Privacy Policy

This Privacy Policy describes how Haps Ltd. ("Haps", "we", "us") handles personal data when you use the Haps mobile application, the haps.network website, and related services (together, the "Services").

We are the data controller for the personal data described here. If you have questions, contact us at privacy@haps.network.

Placeholder: Haps Ltd., [Company registered address — replace before launch], United Kingdom. Replace with your registered company details before launch.

We collect the following categories of personal data:

We use personal data to:

• Create and manage your account and authenticate you;
• Show you relevant events, promoters and map content;
• Process RSVPs, ticket purchases and QR entry;
• Deliver location drops and push notifications for events and promoters you follow;
• Enable messaging between users and promoters;
• Keep the platform safe — moderating content and preventing fraud, spam and abuse;
• Respond to support requests and communicate service updates;
• Send marketing or launch updates where you have opted in (e.g. our newsletter);
• Comply with legal obligations and enforce our Terms.

Where the GDPR applies, we rely on the following legal bases:

• Contract — to provide the Services you sign up for (accounts, tickets, RSVPs).
• Legitimate interests — to keep the platform safe, improve it, and prevent abuse.
• Consent — for precise location, push notifications, optional cookies and marketing emails. You may withdraw consent at any time.
• Legal obligation — to meet tax, accounting and law-enforcement requirements.

Location features are opt-in. We only access your device location after you grant permission, and we use it to show nearby events, power the "near me" view, and deliver geo-locked location drops once you have RSVP'd. You can revoke location permission at any time in your device settings; the rest of the app will keep working.

Event addresses you see (including dropped locations) are provided by promoters. Please respect the discretion that underground events depend on.

We do not sell your personal data. We share it only with:

• Other users — your public profile, handle and the events/promoters you publicly engage with;
• Promoters — limited attendee information needed to run an event you RSVP to or buy a ticket for (e.g. ticket validity at the door);
• Service providers — hosting and database (Supabase), payment processing (Stripe), email delivery, push notifications, analytics and crash reporting, acting on our instructions;
• Legal & safety — authorities where required by law, or to protect rights, safety and the integrity of the platform;
• Business transfers — a successor entity in a merger, acquisition or asset sale.

Ticket payments are processed by Stripe. We do not receive or store your full card number. Stripe processes your payment data under its own privacy policy. We retain a record of the transaction (amount, event, status) to provide your ticket and for accounting.

We keep personal data for as long as your account is active or as needed to provide the Services. After you delete your account, we remove or anonymise your personal data within 30 days, except where we must retain certain records (e.g. transaction records for tax/accounting) for the period required by law.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Delete your data ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability;
• Withdraw consent at any time;
• Lodge a complaint with your local data protection authority.

California residents (CCPA/CPRA) have the right to know, delete, correct and opt out of the "sale" or "sharing" of personal information — we do not sell personal information. To exercise any right, email privacy@haps.network.

You can delete your account and associated data directly in the app, or by request. See our dedicated Account & Data Deletion page for step-by-step instructions and what is and isn't retained.

We use industry-standard measures — encryption in transit, hashed passwords, access controls and row-level security on our database — to protect your data. No system is perfectly secure, but we work hard to safeguard your information and will notify you and regulators of breaches where required by law.

Haps is not intended for anyone under 16, and some events are restricted to those 18 or 21+. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may process and store data in countries other than yours. Where we transfer data outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

We may update this policy from time to time. We will post the new version here with an updated date and, for material changes, notify you in the app or by email.

Questions or requests? Email privacy@haps.network or write to Haps Ltd., [Company registered address — replace before launch], United Kingdom.