Privacy Policy

Effective date: March 20, 2026

Thank you for using Hokan (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the App.

1. Summary

Hokan is a mobile application that helps you save, organize, and search video links from platforms such as TikTok, YouTube, Instagram, and Facebook. The App stores video link metadata (titles, thumbnails, authors, durations) on a cloud-hosted server so your collection syncs across devices. Hokan does not download, host, or store any actual video content — only the links and their associated metadata.

2. Information We Collect

We collect the following types of information:

Account information

  • Email address and password (stored as a bcrypt hash, never in plain text) collected at registration.
  • Optional display name that you may set in your profile.

Video link data

  • Video URLs you share with the App via your device's share sheet or paste manually.
  • Automatically extracted metadata: video title, author/creator name, thumbnail URL, video duration, and platform video ID.
  • User-generated data: personal notes, favorite status, and category assignments you create within the App.

Transcript data

For YouTube videos, captions and transcripts may be fetched from YouTube to enable transcript search within the App. These transcripts are stored on our server to power the search feature.

App preferences

  • Theme preference (light, dark, or system) stored locally on your device via secure storage.
  • Filter and sort preferences stored in app memory only and not persisted to our server.

Authentication tokens

Access and refresh tokens are stored in your device's secure storage (iOS Keychain or Android Keystore via Expo SecureStore) and are never transmitted to third parties.

3. How We Use Information

  • To create and manage your account.
  • To save and organize video links you share with the App.
  • To automatically fetch video metadata (titles, thumbnails, authors, durations) from platform oEmbed and API endpoints.
  • To fetch video transcripts for search functionality.
  • To sync your video collection across your devices.
  • To provide category organization, favorites, and note features.
  • To enable search across your saved videos and transcripts.
  • To remember your theme and display preferences.

4. How We Collect Information

Directly from you

Registration information (email, password, display name), video URLs shared via the share sheet or pasted manually, personal notes, category assignments, and favorite selections.

Automatically via metadata extraction

When you save a video link, our backend fetches publicly available metadata from the source platform using oEmbed APIs (YouTube, TikTok, Facebook, Instagram) and public Open Graph tags. This includes the video title, author, thumbnail, and duration. Only the video URL is sent to these services — no user data is transmitted.

Device storage

Authentication tokens and theme preferences are stored locally on your device using Expo SecureStore, which leverages iOS Keychain and Android Keystore for secure storage.

5. Sharing and Third Parties

  • Platform oEmbed/API endpoints: When you save a video, our server makes requests to YouTube (youtube.com/oembed), TikTok (tiktok.com/oembed), Facebook Graph API, and Instagram Graph API to retrieve video metadata. Only the video URL is transmitted to these platforms. No user account data is sent.
  • noembed.com: Used as a fallback proxy for metadata extraction when direct API calls are unavailable. Only the video URL is transmitted.
  • Hosting providers: Our backend API is hosted on cloud infrastructure that may process requests containing your data in the course of providing the service.

We will not sell your personal data.

6. Security

We take reasonable steps to protect your data:

  • Password storage: Passwords are hashed using bcrypt before storage and are never stored in plain text.
  • Token storage: Authentication tokens are stored in platform-specific secure storage (iOS Keychain, Android Keystore via Expo SecureStore).
  • Transmission: All API communication uses HTTPS/TLS encryption.
  • Authentication: JWT-based authentication with access and refresh token rotation.
  • Rate limiting: Applied to prevent abuse of the API.
  • Security headers: Standard security headers are applied to all responses.

Note: No system is completely secure. If you have specific security concerns, please contact us.

7. Data Retention

  • Account data and your video collection are retained as long as your account is active.
  • Local data (authentication tokens, theme preferences) persists on your device until you sign out or uninstall the App.
  • When you delete your account, all associated data — including account information, saved videos, categories, notes, and transcripts — is permanently deleted from our servers.
  • Metadata cached from third-party platforms is deleted along with the associated video record.

8. Children

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from a child under 13, please contact us and we will take steps to delete the information.

9. Your Choices and Rights

  • Access your data: View all saved videos, categories, and account information within the App.
  • Edit your data: Update your display name, modify notes, change categories, and toggle favorites at any time.
  • Delete individual records: Remove individual saved videos from your collection within the App.
  • Delete your account: Use the "Delete Account" option in the Profile screen to permanently delete your account and all associated data. This action is irreversible.
  • Sign out: Sign out to clear local tokens and session data from your device.
  • GDPR/CCPA rights: Users in applicable jurisdictions may request data access, correction, portability, or erasure by contacting us at the email address below.

10. International Transfers

The App and its services may transfer data across borders for the purposes described in this policy. By using the App you consent to such transfers.

11. Changes to This Policy

We may update this policy from time to time. We will post the updated Privacy Policy with the new effective date. If we make significant changes, we will make an effort to notify users via the App.

12. Contact Us

If you have questions about this Privacy Policy or want to request access, correction, or deletion of your data, please contact: