Hook

Privacy Policy

Effective 2026-05-08

This Privacy Policy explains how the Sex Tracker - Hook iOS app ("Hook," "the app") handles information. Hook is built and operated by Andre Suhartanto ("we," "us"), trading as Tanto Studio. You can reach us at contact@tantostudio.com.

Summary

Hook is built so that the things you log — sex, hookups, partners, photos, notes, tags, locations, dates — stay on your device. We don't run a backend. We don't store your entries on our servers because we don't have servers that hold your entries. The app uses Firebase Analytics, Firebase Crashlytics, and RevenueCat for anonymous usage statistics, crash reports, and in-app purchase processing. None of those services receive the content of what you log.

What stays on your device

Everything you put into the app is stored locally on your iPhone in a Realm database that only Hook and iOS can access. This includes:

• Hookup entries (date, time, duration, mood, location, rating, protection, notes, tags)
• Partner records (names, avatars, photos, gender, sexuality, birthdays, nationality, addresses, social handles, gallery photos and videos, opt-in cycle tracking, notes)
• Custom moods, locations, and tags you create
• App settings, language, theme, and reminder preferences

None of this is transmitted to us or to any third party. We cannot read it, recover it, or hand it over, because it never reaches us.

What leaves your device

Hook uses three third-party SDKs that send limited, anonymous information off-device. The content of your entries is never part of what they receive.

Firebase Analytics

Provided by Google. Used to understand aggregate usage so we can prioritize improvements. It collects standard mobile-app telemetry such as app open and session events, screen-view names (for example, that someone visited the Stats screen — never the contents of what's on it), app version, device model, OS version, language, and a coarse country derived from your IP address. Firebase assigns a random pseudonymous app-instance ID. We do not set any user identifier. See the Firebase privacy page.

Firebase Crashlytics

Provided by Google. Used to receive crash reports when the app crashes, so we can fix bugs. It collects the crash stack trace, app and OS version, device model, and an anonymous installation ID. We do not log entry content, partner data, or notes into crash reports. See the Firebase privacy page.

RevenueCat

Used to process the optional Hook Pro subscription via Apple's In-App Purchase system. RevenueCat assigns a random anonymous user ID and receives App Store transaction information (the product purchased, subscription status, country) so it can validate entitlements. It does not receive the content of your entries. See the RevenueCat privacy policy.

Apple also receives the standard purchase information any iOS app receives when you buy or subscribe through the App Store. That happens between you and Apple and is governed by Apple's terms.

We do not use your data to train artificial intelligence. We do not run AI on your entries.

iCloud Backup (optional, user-initiated)

Hook offers an optional iCloud Backup feature. If you turn it on, an encrypted backup of your local Hook data is written to your own iCloud account using Apple's CloudKit. The backup lives in your iCloud, under your Apple ID, encrypted by Apple. We have no access to it. If you turn the feature off or sign out of iCloud, you control the backup the same way you control any other iCloud data.

App lock

You can require Face ID, Touch ID, or your device passcode to open the app. This check runs entirely on your device through Apple's LocalAuthentication framework. We never see authentication attempts, biometric data, or unlock events.

Notifications

If you opt in, Hook can schedule local notifications on your device — for example, partner birthday reminders or STI test reminders. These are scheduled and delivered locally by iOS. We do not send push notifications from a server, and we do not know whether or when a reminder fires.

Children

Hook is not intended for, and is not directed to, anyone under 17. The App Store age rating reflects this. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided information through the app, please contact us at contact@tantostudio.com and we will take appropriate action.

Deleting your data

Because your entries live on your device, deleting the app removes them. You can also delete individual entries, partners, photos, tags, or your entire dataset from inside the app at any time. There is no separate server-side copy for us to delete.

If you've enabled iCloud Backup, removing the backup is done through iOS Settings › Apple ID › iCloud, the same way you manage any other app's iCloud data.

For data sent to Firebase or RevenueCat (anonymous telemetry, crash reports, anonymous purchase records), you can request deletion by emailing contact@tantostudio.com. Because that data is anonymous and not tied to an account we maintain, we may need additional information (such as your anonymous app-instance ID, available from a recent crash report or device support) to identify and remove it.

Your rights

Depending on where you live, you may have rights under laws like the GDPR (EU/UK), the CCPA/CPRA (California), or similar regimes — including the right to access, correct, delete, or port your personal data, and the right to object to certain processing. Because the data we hold is limited to the anonymous telemetry described above, we will work in good faith with you to honour any valid request. Contact us at contact@tantostudio.com.

How we may disclose information

We may disclose the limited information we have when required by law (subpoena, court order, similar legal process), or when we believe in good faith that disclosure is necessary to protect rights, safety, investigate fraud, or respond to a lawful government request. We do not sell your data, and we do not share it with advertisers.

Security

Your entries are stored locally and protected by iOS's app sandboxing and your device's encryption. Data transmitted to Firebase and RevenueCat is sent over HTTPS. No system is perfectly secure; we use reasonable measures to protect the information we hold.

Changes to this policy

We may update this policy from time to time — for example, if we add or remove a third-party service, or if we ship a feature that handles data differently. We'll update the "Effective" date at the top, and where the change is material, we'll surface it in the app. Continued use of Hook after changes take effect means you accept the updated policy.

Your consent

By using Hook, you consent to the handling of information as described in this Privacy Policy.

Contact

Questions, requests, or concerns about privacy: contact@tantostudio.com.