Document
Horoof privacy policy
Last updated: 2 September 2026
This page supplements the general privacy policy for Tatbeeqy apps and covers the Horoof app alone.
Introduction
Horoof is an Arabic party game played on a single device without internet, with an optional door to playing others online. Local play on your device needs no account and no connection. This page explains what leaves your device once you use online play or sign in.
The account
When you open online play or send a report about a question, the app automatically creates an anonymous account through Firebase Authentication, and that account carries no personal data about you. You may optionally sign in with a Google account to keep your name and progress across your devices. When you do sign in, we do not read your Google email, name, or photo — only the account identifier.
What leaves your device in online play
- The name and emblem you choose in the app, which other players see.
- An optional photo you upload yourself, stored with us and shown to others only in private rooms.
- Your presence in the room and your moves during a match, which are part of the match state seen by whoever is playing with you.
- Your membership of rooms and your position in the waiting queues, which players do not see.
- A random identifier the app generates for your device on first launch, together with the device model, to tell your devices apart. We read no permanent device identifier and no advertising identifier.
Sync when signed in with Google
If you sign in with a Google account, a copy of your saved matches, team names, question statistics, and settings is stored in a space belonging to your account alone, which other players cannot read. This includes your local matches. If you stay on the anonymous account, none of these records is uploaded.
Question reports
If you report an error in a question, the report reaches us along with your written note if you added one, without being linked to your account.
Crash reports
We use Firebase Crashlytics to receive crash reports when the app stops. These reports cover where in the program the fault occurred, your device model, the operating system version, the app version, and an identifier the service itself generates. They are not linked to your account or your name.
What we do not collect
We use no analytics, advertising, or marketing-tracking service. We ask for no location, camera, photo, or contacts permission. We collect no advertising identifier. There is no chat between players in the app, and there are no in-app purchases.
What stays on your device
Your saved matches, question statistics, team names, and settings are held on your device, and the question bank sits inside the app itself. If backups are enabled in Android, the app's settings may be copied to your own Google account according to your system settings — to you, not to us.
Permissions
The app requests internet and network-state access for online play and sync, and vibration for haptic feedback. Standard Google libraries add operational permissions from which no data reaches us.
Retention
A game room left without activity is deleted after five minutes, and a finished room is deleted an hour after it ends. Your name, emblem, photo, and private records remain until you delete your account.
Deleting your account
You can delete your account from inside the app: Settings, then My account, then Delete account. You can also request deletion from the account deletion request page. What is deleted and what remains is set out on that page.
Children
The app does not ask for your age or date of birth, and is not directed at children.
Service providers
We use Google Firebase for authentication, the database, and crash reporting; Cloudflare Workers to run online matches; and Google Play services for sign-in. These services are subject to their own providers' policies.
Changes to this policy
We may update this page whenever the app changes, and the last-updated date appears at the top of it.
Contact
For any question about privacy: support@tatbeeqy.com