Privacy policy
Consent that ends by itself.
Halqa's whole design rests on one idea: nothing about you moves unless you moved it, and most of what you share has an ending written into it before it starts.
Last updated 14 August 2026
The short list of what Halqa holds.
To have an account
A telephone number, verified by a one-time code. A name you choose. Your age. Nothing else is required.
Where you are
Your colony, and an address code if you make one. A precise position only while you are sharing it, and only with whoever you shared it with.
What you write
Posts, messages, offers, orders and the pictures attached to them.
Your codes
HQ- a home address · HB- a shop address · HP- a person · HS- a shop.Your personal code is not your address, is not your number, and opens nothing you have not already made visible. You can change it at any time.
Identity documents
Only in three places: a suspected second profile, rishta, and registering a vehicle to carry passengers. Nowhere else.
Searches
A search Halqa could not answer is kept as words, so the gap can be filled — the words, never the person.
Visiting the website
One row per page view: the page, your timezone, your browser's language, and a random number your browser keeps so visitors can be counted once.Never your address, never your name — the timezone answers 'which country' and nothing more is asked.
A suggestion you send
What you wrote, any picture you attached, and a scrambled fingerprint of where it came from so that six in ten minutes is the limit.The fingerprint is not an address and cannot be turned back into one. All of it is deleted with the suggestion.
The four that are not negotiable.
None of these happen, on any plan, at any time
- Nothing is sold. Not your data, not your number, not your address, not a list of who you know.
- Nothing is shown to an advertiser — there are no advertisers. A shop promotes itself with a post, not an ad bill.
- Nothing is used to train anything. Your posts, pictures and messages are not training data.
- No number is ever shown. Not in a chat, not in a call, not in an order, not to a shopkeeper, not to a driver.
Halqa also never shows whose circle somebody is in. Connection lists are not exposed to anybody, in any view.
Nothing is shared until they say yes.
A person's live position is never shared by anybody but that person, and the person being asked — not the one asking — chooses how long it lasts.
Four lengths, and only four
One look, which closes by itself in two minutes · one hour · until I get there · until I stop it.
Who decides
The person being asked. The asker cannot set the length and cannot extend it.
Ending it
Either side, at any moment. When a sharer stops, the other side sees the dot disappear — it does not quietly stop moving.
Saying no
A refusal is never reported as a refusal. Nothing is sent except that the ask is closed, and the same person cannot ask again for 24 hours.So that nobody is ever the one saying no twice.
Shops
A fixed shop's address is public on purpose — that is what a shop is. A moving cart is dark by default and must be asked, and may answer with a position, an ETA, its regular round, or not now, with no reason given and none asked for.
Your home
A permanent home code you can revoke in one tap, or a day pass that dies at its hour. The day pass is the default.
The call goes through Halqa, so the number does not.
Numbers
Never shown, either way. A shopkeeper does not learn a woman's number because she ordered atta.
Who may ring you
Six circles, and you set them: family · friends · all connections · whoever I am dealing with · anybody in my colony · nobody at all. Strangers are off by default.
A call needs a reason
A connection, or the live order, job or trip you are the other side of. Not because somebody opened your circle.
It ends when the reason ends
Two hours after that order or trip closes, so does the line.
How it travels
Directly between the two telephones where the connection allows it (WebRTC, encrypted in transit by that protocol), with a masked line as a fallback on weak data.
Messages
Carried over an encrypted connection and stored on Halqa's servers so they reach you on your next telephone. They are not end-to-end encrypted today, and this page will say so until they are.
A number that never calls itself proof.
Halqa scores how likely a photograph is to have come from a camera rather than a generator. It reads four things — the file's content credentials, its camera markings, its shape, and the sensor grain in flat areas of the image.
Where it happens
Inside your telephone, the moment the picture is chosen. The picture is not sent anywhere to be checked.
No face is read
Only the file and its grain. Nothing about a face is processed by the score.
What it claims
An estimate from a handful of signals. Not proof. Ask for a second photograph if it matters.
What proves nothing
A missing generator credential. Most generated images carry none, and stripping one is trivial — so its absence is not evidence of anything.
Three roads in, and Halqa names which one was used.
By a code
The person holds up their own code and you read it. The safest, and the only one that cannot be done to somebody. Nothing is recorded and nothing is sent — the code is read inside the page.
By face
Off for everybody until they switch it on. If they have, they are always told who looked — and there is no setting anywhere that turns that message off.
In an emergency
Only while an alarm is live, or when two family members have switched it on. One relative acting alone is refused: that is exactly how somebody gets found who did not want to be.
What an emergency returns
Less than an identity — a way to reach the family, never a name. The finder is told plainly that they have not been given a name or an address.
How long
A family's grant on somebody's behalf expires after 48 hours and does not renew itself. Every look is logged.
It whispers to a mother. It does not shout at a street.
Who sees a child
Her named guardians, and nobody else. Never the colony, never a shop, never a neighbour — and a driver carrying her is not a guardian.
Permissions to roam
Set with the parents' shared PIN, in three forms — this road only, inside a circle, or anywhere for now — and every one of them ends by itself.
Allowing is not switching off
A permission raises the distance she may go. It never stops the tracking.
A child's help button
Goes to the guardians and to nobody else in the colony.
Pictures inside a home
A picture from inside a home never leaves the home. If an intrusion alarm goes out, the alarm travels and the picture stays.
Nothing public, and no private line.
Who can see a card
Only a family that has a live rishta profile of its own. Searching the word is not enough — the gate is a live profile and nothing else.
Going live
The plain facts, a named guardian, the person's own signature and the guardian's approval. Missing any one and it stays a draft. Silence is never approval.
The two people
Are never introduced. Halqa introduces the families. There is no private line between the two people at any point.
Photographs
Hidden, shown after connection, or open. The default is the middle one, so a family that never opens the setting is never accidentally on the open card.
The deeper details
Family, income, housing, children, health — these open for both sides in the same moment. Never one first, never one alone.
Who looked
How many, never who. A card shows a count of families, once per family per day, and your own visits are not counted.
Your shortlist
Kept on your side and silent. There is nothing on their card that could count it or reveal it, and removing one is as quiet as adding it.
What you take down, goes down.
Where it lives
On managed Postgres infrastructure (Supabase), with row-level rules so a row is readable only by the people it belongs to.
Deleting a post
Its pictures and documents go with it.
Removed content
Nothing is kept beyond what the law of that country requires.
Your account
You may see what Halqa holds about you, correct it, or close the account and take the data with it.
Third parties
Halqa draws its own stickers rather than fetching somebody else's, specifically so that nothing is fetched from another server as you scroll, and nobody is counted.
Asking
Write to [email protected], or use Support.