Summary

The full policy follows. Capitalized terms not defined here have the meaning given in the Terms of Service.

1. Who we are and what this policy covers

1.1 Who is responsible. Hypefindr is an independent project run by its founders from 300 North College Street, Northfield, Minnesota 55057, United States. We ("Hypefindr," "we," "us") are responsible for your personal data. Contact details are in Section 16.

1.2 Scope. This policy covers personal data we collect through the Hypefindr iPhone app, the website hypefindr.net, the share pages at go.hyped.stream, invite links, and our communications with you (together, the "Services"). It also covers people who do not have an account but whose data we receive: website and share page visitors, people who appear in User Content, people named in reports, and people who send us requests.

1.3 What it does not cover. It does not cover services run by others, even if you reach them through Hypefindr, such as Apple, Google, ride and map apps you open for directions, ticketing sites or venue websites. Their own privacy policies apply.

2. Information we collect

2.1 Information you give us

Account details. The phone number, email address or Apple or Google account you sign in with, and a password if you sign up with email. Your name, username, date of birth, profile photo, bio, the interests you pick, your profile type (Attendee, Watcher, Streamer or Connector), the invite code of the person who brought you if you enter it, and your visibility settings.

Content you create. Photos and videos you post, with their captions, the words you write on them, the category and how it feels. Live streams (video and audio) and the short preview clip you record before you go live. Live chat messages and the questions ("asks") you send to a host. My Vibe and Not My Vibe on posts and plans, and emoji reactions. Plans you create, including their title, place, time and time zone, how long they last, how they repeat or the other dates and times you add; who is hosting, which can name other people on Hypefindr or a host who is not on the app; what they cost and what is good to know; their description, cover, photos and videos, age rating, and who can see them (Public or Crew). Your answers when we ask you to confirm a plan is still on, and any reason you give for calling one off. The plans you tap Attend on to say you are going (the button was called Pull up in earlier versions of the app), plans you save with Favorite (called Interested before), and check-ins. Your Crew (your friends), smaller crews you make or join, and anyone you remove or block from a crew you run. Friend requests, Meet Up requests and Let Them Know alerts you send, with any note you add. Reports you file about posts, plans, live streams, chat messages or people. Anything you share from your Wrapped summary.

Feedback about the app. If you use "Send feedback or report a problem" in Settings, or answer the occasional "Anything we can improve?" question, we receive the kind of feedback you chose (a problem, an idea or something else), what you write, where you sent it from (Settings or the question), the screen you were on, the app's version and build, your iOS version and your iPhone model, linked to your account. You can send up to 20 a day. Only people who work on Hypefindr can read it; other users never see it. We use it to fix problems and improve the app, and we may note what we did about it.

Communications with us. Emails you send us, including reports, evidence you attach, appeals, removal requests, legal and privacy requests, and feedback.

Verification. We send a code by text message to verify your phone number when you sign in with it, and a code by email if you reset your password. We do not use third-party identity or age verification services.

Face ID sign-in. On an iPhone with Face ID or Touch ID, the app keeps your sign-in in the iPhone's Keychain, locked behind Face ID or Touch ID, so you can come back with a glance instead of a code. Only a face or fingerprint enrolled on that iPhone can unlock it. Signing out keeps it, so you can come back the same way, and the Keychain keeps it even if you delete the app. To make the app forget it, tap "Not you?" on the sign-in page, or delete your account. Hypefindr never receives your face or fingerprint data (Section 6.3).

2.2 Information collected automatically

Location. Precise location from your device while the app is open, and, if you allow "Always," notice from your iPhone that you have arrived at an event you are attending. Section 3 explains exactly what we do with it.

Camera, microphone and photo library. Used only when you use a feature that needs them, such as taking a photo, recording a video, going live or choosing a profile photo.

Activity. What appears on your screen in Discover and on the map, what you tap, how long you watch lives and look at posts, which lives you watch, your reactions and vibes, saves, shares and friend requests, the plans you attend and your check-ins, and the notifications you read or archive. We use this for your points, badges and passports, for safety, and to understand and improve how Hypefindr is used. It does not decide the order of Discover (Section 8).

App usage events. The app sends our own database a record when you open and close it, which screens you view and for how long, when you tap a notification, and when you take key actions, such as signing up, sharing, tapping Attend, checking in, publishing a post or plan, choosing a place, opening a ride app, sending a friend request, Meet Up request or Let Them Know alert, making a crew, answering a crew invite, sending something to a crew, or sending feedback (the kind only, not your words). It also records how the camera started on your iPhone: whether it worked, the camera mode and settings it used, how warm the phone was, any error, and why it stopped if iOS paused it. Those reasons include another app using the camera, and a phone call using the microphone (the camera then keeps working without sound, and the report notes the microphone was unavailable). We use these reports only to fix camera problems on particular iPhones. On a phone's first launch it also records the link the app was opened with, without the part after the "?" except any campaign tags. These records hold the event, the time and a few details about it, such as an event's ID or whether a post was a photo or video, never the content of your posts or messages.

Error reports. If something goes wrong in the app, it sends us the error message and the first few lines of the technical error report, so we can fix it.

Device and sign-in data. With app usage events and error reports, the app sends your device model, iOS version, the app's version and build, your language and region setting, your time zone, and a random install ID. The app creates that ID on its first launch and keeps it on your phone until you delete the app. When you sign in, our authentication provider records your IP address and your app's user agent, which also shows the app build and iOS version, for each sign-in session. We also store your push notification token and whether you have notifications switched on. The app contains no advertising software. The map and Google sign-in software built into the app collect some data for Mapbox and Google, as Section 10.2 describes.

Before you sign in. When you first open the app, it starts a temporary anonymous session with our authentication provider so that it can load. That session has an identifier but no name or contact details. App usage events and error reports are sent from the start, including before you sign in. Each time it opens or comes back to the screen, the app also checks which version of Hypefindr is current, in our database and in Apple's public App Store lookup, so it can ask you to update when a newer version is out. Apple receives that request, with your IP address, as it would for any App Store page. The check stores nothing about you.

Kept on your phone only. How far Discover looks, its order and the filters you pick, plans and posts you save as drafts (including copies of their photos and videos) until you publish or discard them, and your Face ID sign-in. None of these are sent to us.

Live stream data. When a live started and ended, its event and place, its peak viewer count, reactions, and the settings you chose for it.

Data we generate about you. Your Hype Score (the points you earn in your active profile type), titles, badges, milestones (your firsts and the counts you reach, such as your first moment or 25 people coming to your plan, and whether the app has celebrated them), weekly streak, attendance passport, stream passport and broadcast list, your atmosphere average from reactions, your Wrapped summary, whether you confirmed a plan and how many times we asked, and moderation records (reports about you or your content, whether content was hidden, and any suspension or ban).

Website and share page data. hypefindr.net sets no cookies for visitors. The Website and Cookie Notice explains what it does collect. The share pages at go.hyped.stream are served by Cloudflare, which receives your IP address and the link you opened.

Attending from a share page. Anyone can say they are coming to a plan from its share page, without the app or an account (the page's button may say Pull up). The page then keeps a random ID in your browser's storage, so it remembers your answer. We store that ID with a one-way hash of your IP address, and use the hash only to stop one person adding many (at most 5 to one plan, and 30 an hour, from one address). We do not ask for your name, and we do not link it to an account. The plan's host and the people who can see the plan see how many people said they were coming this way, not who. If you tap "How far is it from me?" on a share page, your browser works out the distance on your device, and your location is not sent to us.

2.3 Information from other sources

Sign-in providers. If you sign in with Apple or Google, we receive your name, email address (or an Apple private relay address) and an account identifier. We never receive your Apple or Google password.

Other users. Other users give us information about you when they enter your invite code, add you to a Crew, send you a friend request, Meet Up request or Let Them Know alert, report or block you, or capture you in a photo, video or live stream.

Safety sources. Where the law allows, we may receive information from law enforcement or child safety organizations to protect users.

2.4 People without an account

If you appear in someone's photo, video or live stream, or someone reports you or lists your venue as an event location, we may process your image, voice, name or location as part of that content. You can ask us to review or remove it under the Content Removal Requests policy, whether or not you have an account.

3. Location

Location is the most sensitive data we handle and it is central to how Hypefindr works. Laws in many countries and US states treat precise location as sensitive data. We use it only after you grant permission through your iPhone's prompt, and you can withdraw that permission at any time.

3.1 How the app uses your location

Without "Always," you get a reminder when an event you are attending starts and another 30 minutes later, and tapping either one checks you in if you are there. If you deny location entirely, you can still browse, post and attend.

3.2 What we store, and what we do not

3.3 What other users can see

Other users can see the map location of your posts, live streams and plans, including the place of a live while you are broadcasting. A plan you set to Crew is shown only to your friends. Your friends can see the event and place of your most recent post or live stream, and when it was, for 24 hours after it. The events you checked in to appear in your attendance passport on your profile. Other users cannot see your device's location at any other time, and we never show your home address.

3.4 What we do not do with location

We do not sell location data. We do not share precise location with advertisers or data brokers. We do not use location for advertising. We do not show your real-time location to other users except as described in Section 3.3.

3.5 Your controls

4. Live streams

4.1 What we process. When you go live, your video and audio are sent live through LiveKit to the people watching. We also process your live chat and the live's details: when it started and ended, its event and place, viewer counts, reactions and settings.

4.2 No recordings. We do not record or store live streams. Viewers can still screen-record what they see. Before you go live you record a short preview clip. We store it, and it is shown on the live's card and its event page, including after the broadcast ends.

4.3 When you watch. We record which lives you watch, for how long, and your reactions and chat. We use this for your stream passport, your Watcher points, ranking and safety. Your chat messages are visible to everyone watching that live, and the host sees the viewer count and your asks.

4.4 People in live streams. Live streams often capture people who do not use Hypefindr. Anyone can ask us to remove a live or a preview clip that shows them, under the Content Removal Requests policy.

4.5 Moderation. We may watch any live while it is on air and read its chat to act on reports and violations.

5. Live chat and other messages

5.1 No private messages. Hypefindr has no private or direct messaging. Live chat is public to everyone watching the live. It is encrypted in transit but not end-to-end encrypted, and we store it on our servers.

5.2 Automatic filter. Every chat message passes through an automatic word filter on our server before anyone sees it. A message the filter catches is saved as hidden and shown only to the person who sent it. The app also checks names, usernames, bios, captions, the words on photos, plan details, live titles, crew names and Let Them Know notes against the same word list, on your phone, before saving them. If it catches something, it tells you why and nothing is saved or sent.

5.3 Reports and removal. You can report a chat message, and the host can remove messages from their own live. A message reported by 3 different people is hidden from everyone straight away, and a person on our team reviews every report.

5.4 Blocking. Chat messages between people who have blocked each other, in either direction, never reach either person's phone.

5.5 How long chat is kept. Live chat is deleted automatically 7 days after the live ends. A message that was reported is kept for 90 days so the report can be reviewed.

5.6 Other messages. Friend requests, Meet Up requests, crew invites and Let Them Know alerts, with any note you add, reach the other person as notifications in the app and, if they allow it, as push notifications. A note can be read by everyone you send it to. Feedback you send about the app (Section 2.1) goes only to the people who work on Hypefindr.

6. What your activity can reveal

6.1 Attendance can reveal sensitive facts. Where you check in, which events you attend, which Crews you join and what you stream can reveal sensitive information about you. Examples are your religion (a worship service), political views (a rally), sexual orientation or gender identity (a Pride event), health (a clinic or support meeting), union membership, or immigration status.

6.2 What we do and do not do. We do not intentionally infer or record these characteristics. We do not use them for advertising or to build profiles. But other users can see your public activity and draw their own conclusions. If you do not want an event linked to you, do not check in, post or stream there, and delete anything you already posted.

6.3 No biometrics. We do not use facial recognition and do not create faceprints, voiceprints or other biometric identifiers from your photos, videos or live streams. Face ID sign-in uses Apple's Face ID or Touch ID on your iPhone: your iPhone checks your face or fingerprint and tells the app only whether the check passed. That data never leaves your iPhone, and Hypefindr never receives it.

6.4 No health data. We do not intentionally collect health data. Do not put health information in your profile or posts.

7. How we use your information

The last column gives the legal basis we rely on where a law such as the GDPR requires one.

8. Ranking, notifications and automated decisions

8.1 How Discover and the map are ordered. Discover shows lives, moments and plans within the distance you choose (from 1 to 50 miles, 3 to start with), in bands of distance, closest band first. Within a band, the order weighs three things: how close something is (45%), how soon it starts (45%; anything live or already on counts as starting now), and whether it is live or has recent moments (10%). You can switch to farthest first. When you reach the end, Discover can look a little further. Filters you choose narrow it further: when (for example tonight or this weekend, and times of day), what kind of event, free only, 18+ or 21+, and Friends going, which shows only events a friend of yours is attending or hosting. The map shows what is in and just around the area on screen, lives first, then the busiest spots, and you can search it for a place or address. The order does not use your interests, your activity history or sensitive characteristics such as religion, health or sexual orientation, and it uses what your friends do only when you turn on Friends going. Left out everywhere: hidden content, content from people you have blocked or who blocked you, 21+ content for people under 21, and Crew plans of hosts you are not friends with. If we ever personalize the order, we will update this policy first.

8.2 Notifications. We send notifications for things such as "Tomorrow" and "Starting soon" reminders about plans you are attending (unless the host turned them off), check-in prompts, a host's count of who's attending, asks to confirm a plan you host, a plan being called off or taken down, someone's My Vibe on your plan, milestones, friends going live, friend requests, crew invites, Meet Up requests and Let Them Know alerts. You control push notifications in your iPhone settings and in the app. When a newer version of the app is out, the app shows a message asking you to update.

8.3 Automated decisions. Scores, titles, badges, milestones, the order of Discover and the results of its filters are calculated automatically. A plan made more than a day ahead whose host does not confirm it in its last 24 hours is taken down automatically 3 hours before it starts. Two safety actions are also automatic: the word filters (Section 5.2), and hiding content that 3 different people have reported. Every report is then reviewed by a person. Decisions to remove content or to suspend or ban accounts are made by people. You can appeal any enforcement action under the Enforcement, Moderation and Appeals Policy.

8.4 Questioning a result. You may ask us to explain a profiling or automated decision that affects you, including the main factors behind it, to review the data used, and to correct inaccurate data and have the decision reconsidered. Email hype.hypefindr@gmail.com with the subject "Privacy Request."

8.5 No decisions with legal effects. We do not use automated processing to make decisions that produce legal or similarly significant effects, such as decisions about housing, employment, credit, insurance, education or health care.

9. What we never do

If we ever want to do any of these, we will update this policy first and, where the law requires, ask for your consent.

10. Who sees and receives your information

10.1 Other users and the public

A host sees how many people are attending their plan and who they are. Anyone with a share link (go.hyped.stream/e/...) to a Public plan can open its web page without an account. The page shows the plan's card (title, place, and time in the plan's own time zone, and cover), the host the plan names, its photos and videos, what it costs and what is good to know, how many people are coming, and the posts at it that are set to Public, and messaging apps show the card as a link preview. Crew plans are not shown on share pages.

10.2 Service providers

These companies process personal data for us. They may use it only to provide their services to us, and must protect it. The exceptions are the Mapbox and Google software built into the app, which also collects the data the table describes for those companies' own services, under their own privacy policies.

10.3 When you direct us

We share information when you ask us to, for example when you share a link, an invite or your Wrapped summary. When you choose a ride or map app (such as Uber, Lyft, Waze, Google Maps or Apple Maps) for directions, we pass the event's location to that app, and when you add an event to your calendar, Google Calendar opens with the event's details. That company's privacy policy then applies.

We disclose information:

10.5 Transfers

If Hypefindr becomes a company, or is merged, acquired, financed, reorganized or sold, personal data may be transferred as part of that change. The recipient must honor this policy for data collected under it, or give you notice and any choice the law requires.

10.6 De-identified and aggregated data

We may share data that has been aggregated or de-identified so that it cannot reasonably be linked to you, for example "3,200 check-ins in Minneapolis last weekend." We keep such data in de-identified form, do not try to re-identify it, and require recipients not to try.

11. How long we keep information

When you delete your account (Profile → Settings → Delete account), if you signed in with Apple, you confirm with Apple and we revoke Hypefindr's access to your Apple account first. We then delete straight away your sign-in account and profile; your posts and their files; your profile photo; your live streams' records; your notifications, friendships, blocks and Let Them Know history; your events as described in the table; and everything else linked to your account, including your check-ins, the plans you attend and favorite, reactions, vibes, chat messages, Crew memberships, crews you run, milestones, points and activity history. Data we must keep because of a legal hold, a pending dispute, a government request or a legal obligation is kept until the obligation ends. Data that has been aggregated or de-identified may be kept indefinitely.

12. Security and data breaches

12.1 How we protect data. We use encryption in transit (TLS), encryption at rest through our hosting providers, and database access rules that apply on our servers, and we limit access to personal data to the people who work on Hypefindr and need it, through individual staff accounts with roles.

12.2 No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered or destroyed by a breach of our safeguards. You use the Services at your own risk. Protect your account by securing your device with a passcode, keeping control of your phone number, email and password, and never sharing verification codes.

12.3 If there is a breach. If a security breach affects your personal data, we will notify you, regulators and others as required by law, including Minnesota Statutes § 325E.61 and, where it applies, the GDPR. We may notify you by email, text message, in-app notice or other means the law allows.

13. Your rights and choices

13.1 Rights every user has

Wherever you live, you may ask us to:

We do not sell personal data, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects, so there is nothing to opt out of. We still honor Global Privacy Control and other opt-out signals as a request to opt out.

13.2 How to make a request

Email hype.hypefindr@gmail.com with the subject "Privacy Request" from the email address on your account, or include the phone number on your account. We verify requests by confirming control of that email or phone number, and we may ask for more if a request involves sensitive data. Someone you authorize may make a request for you with your signed permission; we may still verify your identity directly with you. We respond within 45 days, or within one month where the GDPR or UK GDPR applies. If we need more time, as the law allows, we will tell you why before the deadline. Requests are free, but if requests are manifestly unfounded, excessive or repetitive, we may charge a reasonable fee or decline, where the law allows.

13.3 Limits on requests

We may decline or limit a request where the law allows. Examples: data we must keep for security, fraud prevention, legal obligations or legal claims; data whose disclosure would reveal another person's personal data, such as the identity of someone who reported you; and data we cannot verify belongs to you. We will tell you the reason.

13.4 Appeals

If we decline your request in whole or in part, you may appeal by emailing hype.hypefindr@gmail.com with the subject "Privacy Appeal" within 60 days of our decision. We will decide the appeal within 45 days, or within 105 days if we tell you we need an extension and why. If we deny your appeal, you may complain to your data protection authority or, in the United States, your state attorney general. Minnesota residents can contact the Minnesota Attorney General's Office at www.ag.state.mn.us.

13.5 Europe and the United Kingdom

If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR, UK GDPR or Swiss data protection law applies to our processing of your data. You also have the right to restrict processing, to object to processing based on legitimate interests, and not to be subject to a decision based solely on automated processing that has legal or similarly significant effects. You may complain to your local data protection authority. Our legal bases are listed in Section 7.

13.6 United States

Minnesota, California and other US states give residents privacy rights. The rights in Section 13.1 cover them, including Minnesota's right to question the result of a profiling decision and to get a list of the specific third parties that received your data. Precise location is sensitive data under these laws; we use it only with your consent, given through your iPhone's permission prompt. We do not sell or share personal information, and we use sensitive personal information only to provide the Services.

13.7 Everywhere else

Many other countries give people similar rights. We honor the rights in Section 13.1 for every user, wherever they live.

13.8 Notifications

You can turn off push notifications in your iPhone settings or in the app. We do not send marketing emails or texts. You cannot opt out of security, legal and account messages while your account is open.

14. People under 18

Hypefindr is only for people 18 and older. We do not knowingly collect personal data from anyone under 18. Our server refuses any date of birth under 18 when you set up your profile. If we learn that a user is under 18, we delete the account and its data. If you believe someone under 18 has an account, email hype.hypefindr@gmail.com with the subject "Underage Account" and their username, or report one of their posts or live streams in the app and choose "Something else." A person who appeared in content as a minor may ask us to remove it under the Content Removal Requests policy.

15. International transfers and changes

15.1 International transfers. We are based in the United States, and our service providers process data in the United States and other countries. If you use Hypefindr from another country, your data is transferred to and processed in those countries, which may have different data protection laws from yours. Where the law requires, we rely on safeguards such as our providers' Standard Contractual Clauses or Data Privacy Framework certification.

15.2 Changes to this policy. We may update this policy. The "Last updated" date shows when. For a material change, we will notify you in the app or by email before it takes effect. If a change would let us use personal data we already hold in a materially different way, we will ask for your consent where the law requires.

15.3 Browser signals. Our website honors Global Privacy Control. There is no common standard for "Do Not Track" signals, so we treat them the same way we treat Global Privacy Control.

16. Contact us

Hypefindr, 300 North College Street, Northfield, Minnesota 55057, United States

Email hype.hypefindr@gmail.com with one of these subject lines:

Related: Terms of Service · Community Guidelines · Live Streaming and Recording Policy · Events, Safety and Assumption of Risk · Child Safety Policy · Content Removal Requests · Points, Scores and Referral Program Terms · Enforcement, Moderation and Appeals · Law Enforcement Guidelines · Website and Cookie Notice