6hands Privacy Policy
Version dated 27 July 2026. Current version: https://6-hands.com/privacy
Personal data controller: individual entrepreneur (IP) Usmanov Aleksandr Aleksandrovich, Republic of Uzbekistan, TIN 547089696, address: Zangiota tumani, Erkin SSG, Qushli MSG, Mirzaahmedova ko'chasi 8/9, 181118, Toshkent viloyati, email: support@6-hands.com.
We process personal data in accordance with the Law of the Republic of Uzbekistan "On Personal Data" No. ZRU-547 and other applicable acts.
In brief
- We do not request an email address or a phone number.
- The application has no advertising, no analytics and no third-party trackers.
- We do not sell or share your data with third parties for advertising.
- Location is shared only with your consent, is stored as a single point for 15 minutes, and does not become a location history.
- Your profile is deleted by you in the application, together with all connections, chats and coordinates.
- Data is stored on servers in the Republic of Uzbekistan.
1. What data we process
1.1. Data you provide yourself
| Data | Required | Purpose |
|---|---|---|
| Display name | required | so that your contacts recognise you |
| Username (login) | required | unique account identifier |
| Password | required | stored only as a salted hash; the original password is not accessible to us |
| Role, city, country | optional | task matcher, display on the globe |
| "About me", interests, "I can help with", "I'm looking for" | optional | task matcher and profile |
| Contact channels (Telegram, WhatsApp, Instagram, email, etc.) | optional | so that your contacts can reach you outside the app; you configure the visibility of each channel yourself: everyone, 2+ hands, 1 hand, or hidden |
We do not request an email address, phone number, date of birth, passport details, payment details or a photograph of an identity document.
1.2. Data generated through use
| Data | Retention period |
|---|---|
| Connections (who exchanged a handshake with whom) and the time they were created | until the connection or the account is deleted |
| Chat messages and the time they were sent | until the chat or the account is deleted |
| Time of last activity (last seen) | until the account is deleted |
| "Open to talk" status and its expiry time | until it expires, then cleared |
| Session token (authorisation on a device) | until you sign out of the account |
| Single-use handshake codes and replay protection | 5 minutes |
| Invitation links | until the account is deleted |
| Location: latitude, longitude, accuracy, time | 15 minutes from the moment of update; only the last point is stored |
Technical web-server logs (IP address, request time, User-Agent) are kept to the extent necessary to protect against attacks and to diagnose failures, and are retained for no more than 30 days.
1.3. What we do not do
- We do not collect your phone's contact list, calendar, photos or microphone.
- We do not read the contents of your messages for recommendations. The task matcher works on rules based on profile fields ("I can help with", "I'm looking for", role, city, interests) and is not a language model.
- We do not use advertising identifiers (IDFA, GAID) and do not build advertising profiles.
- We do not integrate third-party analytics, attribution or crash-reporting SDKs.
2. Camera and location
The camera is used only to scan the handshake QR code. The image is processed on the device; frames are not saved and are not transmitted to the server.
Location is requested only while the application is in use (when in use). No background location collection takes place. What exactly happens to coordinates:
- precise coordinates are seen only by Users at a distance of 1 hand;
- for 2 or more hands, coordinates are coarsened to approximately 200 metres;
- on the globe, both names and coordinates are hidden for dense clusters;
- one last point is stored and automatically stops being used after 15 minutes;
- you can turn off the "open to talk" status or revoke the permission in your operating-system settings at any time.
3. Who sees your data
Visibility within the Service is determined by social distance:
| 1 hand | 2 hands | 3+ hands | |
|---|---|---|---|
| Name and profile | visible | visible | hidden, only counters available |
| Precise location | visible (if enabled) | coarsened to ~200 m | not visible |
| Contact channels | per your settings | per your settings | per your settings |
| Chat | available | no | no |
Data is not transferred outside the Service, except in the cases described in Section 4.
4. Disclosure to third parties
We do not sell data and do not share it for advertising purposes. Limited disclosure occurs in the following cases:
- Hosting. The servers and the database are hosted with a provider in the Republic of Uzbekistan — Serverspace (serverspace.uz), data centre in Tashkent, Tas-IX network. The provider acts as a processor on our instructions and is not entitled to use the data for its own purposes.
- Map tiles. The "Nearby" screen loads map images from OpenStreetMap servers. In doing so, your IP address and the map area you are viewing become available to them. Your coordinates as such are not transmitted to OpenStreetMap.
- The web version and the website load fonts from Google Fonts servers, which thereby have access to your IP address. In the mobile application the fonts are embedded and no external requests are made.
- As required by law. We disclose data to the authorised bodies of the Republic of Uzbekistan only on the basis of a duly executed request and only to the extent expressly specified in it.
- On succession. Upon conversion of the individual entrepreneur into a limited liability company, the controller's rights and obligations pass to the legal successor; the conditions of processing are not made worse as a result, and Users are notified of this in the application.
5. Legal bases
- Performance of a contract with you (the Terms of Use) — for profile data, connections and messages.
- Your consent — for location and the "open to talk" status. Consent can be withdrawn at any time by turning off the status or revoking the permission in the operating system.
- Legitimate interest — for technical logs and protection of the Service against abuse.
6. Security
- Passwords are stored exclusively as a cryptographic hash with a unique salt. Recovering the original password is impossible, for us or for anyone else.
- The connection to the server is protected by TLS (HTTPS).
- Handshake codes are single-use, signed, live for 5 minutes and are protected against reuse.
- Access to the server is limited to a restricted group of people.
What we do not promise: there is no end-to-end encryption of correspondence in the current version. Messages are stored on the server in a form readable by a server administrator who has access to the database. Do not send passwords, payment details or other sensitive information through chats.
7. Your rights
You have the right to:
- obtain information about which of your data is being processed;
- correct your data — almost all profile fields can be edited directly in the application;
- delete your account and all associated data — in the application, with password confirmation;
- withdraw your consent to the processing of location data;
- lodge a complaint with us at support@6-hands.com and with the authorised personal data protection body of the Republic of Uzbekistan.
We review rights requests within 30 calendar days of receipt. Because we do not collect contact details, in order to identify the requester we may ask you to confirm ownership of the account (for example, by signing in and sending the request from within the application).
8. Deletion of data
8.1. Deletion in the application. Profile → delete account → password confirmation. A single transaction deletes: the profile and all of its fields, connections, chats and messages, the invitation link, the stored location, and sessions. You cease to be an intermediary in other Users' acquaintance chains.
8.2. What remains. Messages you have sent to a chat remain with the other party in exactly the same sense in which a sent letter remains; it is impossible to identify you from them after the account is deleted. Database backups are kept for no more than 30 days, after which deleted data disappears from them too.
8.3. Restoration is impossible. Deletion is irreversible.
8.4. If you have lost your password and cannot sign in, write to support@6-hands.com stating your username — we will delete the account, but we will not be able to restore access to it (see clause 4.2 of the Terms of Use).
9. Children
The Service is intended for persons aged 16 and over. We do not knowingly collect data of persons under 16. If you become aware of such an account, report it to support@6-hands.com and we will delete it together with all of its data.
10. International transfers
Data is stored and processed on the territory of the Republic of Uzbekistan. If you use the Service from another country, your data is transferred to Uzbekistan. The exceptions are the requests to OpenStreetMap and Google Fonts described in Section 4.
11. Changes to this Policy
We may update this Policy. A new version is published at https://6-hands.com/privacy with its date. We give notice of material changes in the application at least 14 days in advance.
12. Contacts
For any questions about the processing of personal data: support@6-hands.com
Usmanov Aleksandr Aleksandrovich, individual entrepreneur TIN: 547089696 Phone: +998 90 346-16-06 State registration certificate: No. 2478240 dated 27.07.2026 Address: Zangiota tumani, Erkin SSG, Qushli MSG, Mirzaahmedova ko'chasi 8/9, 181118, Toshkent viloyati, Republic of Uzbekistan