On this page
- Summary
- 1. Who we are and what this policy covers
- 2. Information we collect
- 3. Location
- 4. Live streams
- 5. Live chat and other messages
- 6. What your activity can reveal
- 7. How we use your information
- 8. Ranking, notifications and automated decisions
- 9. What we never do
- 10. Who sees and receives your information
- 11. How long we keep information
- 12. Security and data breaches
- 13. Your rights and choices
- 14. People under 18
- 15. International transfers and changes
- 16. Contact us
Summary
- Hypefindr is only for people 18 and older.
- We collect your phone number or email, your profile details and date of birth, the photos, videos, plans and live streams you make, your live chat messages, the plans you attend or favorite, your check-ins and vibes, feedback you send us, how you use the app, and reports of app errors.
- We use your location while the app is open to show what is near you. If you also allow "Always" location, your iPhone tells the app when you arrive at an event you said you are going to, so it can check you in. We never store your device's coordinates or a history of where you have been.
- Your posts, live streams and plans appear on the map where they were made. Friends can see where your latest post or live stream was, for 24 hours. People who can see a plan can see who is attending it.
- Live streams are not recorded.
- Discover shows what is closest to you and starting soonest first, filtered the way you choose. We do not use your interests or activity history to decide the order.
- We do not sell your personal data or show ads. We measure how the app is used in our own database, not with other companies' analytics or advertising services.
- A person on our team reviews every report within 24 hours and can see the content and live chat it concerns.
- You can delete your account at any time in the app.
The full policy follows. Capitalized terms not defined here have the meaning given in the Terms of Service.
1. Who we are and what this policy covers
1.1 Who is responsible. Hypefindr is an independent project run by its founders from 300 North College Street, Northfield, Minnesota 55057, United States. We ("Hypefindr," "we," "us") are responsible for your personal data. Contact details are in Section 16.
1.2 Scope. This policy covers personal data we collect through the Hypefindr iPhone app, the website hypefindr.net, the share pages at go.hyped.stream, invite links, and our communications with you (together, the "Services"). It also covers people who do not have an account but whose data we receive: website and share page visitors, people who appear in User Content, people named in reports, and people who send us requests.
1.3 What it does not cover. It does not cover services run by others, even if you reach them through Hypefindr, such as Apple, Google, ride and map apps you open for directions, ticketing sites or venue websites. Their own privacy policies apply.
2. Information we collect
2.1 Information you give us
Account details. The phone number, email address or Apple or Google account you sign in with, and a password if you sign up with email. Your name, username, date of birth, profile photo, bio, the interests you pick, your profile type (Attendee, Watcher, Streamer or Connector), the invite code of the person who brought you if you enter it, and your visibility settings.
Content you create. Photos and videos you post, with their captions, the words you write on them, the category and how it feels. Live streams (video and audio) and the short preview clip you record before you go live. Live chat messages and the questions ("asks") you send to a host. My Vibe and Not My Vibe on posts and plans, and emoji reactions. Plans you create, including their title, place, time and time zone, how long they last, how they repeat or the other dates and times you add; who is hosting, which can name other people on Hypefindr or a host who is not on the app; what they cost and what is good to know; their description, cover, photos and videos, age rating, and who can see them (Public or Crew). Your answers when we ask you to confirm a plan is still on, and any reason you give for calling one off. The plans you tap Attend on to say you are going (the button was called Pull up in earlier versions of the app), plans you save with Favorite (called Interested before), and check-ins. Your Crew (your friends), smaller crews you make or join, and anyone you remove or block from a crew you run. Friend requests, Meet Up requests and Let Them Know alerts you send, with any note you add. Reports you file about posts, plans, live streams, chat messages or people. Anything you share from your Wrapped summary.
Feedback about the app. If you use "Send feedback or report a problem" in Settings, or answer the occasional "Anything we can improve?" question, we receive the kind of feedback you chose (a problem, an idea or something else), what you write, where you sent it from (Settings or the question), the screen you were on, the app's version and build, your iOS version and your iPhone model, linked to your account. You can send up to 20 a day. Only people who work on Hypefindr can read it; other users never see it. We use it to fix problems and improve the app, and we may note what we did about it.
Communications with us. Emails you send us, including reports, evidence you attach, appeals, removal requests, legal and privacy requests, and feedback.
Verification. We send a code by text message to verify your phone number when you sign in with it, and a code by email if you reset your password. We do not use third-party identity or age verification services.
Face ID sign-in. On an iPhone with Face ID or Touch ID, the app keeps your sign-in in the iPhone's Keychain, locked behind Face ID or Touch ID, so you can come back with a glance instead of a code. Only a face or fingerprint enrolled on that iPhone can unlock it. Signing out keeps it, so you can come back the same way, and the Keychain keeps it even if you delete the app. To make the app forget it, tap "Not you?" on the sign-in page, or delete your account. Hypefindr never receives your face or fingerprint data (Section 6.3).
2.2 Information collected automatically
Location. Precise location from your device while the app is open, and, if you allow "Always," notice from your iPhone that you have arrived at an event you are attending. Section 3 explains exactly what we do with it.
Camera, microphone and photo library. Used only when you use a feature that needs them, such as taking a photo, recording a video, going live or choosing a profile photo.
Activity. What appears on your screen in Discover and on the map, what you tap, how long you watch lives and look at posts, which lives you watch, your reactions and vibes, saves, shares and friend requests, the plans you attend and your check-ins, and the notifications you read or archive. We use this for your points, badges and passports, for safety, and to understand and improve how Hypefindr is used. It does not decide the order of Discover (Section 8).
App usage events. The app sends our own database a record when you open and close it, which screens you view and for how long, when you tap a notification, and when you take key actions, such as signing up, sharing, tapping Attend, checking in, publishing a post or plan, choosing a place, opening a ride app, sending a friend request, Meet Up request or Let Them Know alert, making a crew, answering a crew invite, sending something to a crew, or sending feedback (the kind only, not your words). It also records how the camera started on your iPhone: whether it worked, the camera mode and settings it used, how warm the phone was, any error, and why it stopped if iOS paused it. Those reasons include another app using the camera, and a phone call using the microphone (the camera then keeps working without sound, and the report notes the microphone was unavailable). We use these reports only to fix camera problems on particular iPhones. On a phone's first launch it also records the link the app was opened with, without the part after the "?" except any campaign tags. These records hold the event, the time and a few details about it, such as an event's ID or whether a post was a photo or video, never the content of your posts or messages.
Error reports. If something goes wrong in the app, it sends us the error message and the first few lines of the technical error report, so we can fix it.
Device and sign-in data. With app usage events and error reports, the app sends your device model, iOS version, the app's version and build, your language and region setting, your time zone, and a random install ID. The app creates that ID on its first launch and keeps it on your phone until you delete the app. When you sign in, our authentication provider records your IP address and your app's user agent, which also shows the app build and iOS version, for each sign-in session. We also store your push notification token and whether you have notifications switched on. The app contains no advertising software. The map and Google sign-in software built into the app collect some data for Mapbox and Google, as Section 10.2 describes.
Before you sign in. When you first open the app, it starts a temporary anonymous session with our authentication provider so that it can load. That session has an identifier but no name or contact details. App usage events and error reports are sent from the start, including before you sign in. Each time it opens or comes back to the screen, the app also checks which version of Hypefindr is current, in our database and in Apple's public App Store lookup, so it can ask you to update when a newer version is out. Apple receives that request, with your IP address, as it would for any App Store page. The check stores nothing about you.
Kept on your phone only. How far Discover looks, its order and the filters you pick, plans and posts you save as drafts (including copies of their photos and videos) until you publish or discard them, and your Face ID sign-in. None of these are sent to us.
Live stream data. When a live started and ended, its event and place, its peak viewer count, reactions, and the settings you chose for it.
Data we generate about you. Your Hype Score (the points you earn in your active profile type), titles, badges, milestones (your firsts and the counts you reach, such as your first moment or 25 people coming to your plan, and whether the app has celebrated them), weekly streak, attendance passport, stream passport and broadcast list, your atmosphere average from reactions, your Wrapped summary, whether you confirmed a plan and how many times we asked, and moderation records (reports about you or your content, whether content was hidden, and any suspension or ban).
Website and share page data. hypefindr.net sets no cookies for visitors. The Website and Cookie Notice explains what it does collect. The share pages at go.hyped.stream are served by Cloudflare, which receives your IP address and the link you opened.
Attending from a share page. Anyone can say they are coming to a plan from its share page, without the app or an account (the page's button may say Pull up). The page then keeps a random ID in your browser's storage, so it remembers your answer. We store that ID with a one-way hash of your IP address, and use the hash only to stop one person adding many (at most 5 to one plan, and 30 an hour, from one address). We do not ask for your name, and we do not link it to an account. The plan's host and the people who can see the plan see how many people said they were coming this way, not who. If you tap "How far is it from me?" on a share page, your browser works out the distance on your device, and your location is not sent to us.
2.3 Information from other sources
Sign-in providers. If you sign in with Apple or Google, we receive your name, email address (or an Apple private relay address) and an account identifier. We never receive your Apple or Google password.
Other users. Other users give us information about you when they enter your invite code, add you to a Crew, send you a friend request, Meet Up request or Let Them Know alert, report or block you, or capture you in a photo, video or live stream.
Safety sources. Where the law allows, we may receive information from law enforcement or child safety organizations to protect users.
2.4 People without an account
If you appear in someone's photo, video or live stream, or someone reports you or lists your venue as an event location, we may process your image, voice, name or location as part of that content. You can ask us to review or remove it under the Content Removal Requests policy, whether or not you have an account.
3. Location
Location is the most sensitive data we handle and it is central to how Hypefindr works. Laws in many countries and US states treat precise location as sensitive data. We use it only after you grant permission through your iPhone's prompt, and you can withdraw that permission at any time.
3.1 How the app uses your location
| Permission | When it is used | What it is used for | How to stop it |
|---|---|---|---|
| While Using | Only while the app is open, and first asked when Discover, the map or posting needs it | Showing events, posts and live streams near you; placing what you post, stream or plan on the map; directions; an "Are you here?" prompt when you have been at an event that is happening for a few minutes; checking you in when you tap a check-in reminder | Set location to "Never" in iPhone Settings |
| Always (optional) | Asked only after you tap Attend on an event and read our explanation | Your iPhone watches the events you are attending (at most 15 at a time, from 3 hours before each starts until it ends, each a circle of about 150 meters). It tells the app only when you cross into one of those circles, and the app then checks you in, even if it is closed, and sends you a notification | Turn off Profile → Settings → Auto check-in, or set location to "While Using" or "Never" in iPhone Settings |
| Precise Location turned off | If you have turned off Precise Location for Hypefindr | At the moment of a check-in, the app asks your iPhone for one precise reading, for that check-in only | Decline the request |
Without "Always," you get a reminder when an event you are attending starts and another 30 minutes later, and tapping either one checks you in if you are there. If you deny location entirely, you can still browse, post and attend.
3.2 What we store, and what we do not
- Content locations. A post, live stream or event stores the place where it was made or planned, with a place name, and appears on the map at that place for as long as the content exists. When you create a plan, you can show its exact spot or a general area.
- Check-ins. When you check in, the app sends your current position to our server once. The server checks that you are within 150 meters of the event (plus 50 meters for GPS error) during its check-in window, which runs from 1 hour before it starts until it ends. We then store only that you checked in, the distance in meters, and how it happened (automatically, from a notification, from a prompt or by tapping). Your position is discarded.
- Nearby results. When Discover, the map or a feature such as going live needs to know what is near you, the app sends your position to our server with that request. We use it to answer the request and do not store it.
- Place search. When you search for a place to tag, or search the map for a place or address, the app sends what you type and your location rounded to about 100 meters, so the closest matches come first. We do not keep a record of who searched for what. Cloudflare may keep a copy of the answer to a search for up to a day, with nothing that identifies you, so the same search is faster next time.
- On your phone only. The list of events your iPhone is watching for auto check-in stays on your phone and is cleared when you sign out or delete your account. A check-in made while you are offline waits on your phone, with its position, until it can be sent.
- No movement history. We do not keep a record of your device's coordinates or your movements.
3.3 What other users can see
Other users can see the map location of your posts, live streams and plans, including the place of a live while you are broadcasting. A plan you set to Crew is shown only to your friends. Your friends can see the event and place of your most recent post or live stream, and when it was, for 24 hours after it. The events you checked in to appear in your attendance passport on your profile. Other users cannot see your device's location at any other time, and we never show your home address.
3.4 What we do not do with location
We do not sell location data. We do not share precise location with advertisers or data brokers. We do not use location for advertising. We do not show your real-time location to other users except as described in Section 3.3.
3.5 Your controls
- iPhone: Settings → Privacy & Security → Location Services → Hypefindr.
- In the app: Profile → Settings → Auto check-in shows whether auto check-in is on and lets you turn it off.
- Your content: delete posts and events you created, or delete your account.
4. Live streams
4.1 What we process. When you go live, your video and audio are sent live through LiveKit to the people watching. We also process your live chat and the live's details: when it started and ended, its event and place, viewer counts, reactions and settings.
4.2 No recordings. We do not record or store live streams. Viewers can still screen-record what they see. Before you go live you record a short preview clip. We store it, and it is shown on the live's card and its event page, including after the broadcast ends.
4.3 When you watch. We record which lives you watch, for how long, and your reactions and chat. We use this for your stream passport, your Watcher points, ranking and safety. Your chat messages are visible to everyone watching that live, and the host sees the viewer count and your asks.
4.4 People in live streams. Live streams often capture people who do not use Hypefindr. Anyone can ask us to remove a live or a preview clip that shows them, under the Content Removal Requests policy.
4.5 Moderation. We may watch any live while it is on air and read its chat to act on reports and violations.
5. Live chat and other messages
5.1 No private messages. Hypefindr has no private or direct messaging. Live chat is public to everyone watching the live. It is encrypted in transit but not end-to-end encrypted, and we store it on our servers.
5.2 Automatic filter. Every chat message passes through an automatic word filter on our server before anyone sees it. A message the filter catches is saved as hidden and shown only to the person who sent it. The app also checks names, usernames, bios, captions, the words on photos, plan details, live titles, crew names and Let Them Know notes against the same word list, on your phone, before saving them. If it catches something, it tells you why and nothing is saved or sent.
5.3 Reports and removal. You can report a chat message, and the host can remove messages from their own live. A message reported by 3 different people is hidden from everyone straight away, and a person on our team reviews every report.
5.4 Blocking. Chat messages between people who have blocked each other, in either direction, never reach either person's phone.
5.5 How long chat is kept. Live chat is deleted automatically 7 days after the live ends. A message that was reported is kept for 90 days so the report can be reviewed.
5.6 Other messages. Friend requests, Meet Up requests, crew invites and Let Them Know alerts, with any note you add, reach the other person as notifications in the app and, if they allow it, as push notifications. A note can be read by everyone you send it to. Feedback you send about the app (Section 2.1) goes only to the people who work on Hypefindr.
6. What your activity can reveal
6.1 Attendance can reveal sensitive facts. Where you check in, which events you attend, which Crews you join and what you stream can reveal sensitive information about you. Examples are your religion (a worship service), political views (a rally), sexual orientation or gender identity (a Pride event), health (a clinic or support meeting), union membership, or immigration status.
6.2 What we do and do not do. We do not intentionally infer or record these characteristics. We do not use them for advertising or to build profiles. But other users can see your public activity and draw their own conclusions. If you do not want an event linked to you, do not check in, post or stream there, and delete anything you already posted.
6.3 No biometrics. We do not use facial recognition and do not create faceprints, voiceprints or other biometric identifiers from your photos, videos or live streams. Face ID sign-in uses Apple's Face ID or Touch ID on your iPhone: your iPhone checks your face or fingerprint and tells the app only whether the check passed. That data never leaves your iPhone, and Hypefindr never receives it.
6.4 No health data. We do not intentionally collect health data. Do not put health information in your profile or posts.
7. How we use your information
The last column gives the legal basis we rely on where a law such as the GDPR requires one.
| Purpose | Data used | Legal basis |
|---|---|---|
| Run the Services: accounts, sign-in, profiles, Discover and its filters, the map and its search, live streams, plans and repeating plans, attending and favorites, check-ins, vibes, Crews, chat, friends, scores, milestones and Wrapped | Account, content, location, activity, device | Contract |
| Ask hosts to confirm their plans, take down plans that are not confirmed, and tell everyone who was coming | Plans, who is attending and who saved them as a favorite, push token | Contract; legitimate interests |
| Count people who say they're coming from a share page, and stop one person inflating the count | A random browser ID and a hashed IP address | Legitimate interests |
| Read and act on feedback you send about the app | Your feedback, the screen, app and iOS version, iPhone model, account | Legitimate interests |
| Confirm users are 18 or older and show 21+ content only to people who are 21 or older | Date of birth | Legal obligation; legitimate interests |
| Keep people safe: filter chat, hide content after repeated reports, review reports, enforce our rules, and report child sexual abuse material as the law requires | All categories | Legal obligation; legitimate interests |
| Order Discover by distance and start time, apply the filters you choose, order the map, and decide which notifications to send | Location at the time of the request, the distance and filters you chose, friends (only for the "Friends going" filter and notifications), attending, check-ins | Contract; legitimate interests |
| Send verification codes, reminders, check-in notifications, friend activity, milestones, service notices, policy changes and replies to your requests | Phone, email, push token | Contract; legal obligation |
| Understand how Hypefindr is used, find and fix errors and camera problems, and see which app versions and devices people use, in an internal dashboard that reads our own database. Only people who work on Hypefindr can open it, each with their own staff account and only the parts their role needs | Activity, app usage events, error reports, account, content, device and sign-in data | Legitimate interests |
| Comply with law, respond to legal process, enforce our Terms, and establish or defend legal claims | All categories | Legal obligation; legitimate interests |
| Respond to emergencies involving risk of death or serious injury | All categories, including location | Vital interests |
| Transfer Hypefindr to a company or a new owner | All categories | Legitimate interests |
8. Ranking, notifications and automated decisions
8.1 How Discover and the map are ordered. Discover shows lives, moments and plans within the distance you choose (from 1 to 50 miles, 3 to start with), in bands of distance, closest band first. Within a band, the order weighs three things: how close something is (45%), how soon it starts (45%; anything live or already on counts as starting now), and whether it is live or has recent moments (10%). You can switch to farthest first. When you reach the end, Discover can look a little further. Filters you choose narrow it further: when (for example tonight or this weekend, and times of day), what kind of event, free only, 18+ or 21+, and Friends going, which shows only events a friend of yours is attending or hosting. The map shows what is in and just around the area on screen, lives first, then the busiest spots, and you can search it for a place or address. The order does not use your interests, your activity history or sensitive characteristics such as religion, health or sexual orientation, and it uses what your friends do only when you turn on Friends going. Left out everywhere: hidden content, content from people you have blocked or who blocked you, 21+ content for people under 21, and Crew plans of hosts you are not friends with. If we ever personalize the order, we will update this policy first.
8.2 Notifications. We send notifications for things such as "Tomorrow" and "Starting soon" reminders about plans you are attending (unless the host turned them off), check-in prompts, a host's count of who's attending, asks to confirm a plan you host, a plan being called off or taken down, someone's My Vibe on your plan, milestones, friends going live, friend requests, crew invites, Meet Up requests and Let Them Know alerts. You control push notifications in your iPhone settings and in the app. When a newer version of the app is out, the app shows a message asking you to update.
8.3 Automated decisions. Scores, titles, badges, milestones, the order of Discover and the results of its filters are calculated automatically. A plan made more than a day ahead whose host does not confirm it in its last 24 hours is taken down automatically 3 hours before it starts. Two safety actions are also automatic: the word filters (Section 5.2), and hiding content that 3 different people have reported. Every report is then reviewed by a person. Decisions to remove content or to suspend or ban accounts are made by people. You can appeal any enforcement action under the Enforcement, Moderation and Appeals Policy.
8.4 Questioning a result. You may ask us to explain a profiling or automated decision that affects you, including the main factors behind it, to review the data used, and to correct inaccurate data and have the decision reconsidered. Email hype.hypefindr@gmail.com with the subject "Privacy Request."
8.5 No decisions with legal effects. We do not use automated processing to make decisions that produce legal or similarly significant effects, such as decisions about housing, employment, credit, insurance, education or health care.
9. What we never do
- Sell your personal data.
- Share your personal data for cross-context behavioral or targeted advertising.
- Use advertising software, use other companies' analytics services to study how you use Hypefindr, or track you across other companies' apps and websites. (The Mapbox and Google software built into the app collects limited data for those companies' own services, as Section 10.2 describes.)
- Sell or share location data with data brokers or advertisers.
- Use your chat messages for advertising.
- Create biometric identifiers from your face or voice.
- Give any government agency your location or chat without valid legal process, except in an emergency involving risk of death or serious injury (Section 10.4).
- License your content to third parties to train their generative AI models.
If we ever want to do any of these, we will update this policy first and, where the law requires, ask for your consent.
10. Who sees and receives your information
10.1 Other users and the public
| Visible to other users | Never shown to other users |
|---|---|
| Display name, username, profile photo and bio | Email address and phone number |
| Profile type, title, badges, Hype Score, atmosphere average and streak | Date of birth |
| Your attendance passport, stream passport and broadcasts | Your device's location, except as described in Section 3.3 |
| Your posts. On your profile, they follow the visibility you choose for your profile and for each post (Public, Friends or Only you). A post you add to an event also appears with that event in the app, to anyone who can see the event | Your IP address and device information |
| Your live streams, and your plans with their hosts, details and map locations, to everyone (Public) or only your friends (Crew) | The distance recorded with a check-in |
| To your friends: the event and place of your most recent post or live stream, for 24 hours | Reports you file |
| Chat messages, to everyone watching that live | The people you brought with your invite code, which only you can see |
| That you are attending a plan, to anyone who can see that plan (their friends are listed first), and to friends who use the Friends going filter | Not My Vibe, which only you can see |
| How many people saved a plan as a favorite (not who), on the plan's page | Which plans you saved as favorites |
| My Vibe on a plan, to its host ("Alex is vibing with Friday Night Market") | Your milestones, unless you share one |
| Crew membership, and anything you share from Wrapped | Feedback you send about the app |
A host sees how many people are attending their plan and who they are. Anyone with a share link (go.hyped.stream/e/...) to a Public plan can open its web page without an account. The page shows the plan's card (title, place, and time in the plan's own time zone, and cover), the host the plan names, its photos and videos, what it costs and what is good to know, how many people are coming, and the posts at it that are set to Public, and messaging apps show the card as a link preview. Crew plans are not shown on share pages.
10.2 Service providers
These companies process personal data for us. They may use it only to provide their services to us, and must protect it. The exceptions are the Mapbox and Google software built into the app, which also collects the data the table describes for those companies' own services, under their own privacy policies.
| Provider | What it does for us | Data it receives |
|---|---|---|
| Supabase | Sign-in, database, server functions, realtime updates, profile photo storage, and sign-in and password reset emails | Account data, content records, chat, check-ins, activity, app usage events and error reports, profile photos, and the IP address and user agent of each sign-in session |
| Cloudflare | Storing and delivering photos, videos and preview clips (R2), serving share pages at go.hyped.stream, and our place search, which looks up venues in a copy of Foursquare's open places data | Media files, IP address, the share link opened, and for someone saying they're coming from a share page, the random browser ID and the hashed IP address; for place search, what you type, your IP address, and your location rounded to about 100 meters or the spot where you dropped a pin. Nothing is sent to Foursquare |
| LiveKit | Live video | Live video and audio, IP address |
| Mapbox | Maps, directions, and place search when our own search finds nothing | Your location when you use the map, search or directions, and your IP address. Mapbox's map software in the app also collects location, usage, performance and diagnostic data that Mapbox does not link to your identity, for its own services, under Mapbox's privacy policy |
| Expo | Delivering push notifications to Apple | Push token and notification content |
| Apple | Sign in with Apple, push notifications, the App Store, and the App Store lookup the app uses to see whether a newer version is out | Sign-in identifiers, push token and notification content; for the version check, your IP address and the app's App Store ID |
| Sign in with Google, and our email inbox (Gmail) | Sign-in identifiers, and emails you send us. Google's sign-in software in the app also collects sign-in data, an approximate location, a device identifier and usage data, linked to your Google account, under Google's privacy policy | |
| Twilio, through Supabase | Sending verification texts | Phone number and verification code |
| Vercel | Hosting hypefindr.net and our staff dashboard | IP address, browser data, pages requested |
10.3 When you direct us
We share information when you ask us to, for example when you share a link, an invite or your Wrapped summary. When you choose a ride or map app (such as Uber, Lyft, Waze, Google Maps or Apple Maps) for directions, we pass the event's location to that app, and when you add an event to your calendar, Google Calendar opens with the event's details. That company's privacy policy then applies.
10.4 Legal, safety and rights requests
We disclose information:
- In response to a subpoena, court order, search warrant or other legal process that we believe is valid, as described in the Law Enforcement Guidelines.
- To law enforcement or emergency services when we believe in good faith that disclosure without delay is needed to prevent death or serious physical injury to anyone.
- To the National Center for Missing & Exploited Children (NCMEC), as required by 18 U.S.C. § 2258A, when we become aware of apparent child sexual exploitation. NCMEC may share reports with law enforcement worldwide.
- To protect the rights, property or safety of Hypefindr, our users or the public, to enforce our Terms, and to detect and prevent fraud, abuse and security incidents.
- When we handle a copyright notice, we may forward it, including the sender's name and contact details, to the user whose content it concerns. When we receive a counter-notice, we forward it, including the user's name, address and contact details, to the person who sent the original notice, as the DMCA requires.
10.5 Transfers
If Hypefindr becomes a company, or is merged, acquired, financed, reorganized or sold, personal data may be transferred as part of that change. The recipient must honor this policy for data collected under it, or give you notice and any choice the law requires.
10.6 De-identified and aggregated data
We may share data that has been aggregated or de-identified so that it cannot reasonably be linked to you, for example "3,200 check-ins in Minneapolis last weekend." We keep such data in de-identified form, do not try to re-identify it, and require recipients not to try.
11. How long we keep information
| Data | How long we keep it |
|---|---|
| Account details | Until you delete your account |
| Posts | Your profile keeps your 30 most recent posts. When you add another, the oldest is deleted automatically. A post that is deleted, automatically or by you, disappears from Hypefindr straight away, and its photo or video file is deleted from our storage shortly after, usually within minutes |
| Events and plans you create | Until you delete them or your account. A plan you call off, or that is taken down because it was not confirmed, is deleted straight away. A repeating plan's schedule is kept until you stop it or delete your account. When you delete your account, an event nobody else posted to is deleted. An event other people posted to stays, with their posts, but is no longer linked to you and gets a new cover image |
| Attending from share pages (random browser ID and hashed IP address) | Until the plan is deleted, or until the person takes it back |
| Favorites | Until you remove the favorite, the plan is deleted, or you delete your account |
| Milestones | Until you delete your account |
| Drafts | On your phone only, until you publish or discard them |
| Live streams | Not recorded. The record that a live happened (times, event and viewer counts) is kept until you delete your account. The preview clip stays with its event |
| Live chat | Deleted 7 days after the live ends, or 90 days if the message was reported |
| Check-ins (yes, the distance and how) | Until you delete your account |
| Your device's coordinates | Not stored |
| Activity history (what you saw, tapped and watched) | Until you delete your account |
| App usage events and error reports | 13 months. When you delete your account they are no longer linked to it, but they keep the random install ID until they are deleted |
| Notifications | Until you delete your account. Archiving one hides it |
| Sign-in session records (IP address and user agent) | Until that session ends or you delete your account |
| Reports you file | Until you delete your account |
| Moderator decisions (what was decided, by whom and about which account) | Kept after an account is deleted, so we can enforce bans and answer appeals and legal requests |
| Content and data reported to NCMEC | At least 1 year after the report, as required by 18 U.S.C. § 2258A(h), and longer if law enforcement asks us to preserve it |
| Emails you send us, including removal and privacy requests | Up to 3 years |
| Feedback you send about the app | Up to 3 years. When you delete your account, it is kept without being linked to you, so we can still fix what it reports. If it contains something you want removed, email us |
| Backups kept by our database provider | Overwritten within 90 days |
When you delete your account (Profile → Settings → Delete account), if you signed in with Apple, you confirm with Apple and we revoke Hypefindr's access to your Apple account first. We then delete straight away your sign-in account and profile; your posts and their files; your profile photo; your live streams' records; your notifications, friendships, blocks and Let Them Know history; your events as described in the table; and everything else linked to your account, including your check-ins, the plans you attend and favorite, reactions, vibes, chat messages, Crew memberships, crews you run, milestones, points and activity history. Data we must keep because of a legal hold, a pending dispute, a government request or a legal obligation is kept until the obligation ends. Data that has been aggregated or de-identified may be kept indefinitely.
12. Security and data breaches
12.1 How we protect data. We use encryption in transit (TLS), encryption at rest through our hosting providers, and database access rules that apply on our servers, and we limit access to personal data to the people who work on Hypefindr and need it, through individual staff accounts with roles.
12.2 No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered or destroyed by a breach of our safeguards. You use the Services at your own risk. Protect your account by securing your device with a passcode, keeping control of your phone number, email and password, and never sharing verification codes.
12.3 If there is a breach. If a security breach affects your personal data, we will notify you, regulators and others as required by law, including Minnesota Statutes § 325E.61 and, where it applies, the GDPR. We may notify you by email, text message, in-app notice or other means the law allows.
13. Your rights and choices
13.1 Rights every user has
Wherever you live, you may ask us to:
- confirm whether we process your personal data, and give you access to it;
- correct inaccurate personal data;
- delete your personal data;
- give you a copy of your data in a portable, machine-readable format;
- withdraw any consent you gave, such as location permission;
- explain and reconsider a profiling or automated decision that affects you (Section 8.4);
- give you a list of the specific third parties to which we have disclosed your personal data.
We do not sell personal data, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects, so there is nothing to opt out of. We still honor Global Privacy Control and other opt-out signals as a request to opt out.
13.2 How to make a request
Email hype.hypefindr@gmail.com with the subject "Privacy Request" from the email address on your account, or include the phone number on your account. We verify requests by confirming control of that email or phone number, and we may ask for more if a request involves sensitive data. Someone you authorize may make a request for you with your signed permission; we may still verify your identity directly with you. We respond within 45 days, or within one month where the GDPR or UK GDPR applies. If we need more time, as the law allows, we will tell you why before the deadline. Requests are free, but if requests are manifestly unfounded, excessive or repetitive, we may charge a reasonable fee or decline, where the law allows.
13.3 Limits on requests
We may decline or limit a request where the law allows. Examples: data we must keep for security, fraud prevention, legal obligations or legal claims; data whose disclosure would reveal another person's personal data, such as the identity of someone who reported you; and data we cannot verify belongs to you. We will tell you the reason.
13.4 Appeals
If we decline your request in whole or in part, you may appeal by emailing hype.hypefindr@gmail.com with the subject "Privacy Appeal" within 60 days of our decision. We will decide the appeal within 45 days, or within 105 days if we tell you we need an extension and why. If we deny your appeal, you may complain to your data protection authority or, in the United States, your state attorney general. Minnesota residents can contact the Minnesota Attorney General's Office at www.ag.state.mn.us.
13.5 Europe and the United Kingdom
If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR, UK GDPR or Swiss data protection law applies to our processing of your data. You also have the right to restrict processing, to object to processing based on legitimate interests, and not to be subject to a decision based solely on automated processing that has legal or similarly significant effects. You may complain to your local data protection authority. Our legal bases are listed in Section 7.
13.6 United States
Minnesota, California and other US states give residents privacy rights. The rights in Section 13.1 cover them, including Minnesota's right to question the result of a profiling decision and to get a list of the specific third parties that received your data. Precise location is sensitive data under these laws; we use it only with your consent, given through your iPhone's permission prompt. We do not sell or share personal information, and we use sensitive personal information only to provide the Services.
13.7 Everywhere else
Many other countries give people similar rights. We honor the rights in Section 13.1 for every user, wherever they live.
13.8 Notifications
You can turn off push notifications in your iPhone settings or in the app. We do not send marketing emails or texts. You cannot opt out of security, legal and account messages while your account is open.
14. People under 18
Hypefindr is only for people 18 and older. We do not knowingly collect personal data from anyone under 18. Our server refuses any date of birth under 18 when you set up your profile. If we learn that a user is under 18, we delete the account and its data. If you believe someone under 18 has an account, email hype.hypefindr@gmail.com with the subject "Underage Account" and their username, or report one of their posts or live streams in the app and choose "Something else." A person who appeared in content as a minor may ask us to remove it under the Content Removal Requests policy.
15. International transfers and changes
15.1 International transfers. We are based in the United States, and our service providers process data in the United States and other countries. If you use Hypefindr from another country, your data is transferred to and processed in those countries, which may have different data protection laws from yours. Where the law requires, we rely on safeguards such as our providers' Standard Contractual Clauses or Data Privacy Framework certification.
15.2 Changes to this policy. We may update this policy. The "Last updated" date shows when. For a material change, we will notify you in the app or by email before it takes effect. If a change would let us use personal data we already hold in a materially different way, we will ask for your consent where the law requires.
15.3 Browser signals. Our website honors Global Privacy Control. There is no common standard for "Do Not Track" signals, so we treat them the same way we treat Global Privacy Control.
16. Contact us
Hypefindr, 300 North College Street, Northfield, Minnesota 55057, United States
Email hype.hypefindr@gmail.com with one of these subject lines:
| Subject line | Use it for |
|---|---|
| Privacy Request | Access, correction, deletion, a copy of your data, or questions about a decision |
| Privacy Appeal | Appealing our answer to a privacy request |
| Underage Account | Reporting an account used by someone under 18 |
| Safety | A risk of harm to someone (in an emergency, call your local emergency number first) |
Related: Terms of Service · Community Guidelines · Live Streaming and Recording Policy · Events, Safety and Assumption of Risk · Child Safety Policy · Content Removal Requests · Points, Scores and Referral Program Terms · Enforcement, Moderation and Appeals · Law Enforcement Guidelines · Website and Cookie Notice