HONOR SPACE · OPEN ENLIGHTENMENT LLC

Privacy policy

Updated November 2, 2026 · Private pilot

Honor Space is operated by Open Enlightenment LLC. This policy covers the Honor Space app, its account service and this website. Contact [email protected] or use our support form for privacy questions.

Information handled by the service

Account details: email, public username, display name, client or practitioner role, salted password hash, account creation time and account status.
Practitioner profile: availability, call rate and question rate. Signed-in clients can find a practitioner by username. Your email and password hash are not part of that profile.
Private conversations: questions, replies, sender and practitioner references, timestamps and question status. Messages may contain information you choose to share, including health-related information. Do not submit sensitive medical records, passwords or card details.
Usage and billing: agreed rate snapshots, spending-limit consent, answered-question usage, monthly invoices and practitioner allocations. The current pilot records unpaid usage; live payment collection, payouts and live calls are disabled.
Security and account operations: hashed session and recovery tokens, expiry times, login-attempt limits, deletion requests and operator audit records. Hosting systems may also process IP addresses, browser information and request logs for delivery and security.
Support: your reply email, chosen topic and message are sent through Joomla's configured email service to the support mailbox. Please keep sensitive information out of support messages.

Purpose, access and sharing

We use these records to operate accounts, deliver conversations to the intended participants, display rates and usage, maintain security, and handle support and deletion requests. Your conversation partner receives the messages you send them. Authorized operators administer accounts and fulfill requests. Hosting and email service providers process the data needed to deliver those services. We may disclose records when required by law. The supplied pilot has no advertising or advertising SDK integration, no contact-list upload, no Health Connect integration, and no production audio recording feature. Candidate native calling builds request microphone access only for audio; production Talk calling remains disabled pending service and device verification. Microphone access can be denied in Android settings.

Optional communications preview

Nextcloud Talk is the selected self-hosted communications candidate, but production Talk and web Talk audio are not enabled. If a separately verified preview is enabled, its communications service may process private conversation-room identifiers, call invitations, signalling, temporary media-session credentials and network connection details needed to relay audio. Honor Space keeps provider credentials on the server and limits access to the intended participants. A preview call is unbilled. We will update this policy to name the actual installed services and retention arrangements before enabling them for users. No current claim of live calling or provider acceptance is made.

Security and storage

The production service requires HTTPS. Passwords are salted and hashed; session and recovery secrets are stored as hashes on the server. Browser sign-in uses a restricted session cookie; native builds use a device-secured session token. Server data is stored in a private database outside the public web directory. These controls do not guarantee absolute security. Messages are not represented as end-to-end encrypted.

Cookies and website content

Joomla may use a session cookie for website forms. Honor Space browser sessions use a separate app cookie. Opening the workspace loads the app from its own subdomain; enabling embedding also loads it inside this website. The supplied template adds no analytics or advertising scripts. Other Joomla extensions or hosting services may have separate data practices and must be disclosed if enabled.

Retention and deletion

Active account and conversation data is held until deleted through the account process. Unanswered questions expire after 48 hours; expiry stops their pending charge and does not itself erase their text. Session and password-recovery credentials have expiry periods. You can request account and associated-data deletion without installing the app.

Eligible pilot accounts can be erased from the active database by the operator, including profile, sessions, recovery records, consent and associated questions and replies. This also removes those conversations from the other participant's workspace. Accounts with financial records or linked communications-provider identities or rooms require a separate retention and cleanup review; the current erasure tool refuses them rather than falsely claiming deletion. Operator accounts require transfer or revocation of operator access first. Support will explain any records that must be kept and the applicable reason and period.

Backups are separate copies. The current software does not automatically erase or expire backups, support mail or hosting logs; operator action is needed. We do not claim that active-database erasure removes every copy. Backup expiry, financial retention and restore-time reapplication of deletion must be finalized before the service opens beyond its private pilot. Request an update from support about your particular request.

Your choices and updates

You can request access, correction or deletion through support. We verify account ownership before disclosing or erasing private information. The service is for routine practitioner communication, not emergencies, diagnosis or medical-record storage. Material changes to providers, data collection or billing will require an updated policy and any applicable consent before those features are enabled.