriptions and, where applicable, issue refunds via Revolut.

4. Data Sharing

We do not sell your personal data. We may share data only in the following limited circumstances:

Other HoKoJa members

Your public profile information (display name, age, photos, bio, interests, location) is visible to other members on the platform as part of the matching experience.

Internal sponsored content

We may show you sponsored cards in Discover based on your profile fields and (with your marketing consent) your location and interests. These are operated by HoKoJa, not third-party ad networks. No personal data leaves HoKoJa for advertising purposes.

Analytics providers

We use aggregated, anonymised analytics to understand app performance. These providers receive no personally identifiable information.

Payment processors (Revolut Pro)

Your billing information is shared with Revolut Pro solely to process payments. Revolut's own privacy policy applies to this data.

Email delivery (Resend.com)

Your email address is shared with Resend to deliver transactional emails (verification, match notifications, receipts).

Cloud infrastructure (Nhost / AWS)

Your data is stored on Nhost's infrastructure (hosted on AWS). Nhost acts as a data processor under GDPR.

Law enforcement

We will disclose data to law enforcement, regulatory authorities, or courts when required by law, or when we believe disclosure is necessary to prevent harm or illegal activity.

Business transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

About sponsored content

HoKoJa shows occasional sponsored cards within the Discover feed for users on the free tier. These are operated entirely by HoKoJa β€” we do not share your personal data with advertisers.

  • Targeting (when enabled by you in cookie preferences) is performed by us, on our servers, using only the profile fields you've made available on HoKoJa.
  • Premium subscribers see no sponsored content.
  • Personalised targeting requires your marketing cookie consent. Without that consent we may still show non-personalised sponsored cards.
  • Impression and click data is stored only as anonymised aggregates after 30 days.

6. Your Rights

Depending on your location, you have the following rights regarding your personal data. To exercise any right, email us at info@hokoja.com. We will respond within 30 days.

βœ“

Access your data

Request a copy of all personal data we hold about you.

βœ“

Correct inaccurate information

Ask us to correct any data that is inaccurate or incomplete.

βœ“

Delete your account and data

Request deletion of your account and all associated personal data. Some data may be retained for legal obligations.

βœ“

Data portability

Receive your data in a structured, machine-readable format (JSON/CSV).

βœ“

Opt out of marketing

Unsubscribe from promotional emails via the link in any email, or through Settings in the app.

βœ“

Restrict processing

Ask us to stop processing your data in certain circumstances.

βœ“

Object to processing

Object to processing based on legitimate interests, including profiling.

βœ“

Withdraw consent

Where processing is based on consent, withdraw it at any time. This does not affect prior processing.

βœ“

Lodge a complaint

You have the right to lodge a complaint with your national data protection authority.

7. Safety Standards

HoKoJa takes the safety of its members seriously. We implement the following measures:

Report & Block: Members can report and block any other member at any time. Reports are reviewed by our admin team.
Photo Verification: We encourage profile photo verification. Unverified profiles are clearly indicated.
Anti-catfishing measures: We use automated tools to detect duplicate accounts, fake photos, and suspicious behaviour patterns.
Harassment reporting: A dedicated reporting system allows members to flag abusive messages or behaviour.
Invitation-only access: Our invite code system reduces spam accounts and ensures a curated, trusted membership base.
Admin moderation: Our admin team can ban users, remove content, and escalate serious cases to law enforcement.
Data encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

Despite these measures, no online platform can guarantee complete safety. We encourage members to never share personal contact details, financial information, or meet in private locations with someone they do not know well.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law.

Data TypeRetention Period
Account & profile dataUntil account deletion, then 30 days in backup before permanent deletion
MessagesStored for 12 months after the last activity in a conversation, then deleted
Payment records7 years (legal/tax obligation)
Safety & moderation logs3 years after account closure
Device & usage logs90 days
Invitation code records2 years
Deleted account data30-day grace period, then permanently deleted (except legal holds)

You can request deletion of your data at any time via the Settings page or by emailing info@hokoja.com.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to operate HoKoJa. This section provides a full inventory of every cookie we set, its purpose, and how long it lasts. You can manage your cookie preferences at any time using our cookie consent banner or via your browser settings.

πŸ”’

Essential / Strictly Necessary Cookies

Cannot be disabled

Required for the platform to function. These cannot be turned off.

Cookie NamePurposeDuration
`session_id`Maintain user login sessionSession
`auth_token`JWT or authentication token7–30 days
`csrf_token`Prevent cross-site request forgery (CSRF) attacksSession
`user_id`Identify the currently logged-in userSession
`remember_me`Keep user logged in between visits30 days
βš™οΈ

Functional Cookies

Default ON Β· Can opt out

Improve your experience by remembering your preferences and settings.

Cookie NamePurposeDuration
`user_preferences`Theme, language, and notification settings1 year
`location_consent`Store your location permission choice6 months
`profile_setup_step`Track onboarding and profile completion progress7 days
`age_verified`Confirm user age verification (18+)1 year
`chat_settings`Message sound and display preferences1 year
`filter_preferences`Age range, distance, and gender filter settings30 days
πŸ“Š

Analytics Cookies

User choice

Help us understand how HoKoJa is used so we can improve the experience.

Cookie NamePurposeDuration
`_gat`Throttle request rate (Google Analytics)1 minute
`app_analytics`Custom user behaviour tracking90 days
`ab_test_group`A/B testing group assignment30 days
🎯

Performance / Matching Cookies

Default ON Β· Can opt out

Power the discovery and matching features of HoKoJa.

Cookie NamePurposeDuration
`swipe_cache`Cache recent swipe actions to prevent duplicates1 day
`match_queue`Store pending match data during sessionSession
`last_active`Track last activity time for online status7 days
`discovery_mode`Visible/invisible mode setting30 days
πŸ’°

Marketing Cookies

Optional Β· Off by default

Used only with your explicit consent to personalise promotions and track referrals.

Cookie NamePurposeDuration
`premium_promo`Track promotional campaigns30 days
`referral_code`Track referral or affiliate source90 days
`ad_preference`Personalised ad settings1 year

πŸ›‘οΈ Security Best Practices

All HoKoJa cookies are set with the following security attributes:

βœ…
HttpOnly β€” Prevents JavaScript access β€” protects against XSS attacks
βœ…
Secure β€” Transmitted over HTTPS only β€” never sent over plain HTTP
βœ…
SameSite=Strict β€” Blocks cross-site requests β€” prevents CSRF attacks
βœ…
Encrypted values β€” Cookie values are encrypted β€” no plain-text sensitive data stored
βœ…
Short expiry β€” Minimal durations used β€” reduces the window of exposure

We never store sensitive data in cookies β€” passwords, payment information, or personal identification data are never placed in cookie values.

πŸ“‹ Cookie Consent & Legal Compliance

πŸ‡ͺπŸ‡Ί GDPR

Required for EU users β€” we obtain explicit consent before setting non-essential cookies

πŸ‡ΊπŸ‡Έ CCPA

Required for California users β€” opt-out available for all non-essential cookies

πŸ‘Ά COPPA

Age must be verified as 18+ before any cookies are set beyond the essential session cookie

πŸͺ ePrivacy

Compliant with EU ePrivacy Directive β€” cookie banner shown on first visit

You may disable or delete cookies at any time through your browser settings or our cookie preference centre. Note that disabling essential cookies will prevent HoKoJa from functioning correctly. To withdraw consent for optional cookies, visit Settings β†’ Privacy within the app, or email info@hokoja.com.

10. Children's Privacy

HoKoJa is strictly for adults aged 18 and over.

We do not knowingly collect, use, or store personal data from anyone under the age of 18. If we become aware that a user is under 18, we will immediately suspend and permanently delete their account and all associated data. If you believe a minor is using our platform, please contact us immediately at info@hokoja.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Post the updated policy on this page with a new "Last updated" date
Send an in-app notification to all active members
Send an email to the address associated with your account
Where required by law, obtain your renewed consent before the changes take effect

Continued use of HoKoJa after the effective date of the updated policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you must stop using the service and may request account deletion.

12. Contact Us

For any privacy-related questions, data requests, or complaints, please contact us:

HoKoJa Privacy Team

⏱We aim to respond to all requests within 30 calendar days

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in your country (e.g. the ICO in the UK, the DPC in Ireland, or the CNIL in France).

Β© 2026 HoKoJa Ltd. All rights reserved.