Privacy Policy
This policy describes how hummOut collects, uses, stores, and protects your information when you use the hummOut app. Sibling products — PanchVeda, hummPrep, and Jaap108 — are covered by their own separate privacy policies.
1. Information we collect
Account information
When you sign up via Google or Apple, we receive your name, email address, and profile photo from that provider. We also collect:
- Date of birth — hummOut is an 18+ app; we verify age at signup and do not knowingly allow anyone under 18 to create an account.
- Phone number (optional).
- Gender and bio (optional, if you choose to add them to your profile).
Location
We collect your precise device location to show you nearby events and let you discover activities happening around you. Location is used to power the map/discovery features and is not shared with other users beyond the general area of events you host or attend.
Government ID and selfie photos (Circle verification)
To join Circle (our paid, verified-member tier), you may be asked to submit:
- A photo of a government-issued ID or another form of official/professional identification, or
- A linked LinkedIn or Facebook account, together with a selfie photo taken in the app.
Selfies are checked on your device for basic quality (a single, clearly visible face) before being submitted — this on-device check does not analyze or store biometric templates. The submitted selfie and ID images are reviewed by our moderation team (or, for social verification, an automated trust-score check with optional manual review) to confirm your identity and prevent fraudulent accounts. These images are stored securely and are not shared with other users or any third party except as required for this review.
Retention: verification images are automatically deleted from our storage 30 days after a decision is made (approved or rejected), or within 24 hours if an upload is never completed/submitted. The outcome of the review (approved/rejected, and internal review notes) is kept as a record without the underlying images.
Push notification data
If you enable notifications, we store a device-specific push token to deliver notifications (RSVP updates, verification status, billing notices, etc.). This token is deleted when you log out or uninstall and re-register.
Payment and subscription information
Circle membership payments are processed through the Apple App Store or Google Play, via our subscription-management provider, RevenueCat. hummOut does not receive or store your card or payment details — we only receive confirmation of your subscription status (active, cancelled, refunded, etc.) from RevenueCat.
Content you create
Events you create, RSVPs, reports you file, and other activity within the app are stored to operate the service.
Automatically collected information
Crash reports and error diagnostics are collected via Sentry to help us fix bugs. This does not include the sensitive data described above (ID/selfie images, precise location history).
2. How we use your information
- To operate core app features: showing nearby events, managing RSVPs, verifying Circle membership, and processing subscriptions.
- To verify your identity for Circle membership and prevent fraudulent or duplicate accounts.
- To send you notifications you've opted into.
- To enforce our community guidelines, investigate reports, and take moderation action (warnings, suspension) when necessary.
- To respond to support requests.
- To comply with legal obligations.
We do not sell your personal information.
3. Who we share information with
We share information only as needed to operate the app:
| Recipient | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage infrastructure |
| RevenueCat | Subscription and payment processing |
| Apple / Google | Sign-in, in-app purchases, push notification delivery, app distribution |
| Google Maps/Places | Location search and map display |
| Sentry | Crash and error diagnostics |
These providers process data on our behalf under their own security and confidentiality obligations. We do not share your government ID, selfie, or precise location history with other hummOut users.
4. Data retention
- Verification images (ID/selfie): deleted 30 days after your verification is approved or rejected, or within 24 hours if never completed.
- Event cover images: deleted within 24 hours if an upload is never linked to a published event.
- Push tokens: deleted on logout or when a new device replaces an old registration.
- Account data: retained while your account is active, and deleted as described below if you delete your account.
5. Account deletion and your rights
You can delete your account at any time from Settings → Account → Delete Account, or by emailing us (see Contact below). When you delete your account, we permanently remove:
- Your profile information (name, photo, bio, contact details)
- Events you created, and your RSVPs to others' events
- Verification images (ID documents and selfies) and verification records
- Push notification tokens
- Reports and moderation history tied to your account
One limited exception: if your account was suspended for violating our community guidelines at the time of deletion, we may retain a one-way cryptographic hash derived from your account identifier (not your name, email, or any other readable information) solely to prevent creating a new account to evade that suspension. This hash cannot be reversed to reveal your identity and is not used for any other purpose.
Depending on your location, you may have additional rights under applicable law (including the Digital Personal Data Protection Act, 2023 in India) to access, correct, or request erasure of your personal data, and to withdraw consent. To exercise these rights, contact us using the details below.
6. Age requirement
hummOut is intended for users 18 years of age and older. We do not knowingly collect information from anyone under 18. See our separate Child Safety page for more.
7. Security
We use industry-standard measures (encryption in transit, access controls, restricted storage) to protect your information. No system is completely secure, and we cannot guarantee absolute security.
8. Changes to this policy
We may update this policy from time to time. Material changes will be reflected here with an updated "Last updated" date.
9. Contact
For questions about this policy or to exercise your data rights, email rosh4yt@gmail.com.