Privacy Policy

Haps surfaces underground and community events. You must be 18 or older to create an account. Events may take place in unregulated venues — see our Terms for the safety disclaimer.

• Account data: email, username (handle), display name, and (optionally) avatar and bio.
• Authentication data: if you sign in with Google or Apple, we receive your name and email from that provider — never your password.
• Activity: events you create, RSVP to, save, review, tickets you hold, and people you follow or message.
• XP & Leveling progression: experience points (XP) and underground ranks earned through community participation (attending events, door QR check-ins, reviews, host milestones, and achievement badges).
• Location you enter: addresses/coordinates you add to an event. We do not track your device location in the background.
• Technical data: standard logs and your IP address, used by our providers for security and anti-abuse (captcha).

Haps includes an activity-based XP leveling system to recognize active underground community members and promoters.

• Privacy & Visibility Controls: You have full control over whether your XP level, rank, and progression are visible to other members. You can toggle your XP level visibility ON or OFF at any time directly in Settings → Privacy → Display XP & Level on Profile or from the XP dropdown on your profile page.
• Private by Choice: When toggled OFF, other users and profile visitors cannot view your XP points, rank tier, or progression meters.
• Badge Privacy: Unlocked/earned badges are public by default, while locked badges and in-progress milestone counters remain strictly confidential and visible only to the account owner.

Event-specific group chats feature encrypted real-time communications designed for live event coordination. All messages, media, and reactions in ephemeral event channels automatically self-destruct and are permanently wiped 24 hours after an event concludes.

• To run the core features — accounts, event discovery, RSVPs, tickets, messaging, and promoter tools.
• To verify your email and protect sign-up/sign-in from bots.
• To send account email (verification, password reset) and, if you opt in, event notifications.
• To keep the platform safe (content moderation, abuse reports).

We do not sell your personal data.

The app talks directly to these services from your browser/device:

• Supabase — our database, authentication, and file storage. Your account and activity data live here. See supabase.com/privacy.
• hCaptcha — bot protection on sign-up, sign-in and password reset. Receives your IP and interaction signals. See hcaptcha.com/privacy.
• Google and Apple — only if you choose to sign in with them; governed by their own privacy policies.
• CARTO & OpenStreetMap — authenticated dark basemaps and address look-ups for event locations.
• DiceBear & QR Server — generate default avatars and ticket QR codes from non-personal seeds.

We keep your data while your account is active. When you delete your account (see below), we remove your profile and the activity tied to it. Backups and provider logs may persist for a short period before rotating out. Ephemeral event chat messages automatically self-destruct after 24 hours.

• XP Level Visibility: toggle your public XP rank and level on or off at any time in Settings.
• Access / export: download a copy of your data from Settings → Privacy → Export Data.
• Deletion: delete your account from Settings → Privacy → Delete Account, or via our data-deletion page.
• Email preferences: manage notifications in Settings.

Haps is not directed to anyone under 18 and we do not knowingly collect their data.

We'll update this page and the date above when this policy changes. Material changes will be highlighted in the app.