• Account data: email address (or Google account identifier), chosen handle, display name, bio, avatar, city if you set one.
• Content: posts, comments, reactions, stories, messages, listings, events, support tickets and any media you upload.
• Wallet data: ToriCoin balance, top-ups, Hype transfers, game stakes, payout requests and the Mobile Money number you enter for withdrawals.
• Optional phone matching data: a one-way hash of your phone number and of the contacts you choose to match. Raw numbers are never uploaded.
• Technical data: device and browser information, IP address, push subscription tokens, error logs and basic usage events needed to run and secure the service.

Adding a phone number is optional and there is no SMS verification. Your number is normalised and hashed in your browser (SHA-256 with a fixed app namespace) before it leaves your device; we store only that hash. When you look for people you know, your contacts' numbers are hashed the same way on your device and only the hashes are sent for comparison. Contact lists are never stored. You are only matchable while the "let people who have my number find me" switch is on, and deleting your number removes the hash immediately.

• To provide the service you asked for — performance of a contract.
• To keep the platform safe: automated image screening, spam and fraud checks, moderation records — legitimate interests and legal obligations.
• To process payments and payouts — contract and legal obligation (anti-fraud, record keeping).
• Optional features such as contact matching, push notifications and location-based city feeds — your consent, withdrawable at any time in settings.

Service providers acting on our instructions only: our cloud/database and storage host, our Mobile Money payment provider, our push notification and email delivery providers, and the AI provider used to screen uploaded images for nudity and gore. We also disclose data when legally required or to protect people from serious harm. We never sell personal data or use it for third-party advertising.

Anonymous posts hide your handle from other users, including in comments on that post. We still keep the internal link between the post and your account so we can enforce the rules. Moderators and administrators can see it when investigating a report.

• Account and content: kept while your account exists.
• Stories: automatically deleted 24 hours after posting.
• Chat photos: kept for the life of the conversation and deleted with it.
• Moderation and payment records: kept up to 5 years where needed for legal, fraud and accounting purposes.
• Deleted accounts: content is removed or de-identified within 30 days, except records we must keep by law.

You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent for optional features. Most of this is self-service in settings; for anything else contact privacy@torihub.app and we will respond within 30 days. You may complain to your local data protection authority.

Torihub is not for children under 13, and wallet, payout and staked-game features require you to be 18 or over. If we learn an under-13 account exists we delete it.

Data is encrypted in transit, stored with row-level access controls, and private media is served through short-lived signed links. Our providers may process data outside your country under standard contractual safeguards.

Contact: privacy@torihub.app — Torihub (placeholder: your registered company name), Placeholder: your registered business address.