Your journal.
Your decisions.

Use Hoedex without an account, or save your journal to your account to restore it when you change phones. You decide what your friends can see.

About the upcoming version · 11 September 2026

Hoedex does not have a public download link yet. This page describes the version being tested, including private journal saving and recovery, which are in preparation.

The journal on your device

Encounters, dates, nicknames, notes and stamp positions are stored on your device. The map works offline and does not request your location. The app protects the local file and lets you lock access with Face ID, Touch ID or your device passcode.

Without an account, your journal stays only on this device and is excluded from system backups. If you delete the app or change phones, those encounters are not restored automatically.

Your journal saved to your account

When you sign in, the app privately syncs your complete encounters: nationalities, nicknames, notes, dates and stamp positions. Achievements are calculated from those encounters. On another phone, sign in with the same account and provider to restore what has been saved. Apple and Google create separate accounts, even if you use the same email address.

You can keep using your journal offline. Pending changes are sent when the app reconnects; before changing phones, check the save status in Settings. Deletions sync too. If you make conflicting edits to the same encounter on two phones, both versions are kept for you to review.

The server stores your journal encrypted and only returns it to sessions signed in to your account. This copy is separate from your shared profile: hiding a field from friends does not remove it from your private journal. Encryption uses keys held by the service; it is not end-to-end encryption. App lock and appearance are configured separately on each phone.

An account for Friends

When you sign in with Apple or Google, the service verifies your identity and stores the identifier supplied by that provider. Hoedex does not store your Apple or Google email address, name or photo in your profile. You choose your own nickname and an avatar from the app.

The server stores your profile, privacy settings, sign-in sessions, requests, friendships and blocks. For Apple sign-in, it also stores an encrypted credential that allows the service to revoke authorisation when you delete your account.

Apple and Google process the data needed to provide their sign-in services. Google states that its SDK may collect a user identifier and IP address to manage authorisations and prevent fraud. See Apple's privacy information and Google's privacy policy.

What your friends can see

Your profile nickname and avatar are shown to friends and when exchanging requests. Everything else starts hidden. In Settings → Privacy, you can turn each of these on or off separately:

When you save an enabled option, the app sends those fields to the server to show them to all your accepted friends, including friends you accept later. This includes current and future encounters. The “View as a friend” preview shows the shared copy that has been saved.

Notes and other details may contain intimate information about you or other people. Review their content before sharing, and avoid including identifying details that those people do not want you to share.

Changing your mind

When you save a disabled option while online, that field is removed from the shared copy. If the connection fails, the app lets you know and keeps the last confirmed settings. Journal edits and deletions update your profile when they can be sent; you can retry using “Update shared content” in My profile.

Only accepted friends can view a profile. You can remove friends, block people and turn off new requests. Renewing your code makes the previous code unusable. None of these actions can erase screenshots or copies that someone has already made.

Signing out or deleting your account

Signing out hides that account's journal on the device, but keeps its local file, the copy in your account and what you have shared. Pending changes remain associated with that account and sync when you sign in again. Signing in with another account does not mix the journals.

In My profile → Delete account, you can delete your private journal, shared profile, friendships, requests and sessions from the server. Encounters on this phone are kept without an account, and you can delete them separately in Settings. You will no longer be able to restore the deleted account copy on another phone.

If Apple cannot complete revocation at that moment, the profile is hidden and the app lets you retry deletion. The service temporarily keeps what is needed to finish that process.

The service and this website

Hoedex is hosted on a Hetzner server. Cloudflare handles DNS and HTTPS traffic. Communication with the API is encrypted in transit. The server also processes the fields you choose to share so it can show them to your friends.

Hoedex includes no advertising, tracking tools or analytics. This website does not set its own cookies. Hosting, network and sign-in providers may process technical connection information under their own terms.