Haritta Privacy Policy
1.Who we are
Haritta is a location and community app operated by Radix Software LLC, a limited liability company organized in the State of Wyoming, United States ("Haritta", "we", "us", or "our"). We are the controller responsible for your personal data.
If you have any questions about this Policy or how we handle your data, contact us at privacy@haritta.com.
2.Scope
This Policy explains what personal data we collect when you use the Haritta mobile app and related services, why we collect it, how we protect it, who we share it with, and the choices and rights you have. It applies to all users of Haritta.
3.Information we collect
a) Phone number. Haritta accounts are created and verified with your mobile phone number. We store your phone number only in encrypted form, together with a one-way cryptographic index that lets us look up an account without keeping the number in readable text.
b) Profile information. You may add a username, display name, email address and a profile picture. Providing an email is optional. Your profile picture is taken from your camera or photo library only when you choose to add one.
c) Contacts (contact discovery). If you allow access to your contacts, Haritta helps you find people you already know who use the app. We do this with a privacy-preserving matching technique: the phone numbers in your address book are transformed into irreversible cryptographic values on your device before anything is sent to us. We do not upload or store your address book in readable form, and we cannot recover the original numbers from what we receive.
d) Location. With your permission, Haritta accesses your device location, including precise location and, where you enable it, location in the background. Location is used to show you on the map, to power live location and map features, and to let you share places and content tied to a location. You can turn location permission on or off at any time in your device settings; some features will not work without it.
e) Device information. We collect basic information about the devices on which you use Haritta, such as device type, brand and model, operating system, app version and language. Each of your devices generates a cryptographic key pair; the public key is registered to your account so that certain data can be protected end to end. We also use device integrity/attestation signals to detect fraud and abuse.
f) Content you create. We store the content you create and share in the app, such as map spots, features, folders, posts, tags, and the communities you create or join, along with the sharing and permission settings you apply to them.
g) Calls and messages. Haritta supports voice and video calls between users. Calls are transmitted using encrypted real-time connections. We process the technical information needed to set up and route a call (such as connection and signaling data). Certain content and data are protected with keys held on your devices, and where that protection applies we cannot read the content.
h) Usage, session and technical data. When you use the app we process technical data such as your IP address, session identifiers and general device/app information needed to keep you signed in, secure your account and operate the service.
i) Diagnostic and log data. To keep the app reliable we collect diagnostic logs, such as error and event reports containing a session identifier, platform, operating system, app version and, where relevant, your user identifier.
j) Subscriptions and purchases. Premium subscriptions are sold and processed through the Apple App Store and Google Play, managed on our behalf by RevenueCat. Your payment is handled by the app store; we do not receive or store your credit card or full payment details. We receive purchase and subscription status (such as plan, start and expiry) needed to unlock and manage your subscription.
4.How we use your data
We use your personal data to:
- create and secure your account and verify your phone number;
- provide the core service: maps, location, communities, shared content, calls and related features;
- help you discover contacts who use Haritta, when you enable it;
- operate subscriptions and premium features;
- keep the service safe, prevent fraud and abuse, and enforce our Terms;
- diagnose problems, improve reliability and develop new features;
- comply with legal obligations and respond to lawful requests.
Where the law requires a legal basis (for example under the EU/UK GDPR), we rely on: performance of our contract with you (to provide the service you request); your consent (for example for access to contacts and location, which you can withdraw at any time); our legitimate interests (to keep the service secure and improve it); and compliance with legal obligations.
5.How we share your data
We do not sell your personal data. We share data only as described here:
- Other users. Content you choose to share, your profile (subject to your privacy settings) and your communities are visible to the users and communities you share them with, according to the permissions you set.
- Space names. The names of spaces (communities, hubs, groups and channels) are always public: they can appear in search results, including as the path shown above a public space beneath them. The only way to keep the name of a space out of search results is to make sure that neither the space itself nor any space beneath it is marked as public.
- Service providers. We use trusted providers to run Haritta, including Twilio (to send SMS verification codes), Mapbox (to provide maps), RevenueCat together with Apple and Google (to process subscriptions and, when you ask Apple for a refund, to pass on the information about your use of the app that Apple asks for to review it), a weather data provider, and cloud hosting and infrastructure providers. They process data on our behalf and as we instruct, with two exceptions: Apple and Google handle payments and refund decisions under their own terms and privacy policies, and if you turn on "Share usage data" in the map settings (off by default), Mapbox processes your location and usage data to improve its own maps and services under its own privacy policy.
- Legal and safety. We may disclose data where required by law, to respond to lawful requests, or to protect the rights, safety and security of our users, the public or Haritta.
- Business transfers. If Haritta is involved in a merger, acquisition or sale of assets, your data may be transferred as part of that transaction.
6.Location in more detail
Some features rely on precise and background location, for example live location sharing and location-based content. We only access location after you grant permission, and background access only if you additionally enable it. You remain in control and can revoke this permission in your device settings at any time.
7.Contacts in more detail
Contact discovery is optional and only runs if you grant contacts access. The matching is performed so that we never receive your contacts' phone numbers in readable form. We use the result only to tell you which of your contacts already use Haritta.
8.Data retention
We keep your personal data for as long as your account is active and as needed to provide the service. When you delete your account, we delete or irreversibly anonymize your personal data within a reasonable period, except where we must keep certain information to comply with legal obligations, resolve disputes or enforce our agreements. Diagnostic logs are kept only for a limited period. We keep the phone numbers of suspended or closed accounts in a one-way encrypted (irreversible) form, even after the account is deleted, to prevent a decision from being bypassed with a new account. We keep records of administrative actions (who did what and when, without names, phone numbers or message texts) for one year.
9.Security
We take security seriously. Your phone number is stored encrypted, transport between the app and our servers is encrypted, and certain data is protected using keys held on your own devices so that it cannot be read by us. No method of transmission or storage is completely secure, but we work to protect your data using appropriate technical and organizational measures.
10.Your rights
Depending on where you live, you may have rights to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. If you are in the European Economic Area or the United Kingdom you have these rights under the GDPR; if you are in California you have rights under the CCPA/CPRA (including that we do not sell your personal data); if you are in Türkiye you have rights under the KVKK.
You can manage much of your data directly in the app, including editing your profile and privacy settings and deleting your account. To exercise any right or ask a question, contact us at privacy@haritta.com. You also have the right to complain to your local data protection authority.
11.International transfers
Haritta is operated from the United States and uses providers that may process data in other countries. Where we transfer personal data internationally, we take steps to ensure it receives an appropriate level of protection as required by applicable law.
12.Children
Haritta is not intended for children under 13, and in some regions a higher minimum age applies (for example 16 in parts of the European Economic Area). We do not knowingly collect data from children below the applicable age. If you believe a child has provided us with personal data, contact us and we will delete it.
13.Changes to this policy
We may update this Policy from time to time. When we make material changes we will update the "Last updated" date and, where appropriate, notify you in the app. Your continued use of Haritta after an update means you accept the revised Policy.
14.Contact US
Radix Software LLC
Wyoming, United States
Email: privacy@haritta.com