End-to-End Encryption — Simply Explained
Imagine sealing your message inside a locked box before handing it to a courier. The courier delivers it, but they cannot read what's inside. Only the person holding the matching key can open it. That's exactly what end-to-end encryption does on HiLink.
You type a message
Your device encrypts it instantly using a unique session key — before it leaves your phone.
Travels as ciphertext
The encrypted blob travels through HiLink's servers. They relay it, but cannot read the content.
Recipient decrypts
Only the recipient's device holds the private key to decrypt and display the message.
Every Call Has a Traceable Identity
A unique security code is displayed on every live call screen. Even if someone photographs your screen with another device, the code reveals who was on the call — our team can act immediately.
Each security code is cryptographically tied to the session participants and timestamp. If a screenshot of a call is ever shared or reported, the code lets our moderation team instantly identify who was involved.
- Visible on every audio and video call screen throughout the session.
- Cannot be faked or removed — generated server-side at call start.
- Deters misuse: anyone recording or screenshotting a call knows it can be traced back to them.
OTP Verification Flows
HiLink uses email-based One-Time Passwords (OTPs) — no phone number required. OTPs are also used for sensitive account actions like device changes and account deletion.
Registration & Login OTP
A 6-digit code is sent to your registered email address. Only valid for 10 minutes and can only be used once.
Login on New Device
When a new device attempts login, an OTP is sent to your email to verify it's really you authorising access.
Sensitive Action Confirmation
Changing your phone number, withdrawing earnings, or deleting your account all require OTP re-verification.
Rate Limiting & Brute-Force Protection
OTP attempts are rate-limited per device and per IP. Excessive failures trigger a temporary block and security alert.
Red Flag & Moderation System
HiLink's Red Flag system is a multi-signal risk scoring engine that monitors account behaviour, user reports, and content patterns to detect bad actors before they can cause harm.
Detected Threats
- Harassment and abusive language
- Solicitation and scam patterns
- Repeated block-and-recreate behaviour
- Suspicious rapid-fire account actions
- Multiple user reports on same account
Protective Actions
- Automated content warning labels
- Rate limiting and temporary restrictions
- Escalation to human moderation
- Account suspension or permanent ban
- Reporting to law enforcement if required
Automated & Manual Review
HiLink uses a two-layer review pipeline — first automated ML-based classifiers, then human moderators for nuanced judgements.
Automated AI Classifiers
Machine learning models scan metadata patterns in real time — not message content — to detect anomalous behaviour, flagging accounts for review within milliseconds.
Human Moderation Team
Flagged reports are reviewed by trained HiLink safety specialists who apply context, cultural nuance, and community standards — every report is taken seriously.
Account Blocking & Consequences
HiLink enforces a progressive consequence model so every user understands what happens when safety rules are violated.
Warning
First-time minor violations receive an in-app warning explaining the community standard breached.
Temporary Restriction
Repeated violations restrict specific features (messaging, calling) for 24–72 hours.
Permanent Ban
Serious violations result in immediate permanent account termination and device-level blocking to prevent re-registration.
Data Privacy & Zero Data-Selling
HiLink does not sell, rent, or broker your personal data to any third party — ever.
- Data is only shared with service providers strictly necessary to operate the app (cloud hosting, payment processing).
- HiLink's revenue model is based on in-app purchases and premium features — not advertising or data monetisation.
- You can request a full data export or account deletion at any time by contacting info@hi-app.in.