Privacy Policy

This Privacy Policy describes how HexZen (“HexZen,” “we,” “us,” or “our”) collects, uses, and shares information about you when you use the HexZen mobile and web applications (the “Service”). By using the Service, you agree to this Privacy Policy.

1. Information we collect

1.1 Information you give us

• Account information: email address, password (stored hashed), display name, and optional username.
• Profile information: profile photo, bio, pronouns, birthday (used for age verification and not displayed publicly), phone number (optional), and the sports you play with skill level.
• Content you create: games you host, chat messages (1:1 DMs, game chats, and group chats), interest checks, reviews you leave for other players, and game attendance you record.
• Friend connections: the players you add as friends and the groups you join.

1.2 Information collected automatically

• Location data: precise coordinates (latitude / longitude) and a coarse neighborhood label, used to find games near you and show distance to scheduled games. You can revoke location permission at any time in your device settings; the Service will continue to work with reduced discovery.
• Reliability data: a numeric score derived from your game attendance, no-shows, and late cancellations. It is shown on your profile to help other players decide whether to invite you to their games.
• Push notification tokens: a device-specific token we use to deliver push notifications you have opted into.
• Device and log information: approximate IP address, device type, operating system version, app version, crash reports, and timestamps of significant actions. Used to diagnose problems and improve the Service.

2. How we use your information

• To create and maintain your account.
• To match you with games and people near you, including computing the distance shown on game cards.
• To deliver push and in-app notifications for the events you opt into (game invites, chat messages, host approvals, reminders).
• To calculate and display your reliability score and to surface attendance signals to hosts.
• To moderate the Service, detect abuse, and act on reports.
• To respond to support requests and communicate updates about the Service.

3. How we share your information

We do not sell your personal information. We share it only as follows:

• With other users: your display name, profile photo, bio, sports, reliability score, neighborhood label, and the games you have joined are visible to other HexZen users.
• With service providers: Supabase Inc. (database, authentication, file storage; hosted in the United States), Google LLC (Maps and Places suggestions for the location field), Expo Inc. (push notification delivery), Sentry (crash reporting, if enabled), and PostHog (product analytics, if enabled). Each receives only the minimum data needed to do its job.
• When required by law: we may disclose information if compelled by valid legal process, or to protect the rights, property, or safety of HexZen, our users, or others.
• In a corporate transaction: if HexZen is acquired or merged, your information may be transferred to the successor entity, who will be bound by this Privacy Policy or a substantially similar one.

4. Your rights and choices

• Access and correction: view and edit your profile inside the app under Profile → Edit Profile.
• Deletion: permanently delete your account inside the app under Profile → Account & Security → Delete account. Deletion is immediate and removes your profile, your authored content, and your friendships. Game records you participated in are retained for the integrity of other users' attendance histories but are anonymized.
• Notifications: manage push categories under Profile → Notifications.
• Location:revoke or grant location access in your device's system settings.
• Export: request a copy of your data by emailing support@hexzen.app. We will respond within 30 days.

4.1 EEA / UK residents (GDPR)

If you are in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation, including the right to object to processing, the right to data portability, and the right to lodge a complaint with your local supervisory authority. Our lawful bases for processing are contractual necessity (to provide the Service), legitimate interests (to keep the Service safe and improve it), and consent (for optional analytics and marketing communications).

4.2 California residents (CCPA/CPRA)

California residents may request disclosure of the categories of personal information we have collected, the purposes of collection, and the categories of third parties with whom we share information. You may also request deletion. We do not sell or share personal information for cross-context behavioral advertising.

5. Children

HexZen is intended for users aged 13 and older (16 and older in the European Economic Area). We do not knowingly collect personal information from children under those ages. If you believe we have collected information from a child, contact us and we will delete it.

6. Data retention

We retain your information for as long as your account is active. When you delete your account, profile and identifying data are removed within 30 days; backups are purged within 90 days. Anonymized attendance records may be retained indefinitely to preserve the accuracy of other users' reliability scores.

7. Security

We use industry-standard measures to protect your information, including TLS in transit, encryption at rest, row-level security on our database, and access controls limiting employee access. No system is perfectly secure; if we become aware of a breach affecting your information we will notify you as required by law.

8. International data transfers

Information you provide is processed and stored in the United States. If you access the Service from outside the United States, you consent to this transfer. Where required by law we use appropriate safeguards such as Standard Contractual Clauses.

9. Changes to this Policy

We may update this Privacy Policy. When we make material changes we will notify you in the app and update the “Last updated” date at the top. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

10. Contact

Questions or requests: support@hexzen.app.