Privacy Policy
This policy describes how hummOut collects, uses, stores, and protects your information when you use the hummOut app. Sibling products — PanchVeda, hummPrep, Jaap108, and LaunchReady — are covered by their own separate privacy policies.
1. Information we collect
Account information
When you sign up via Google or Apple, we receive your name, email address, and profile photo from that provider. We also collect:
- Date of birth — hummOut is an 18+ app; we verify age at signup and do not knowingly allow anyone under 18 to create an account.
- Phone number (optional).
- Gender and bio (optional, if you choose to add them to your profile).
Location
We collect your precise device location to show you nearby events and let you discover activities happening around you. Location is used to power the map/discovery features and is not shared with other users beyond the general area of events you host or attend.
Government ID and selfie photos (Circle verification)
To join Circle (our paid, verified-member tier), you may be asked to submit:
- A photo of a government-issued ID or another form of official/professional identification, or
- A linked LinkedIn account, together with a selfie photo taken in the app.
Selfies are checked on your device for basic quality (a single, clearly visible face) before being submitted — this on-device check does not analyze or store biometric templates. The submitted selfie and ID images are reviewed by our moderation team (or, for social verification, an automated trust-score check with optional manual review) to confirm your identity and prevent fraudulent accounts. These images are stored securely and are not shared with other users or any third party except as required for this review.
Retention: verification images are automatically deleted from our storage 30 days after a decision is made (approved or rejected), or within 24 hours if an upload is never completed/submitted. The outcome of the review (approved/rejected, and internal review notes) is kept as a record without the underlying images.
Push notification data
If you enable notifications, we store a device-specific push token to deliver notifications (RSVP updates, verification status, billing notices, etc.). This token is deleted when you log out or uninstall and re-register.
Payment and subscription information
Circle membership payments are processed through the Apple App Store or Google Play, via our subscription-management provider, RevenueCat. hummOut does not receive or store your card or payment details — we only receive confirmation of your subscription status (active, cancelled, refunded, etc.) from RevenueCat.
Content you create
Events you create, RSVPs, reports you file, and other activity within the app are stored to operate the service.
Automatically collected information
Crash reports and error diagnostics are collected via Sentry to help us fix bugs. This does not include the sensitive data described above (ID/selfie images, precise location history).
Early-access list
The hummOut early-access list is a Google Group (hummout@googlegroups.com). If you join, Google holds your email address and Google account details under the Google Privacy Policy. We use the list only to send launch news and invitations to test the app, and only group managers can see who has joined. You can leave the group at any time from Google Groups.
2. How we use your information
- To operate core app features: showing nearby events, managing RSVPs, verifying Circle membership, and processing subscriptions.
- To verify your identity for Circle membership and prevent fraudulent or duplicate accounts.
- To send you notifications you've opted into.
- To enforce our community guidelines, investigate reports, and take moderation action (warnings, suspension) when necessary.
- To respond to support requests.
- To comply with legal obligations.
We do not sell your personal information.
3. Who we share information with
We share information only as needed to operate the app:
| Recipient | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage infrastructure |
| RevenueCat | Subscription and payment processing |
| Apple / Google | Sign-in, in-app purchases, push notification delivery, app distribution |
| Google Maps/Places | Location search and map display |
| Sentry | Crash and error diagnostics |
These providers process data on our behalf under their own security and confidentiality obligations. We do not share your government ID, selfie, or precise location history with other hummOut users.
What other hummOut users can see
hummOut is for meeting people in person, so some of your profile is visible to other users:
- Your name and, if you add one, your short bio.
- Your profile photo from your Google or Apple sign-in. You can hide it at any time in Edit Profile (“Show my profile photo”); other users then see a generic icon instead.
- Whether you’re a verified Circle member (a badge).
- Events you host, including their title, description, date, time and the event’s location (never your own device location).
- When you ask to join an event, its host sees your name, photo and bio so they can decide whether to accept.
- Once you’re approved for an event, the host and the event’s other approved attendees can see your name and photo in the list of who’s going.
- If you host an event, the note you add for approved attendees (for example, how to reach you or where to meet) is visible only to them.
Other users never see your email address, phone number, date of birth, gender, payment details, ID documents, selfies, or your precise location.
4. Data retention
- Verification images (ID/selfie): deleted 30 days after your verification is approved or rejected, or within 24 hours if never completed.
- Event cover images: deleted within 24 hours if an upload is never linked to a published event.
- Push tokens: deleted on logout or when a new device replaces an old registration.
- Account data: retained while your account is active, and deleted as described below if you delete your account.
5. Account deletion and your rights
You can delete your account at any time from Settings → Account → Delete Account, or by emailing us (see Contact below). When you delete your account, we permanently remove:
- Your profile information (name, photo, bio, contact details)
- Events you created, and your RSVPs to others' events
- Verification images (ID documents and selfies) and verification records
- Push notification tokens
- Reports and moderation history tied to your account
One limited exception: if your account was suspended for violating our community guidelines at the time of deletion, we may retain a one-way cryptographic hash derived from your account identifier (not your name, email, or any other readable information) solely to prevent creating a new account to evade that suspension. This hash cannot be reversed to reveal your identity and is not used for any other purpose.
Depending on your location, you may have additional rights under applicable law (including the Digital Personal Data Protection Act, 2023 in India) to access, correct, or request erasure of your personal data, and to withdraw consent. To exercise these rights, contact us using the details below.
6. Age requirement
hummOut is intended for users 18 years of age and older. We do not knowingly collect information from anyone under 18. See our separate Child Safety page for more.
7. Security
We use industry-standard measures (encryption in transit, access controls, restricted storage) to protect your information. No system is completely secure, and we cannot guarantee absolute security.
8. Changes to this policy
We may update this policy from time to time. Material changes will be reflected here with an updated "Last updated" date.
9. Contact
For questions about this policy or to exercise your data rights, email support@hummout.com.
Grievance Officer
In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the Grievance Officer for hummOut is:
Roshan Kumar, Grievance Officer, hummOut, Delhi, India
Email: support@hummout.com (subject line “Grievance”)
We acknowledge every complaint within 24 hours and resolve it within 15 days of receipt. A complaint about content that exposes a person’s private areas, shows them in full or partial nudity or in a sexual act, or impersonates them is acted on within 24 hours.