HoofBeat Technology

HoofBeat Technology

Privacy Policy

What MIRBAT records, why it records it, how long it is kept, and what you can ask us to do with it.

Effective date: 2026-08-26 · Data controller: HoofBeat Technology, State of Qatar

What MIRBAT is

MIRBAT is a stable-management and equine professional-marketplace application. Facilities manage animals, staff, feeding, training, health, inventory and finances; professionals (trainers, jockeys/riders, veterinarians, farriers) maintain profiles, bookings, invoices and ratings.

Data we collect

  • Account: email address, display name, preferred language, optional phone number, sign-in method (email/password, Google, or Apple), optional two-factor (TOTP) enrollment state.
  • Professional profiles (only what you choose to publish): role, bio, specializations, languages, service area, experience, rates, availability.
  • Facility & employment data entered by facilities: memberships, roles, staff records, task activity, salary plans and payslips (visible to facility owners/admins and to you).
  • Financial records: invoices, payments, bookings, tips, subscriptions and payout account details you provide (bank/IBAN or wallet reference — displayed masked everywhere).
  • Verification signals: email verification, optional identity/credential/facility verification STATUS. We do not store identity documents.
  • Content: photos you upload (e.g. animal profiles), reports you file, ratings you submit.
  • Records we keep automatically: audit and security logs of significant actions.

We do not collect precise location, contacts, advertising identifiers, or analytics profiles, and we use no third-party advertising or analytics SDKs.

Voice and the AI assistant (added 2026-08-17 — this draft predated the feature). When you use MIRBAT AI's voice mode, your device's microphone is recorded and the audio is sent to our AI provider (Google, Gemini Live) to be transcribed and answered. MIRBAT does not store the recording; what is retained is the resulting text and the usage record used to meter AI credits. Voice mode is user-initiated — the microphone is not open otherwise. The provider's own retention terms govern what happens to audio after it reaches them, and that is a HoofBeat Technology contract question rather than something this policy can assert.

How data is used

To operate the service (authentication, facility operations, marketplace transactions, notifications), to protect users (verification, moderation, impersonation protection, audit trails), and to meet legal obligations (financial record-keeping). We do not sell personal data.

Sharing

  • Within your facilities according to your role and server-enforced permissions.
  • With transaction counterparties (e.g. the other party to an invoice, booking or rating).
  • Public directory: only the professional-profile fields you set visible; contact details are never published and are shared only under your field-level privacy settings.
  • Infrastructure processor: Supabase (hosted database/authentication) under its DPA.
  • No advertising or data-broker sharing of any kind.

Retention & deletion

See the Data-Retention Schedule. You can export your data and request account deletion in-app (Account → Privacy & data) or by writing to support@hoofbeat.app. Deletion begins a 7-day cooling-off period, then removes personal data and anonymizes your identity, while records that must be kept (e.g. counterparties' invoices, append-only ledgers, safety/audit logs) are retained per the schedule. Facility owners must transfer or wind down ownership first.

Security

Row-level security on every table, server-side authorization for every action, encrypted transport (HTTPS), session tokens in the device keychain/keystore, masked display of financial references, optional TOTP two-factor for high-risk actions.

Your rights

Access, export, rectification, deletion, and objection requests: in-app tools or support@hoofbeat.app. In the app: Profile → My account → Privacy & data offers Export my data and Delete account; other requests are handled by writing to us. Where local law grants you further rights over your personal data, this policy does not limit them.

Children

MIRBAT is a professional tool for stable businesses and equine professionals. It is not directed to children and is intended for users aged 18 or over, which is also the target age group declared on the store listing. We do not knowingly collect data from children.

Contact

HoofBeat Technology · State of Qatar · support@hoofbeat.app