Privacy Policy

Effective date: 2026-08-26 · Data controller: HoofBeat Technology, State of Qatar

MIRBAT is a stable-management and equine professional-marketplace application. Facilities manage

animals, staff, feeding, training, health, inventory and finances; professionals (trainers,

jockeys/riders, veterinarians, farriers) maintain profiles, bookings, invoices and ratings.

Account: email address, display name, preferred language, optional phone number, sign-in method (email/password, Google, or Apple), optional two-factor (TOTP) enrollment state.
Professional profiles (only what you choose to publish): role, bio, specializations, languages, service area, experience, rates, availability.
Facility & employment data entered by facilities: memberships, roles, staff records, task activity, salary plans and payslips (visible to facility owners/admins and to you).
Financial records: invoices, payments, bookings, tips, subscriptions and payout account details you provide (bank/IBAN or wallet reference — displayed masked everywhere).
Verification signals: email verification, optional identity/credential/facility verification STATUS. We do not store identity documents.
Content: photos you upload (e.g. animal profiles), reports you file, ratings you submit.
Records we keep automatically: audit and security logs of significant actions.

We do not collect precise location, contacts, advertising identifiers, or analytics profiles,

and we use no third-party advertising or analytics SDKs.

Voice and the AI assistant (added 2026-08-17 — this draft predated the feature). When you use

MIRBAT AI's voice mode, your device's microphone is recorded and the audio is sent to our AI provider

(Google, Gemini Live) to be transcribed and answered. MIRBAT does not store the recording; what is

retained is the resulting text and the usage record used to meter AI credits. Voice mode is

user-initiated — the microphone is not open otherwise. The provider's own retention terms govern what

happens to audio after it reaches them, and that is a HoofBeat Technology contract question rather than

something this policy can assert.

To operate the service (authentication, facility operations, marketplace transactions,

notifications), to protect users (verification, moderation, impersonation protection, audit

trails), and to meet legal obligations (financial record-keeping). We do not sell personal data.

Within your facilities according to your role and server-enforced permissions.
With transaction counterparties (e.g. the other party to an invoice, booking or rating).
Public directory: only the professional-profile fields you set visible; contact details are never published and are shared only under your field-level privacy settings.
Infrastructure processor: Supabase (hosted database/authentication) under its DPA.
No advertising or data-broker sharing of any kind.

See the Data-Retention Schedule. You can export your data and request account deletion in-app

(Account → Privacy & data) or by writing to support@hoofbeat.app. Deletion begins a 7-day cooling-off

period, then removes personal data and anonymizes your identity, while records that must be kept

(e.g. counterparties' invoices, append-only ledgers, safety/audit logs) are retained per the

schedule. Facility owners must transfer or wind down ownership first.

Row-level security on every table, server-side authorization for every action, encrypted

transport (HTTPS), session tokens in the device keychain/keystore, masked display of financial

references, optional TOTP two-factor for high-risk actions.

Access, export, rectification, deletion, and objection requests: in-app tools or

support@hoofbeat.app. In the app: Profile → My account → Privacy & data offers Export my data and

Delete account; other requests are handled by writing to us. Where local law grants you further

rights over your personal data, this policy does not limit them.

MIRBAT is a professional tool for stable businesses and equine professionals. It is **not directed to

children** and is intended for users aged 18 or over, which is also the target age group declared on

the store listing. We do not knowingly collect data from children.

HoofBeat Technology · State of Qatar · support@hoofbeat.app