HOPN Privacy Policy

Effective Date: September 24, 2026

Last Updated: September 24, 2026

HOPN LLC ("HOPN," "we," "us," or "our") provides the HOPN mobile application, website, and related services (collectively, the "Service"). This Privacy Policy explains what personal information we collect, how we use and disclose it, how long we retain it, and the choices and rights available to you.

HOPN is the controller or business responsible for the personal information described in this Privacy Policy. Our Terms of Service govern your use of the Service.

HOPN is intended only for adults aged 18 and older. Because HOPN records and shares nightlife activity and location information, please read the location and visibility sections carefully before starting a trip or Pouch.

1. Summary of Key Practices

• Location is a core feature. When a trip or Pouch is active, HOPN records precise location in the foreground and, if you grant the necessary device permission, in the background. We use this information to create routes, detect and confirm stops, show permitted map locations, generate trip statistics and Morning Recaps, and operate safety and auto-end features.
• Recording and sharing are different. HOPN may record the complete underlying route even when a location is hidden from other users on the live map. Your location-sharing setting, account settings, trip visibility, relationships, and Pouch membership determine what other users can see. Members of a Pouch see more of each other's night than other users do, including routes on crew maps, as described in Section 5.3.
• Some HOPN content is social or public. Depending on your settings, profiles, posts, replies, reposts, quotes, hashtags, tags, trip summaries, routes, stops, photos, reactions, and follower relationships may be visible to other users. Public or shared content can be copied, screenshotted, downloaded, or reshared by others.
• Recaps use artificial intelligence, and only if you turn them on. If you opt in to AI recaps, we send selected trip, Pouch, stop, caption, and Pouch-chat information to Anthropic's commercial API to generate Morning Recaps and vacation recaps. A Pouch-mate's recap may include information about you even if you have not opted in, as described in Section 5.4. We do not use HOPN content to train HOPN foundation models.
• We use service providers. Current core providers include Supabase for authentication, databases, storage, and server functions; Twilio for text-message sign-in codes; Resend for account emails; Vercel for website and administrative-dashboard hosting; PostHog for product analytics; Sentry for crash and performance monitoring; Anthropic for Morning Recap generation; Sightengine for automated image moderation; Apple for device services, maps and venue lookup, sign-in, and push delivery; and Google for optional Google Sign-In.
• We do not sell personal information. We do not sell personal information for money or share it for cross-context behavioral advertising. Businesses and event hosts see the limited information described in Section 6, such as their events' guest lists and venue leaderboards built from public activity.
• Account deletion is immediate. When you complete in-app account deletion, the account cannot be restored. We delete or de-identify associated information as described below, subject to limited legal, safety, security, backup, and transaction-record exceptions.

2. Eligibility and Age Information

The Service is intended solely for people who are at least 18 years old. We collect your date of birth to enforce this requirement. We do not knowingly collect personal information from anyone under 18.

If we learn that a person under 18 has provided personal information to HOPN, we will take steps to remove the information and terminate the account. If you believe a person under 18 is using HOPN, contact us at privacy@hopn.app.

3. Information We Collect

3.1 Account and Profile Information

We collect information you provide when you create or maintain an account, including:

• Display name, username, date of birth, and an email address or phone number, depending on how you sign up
• Password or third-party sign-in credentials, which are processed through our authentication provider; HOPN does not store your password in readable form
• A profile photo, which you are asked for during sign-up and which newer accounts must add shortly after joining, plus optional gender, biography, and city, each editable in your profile settings
• A phone number you add after signing up, for example so that friends who have it in their contacts can find you
• Account privacy, location-sharing, AI-recap, and notification preferences, including any Hop Reminder schedule you set
• Authentication provider information when you use Sign in with Apple or Google Sign-In
• Account creation date and account status
• If you apply for or hold a business account: the business name, category, description, street address, phone number, website, and social-media handles you submit, and your application status; and, once approved, the business profile you publish, including a tagline, whether to show your phone number, opening hours, one or more saved business locations with addresses and map coordinates, about text, amenities, photos, links, social-media profiles, announcements, weekly specials, and event images

3.2 Location, Trip, and Venue Information

When a trip or Pouch is active, we may collect and generate:

• Precise latitude and longitude, timestamps, accuracy, speed, and heading
• A temporary on-device route buffer used to recover points after connectivity or app interruptions
• Live-location coordinates and the time they were last updated
• Processed route geometry, distance, duration, start and end times, and trip city
• Manual check-ins and passively detected stop candidates, including observed coordinates, arrival and departure times, confidence information, and venue matches
• Confirmed stops, custom or corrected venue names, venue categories, photos, ratings you give a stop (such as vibes, drinks, and food), and visit history
• Saved places you create, with their names, addresses, and map coordinates
• Pouch membership, participation times, each member's location-sharing setting, and co-location or group activity information
• Vacations you plan or join, including title, destination, dates, and the nights they group

HOPN may record points near a home, workplace, sensitive venue, or other non-public place if a trip remains active there. Hiding a point from another user's live map does not necessarily prevent HOPN from recording it for your route, trip history, stop detection, auto-end, safety, or recap features.

3.3 Content and Social Information

We collect content and interactions you create through the Service, including:

• Posts, threads, replies, reposts, quotes, captions, hashtags, mentions, tags, and attached trip or stop information
• Photos and other media you upload
• Poll questions, options, votes, and aggregate results; individual ballots are not displayed publicly
• Likes, reactions, votes, and other engagement signals, and information about who interacted with content where the feature displays that information
• Following and follower relationships, invitations, QR-code connections, and blocks. Recent in-app searches are stored only on your device
• Pouch names, descriptions, invitations, membership, chat messages, message reactions, Pouch Pings, and related activity
• Morning Recaps, recap reactions, recap comments, shares, and reroll activity
• Business profile details and event listings you publish, including title, description, category, venue name, address, coordinates, start and end times, and cover image
• Events you host, co-host, are invited to, or respond to, including title, description, category, venue and planned stops with addresses and coordinates, times, cover image, whether the event is public or invite-only, guest limits, invite codes, co-hosts, and each guest's response (going, maybe, or declined). Creating or joining a Pouch linked to an event can record you as going
• Reports, safety requests, support messages, feedback, and other communications with HOPN

3.4 Safety Information

If you use Flare, Pouch Ping, or related safety and coordination features, we collect the information needed to process the request, which may include the initiating and target users, Pouch or trip identifiers, timestamps, status, notifications, and location-related context.

Flare lets you ask one Pouch member where they are, and lets them answer. If you answer a Flare by sharing a pin, HOPN sends the coordinate captured at that moment to the member who sent the Flare and stores it with the Flare record. Sharing a pin is a separate choice each time you answer and works independently of your location-sharing setting, including Share Nothing. You can answer without sharing a pin, or not answer at all.

These features are not emergency services and are not continuously monitored. In an emergency, contact 911 or the appropriate local emergency service.

3.5 Gamification and Inferences

We generate information from your activity, including Hop Score events, totals, streaks, badges, venue milestones, trip and stop counts, distance totals, leaderboard position, venue leaderboard scores, and eligibility for achievements. We may infer that location points represent a stop, that multiple users were participating in the same Pouch, or that an inactive trip should be ended automatically.

3.6 Device, Usage, Analytics, and Diagnostic Information

We and our service providers collect information about use and operation of the Service, including:

• HOPN user ID and provider-generated identifiers
• Device type, operating system, app version, language, time zone, network and IP information
• Screens or features used, taps and interactions, notification interactions, session timing, the time you last opened the app, referral information, and feature preferences
• Trip and feature metrics such as duration, stop count, distance, location-permission state, battery level, and location-tracking performance
• Crash reports, errors, app hangs, performance metrics, diagnostic logs, and breadcrumbs describing actions leading up to an error

We design analytics events to avoid direct identifiers such as your email address and display name. Some event properties may nevertheless be linked to your pseudonymous HOPN user ID and may reveal how you used the Service.

3.7 Information From Other Sources

We may receive information from:

• Apple or Google when you choose their sign-in service
• Other users when they follow, invite, tag, mention, message, report, or interact with you or your content
• Apple Maps and other venue-data sources when HOPN identifies or displays nearby places
• Service providers that help authenticate users, operate the Service, detect abuse, deliver notifications, analyze usage, generate Recaps, or diagnose errors

If you choose Find from Contacts, HOPN reads the contact names, email addresses, and phone numbers available through the device permission you grant. HOPN normalizes email addresses and phone numbers on your device and converts them to SHA-256 hashes before matching, then sends those hashes — not the address-book entries themselves — to its server to check for accounts that permit contact discovery. Contact names never leave your device. The hash is unsalted and computed over a short public prefix, so it should not be understood as anonymization: sending a hashed email address or phone number is still sending that identifier in an encoded form. The matching request is processed transiently and HOPN does not store the submitted contact hashes in a contacts database.

If another user uses Find from Contacts, HOPN may compare their submitted hashes with a hash derived from the email address or phone number associated with your HOPN authentication account. You can turn off Find Me Through Contacts in Settings. Blocks are also applied to contact-discovery results.

When you invite a contact who is not on HOPN, the invitation is sent using the sharing or messaging service you select on your device. HOPN does not receive the recipient you select through the system share sheet, although the third-party messaging service processes the invitation under its own terms and privacy policy.

3.8 Motion, Fitness, and Step Activity

If you grant the Motion & Fitness permission, HOPN uses it for two purposes.

Stationary detection (on-device only). HOPN reads your device's motion-activity signal while a trip is active to tell whether you are holding still or moving, and uses it only to reduce how often it wakes up GPS while you are stationary, which conserves battery over the course of a night. That signal is processed entirely on your device and is reduced to a single stationary-or-moving indicator that adjusts how often HOPN samples your location. HOPN does not transmit or retain your underlying motion-activity history.

Trip step count (collected and stored). HOPN also reads the number of steps your device's built-in step counter recorded during a completed trip. HOPN stores that single total with the trip on our servers, shows it to you in your Trip Summary and Morning Recap, and saves a copy in the trip's recap record. Only the total for the trip window is collected. HOPN does not collect your step history outside a trip, your daily or lifetime step totals, workout or exercise records, heart rate, or any other health measurement, and does not use step counts to infer health or fitness characteristics about you. Your step total is shown to you; it reaches other people only if you share a Morning Recap or other content that displays it. HOPN does not send your step count to our AI provider when generating a Morning Recap.

HOPN's diagnostic analytics record whether you granted the Motion & Fitness permission and which location-sampling mode resulted, so that we can diagnose battery and tracking problems. That diagnostic record contains no motion-activity detail.

The permission is optional. If you deny it, or if your device does not provide motion or step data, HOPN continues to track trips normally using location alone. Only battery efficiency and the step total are affected.

3.9 Device Permissions and Information We Do Not Intentionally Collect

HOPN requests device permissions only when needed for a feature, including location, motion and fitness, contacts, camera, photo library, and notifications. You can manage these permissions in your device settings, although disabling them may limit features.

HOPN does not intentionally collect biometric identifiers such as facial geometry, fingerprints, or voiceprints. Other than the trip step count described in Section 3.8, we do not intentionally request information about health, religion, political beliefs, race or ethnicity, sexual orientation, or union membership. You may nevertheless reveal sensitive information through content, messages, photos, venue visits, or location history. Avoid including sensitive information you do not want processed or shared.

3.10 Website Information and Earlier Waitlist Signups

Before HOPN was released, our website offered a waitlist signup form where you could submit your email address and any other information the form requested. That form was operated by Launchlist, a third-party provider that collected and stored submissions on HOPN's behalf. HOPN is now available on the App Store and the form has been removed from our website, so no new signups are collected. Launchlist still stores the submissions made while the form was live, and we use them only to send HOPN news and updates. You can unsubscribe using the link in those emails or by emailing privacy@hopn.app, which also removes your entry.

Our website also embeds a chat widget provided by Voyce Technologies, an affiliated company under common ownership with HOPN. If you use the chat widget, the messages you send, any name, email address, or phone number you provide through its contact form, and any voice recording you make are sent to and processed by Voyce Technologies, which also stores an identifier in your browser so it can recognize your device across visits. Voyce Technologies handles that information under its own privacy notice. You are not required to use the chat widget, and HOPN's mobile application does not include it.

When you use a HOPN download or invitation link on our website, we record an analytics event with PostHog that notes the link's source and platform, the referring page, an approximate location (country, region, and city) derived from your IP address, and, if the link came from a HOPN user, that user's HOPN ID. We do not send your IP address itself to PostHog for this event and do not set a cookie.

Our website is hosted by Vercel, which serves every page and file request to hopn.app. Vercel receives your IP address and basic request information, such as the address requested, the time of the request, and your browser's user-agent string, as a technical necessity of delivering the site.

Loading our website also causes your browser to request resources from Voyce Technologies and Google Fonts, each of which receives your IP address and basic request information as a technical consequence of serving those resources. HOPN does not use these resources for advertising or cross-site tracking.

3.11 Film

If you take photos with Film, HOPN uploads each shot when you take it, together with the time, the stop you were at, and the location recorded at that moment, and screens it with our image-moderation provider. Shots stay hidden from everyone, including you, until they develop the next morning. After that, a shot is visible to you and, if it was taken during a Pouch, to current and past members of that Pouch, subject to blocks. The location recorded with a shot is used to attach it to the right stop and is not shown to other users. Film photos are kept in private storage and are shown through temporary links. You can delete a shot after it develops. Shots that could not upload are retried from your device for up to seven days and then deleted from it.

3.12 Referrals, Invitations, and Contests

When someone joins HOPN through your profile QR code or invitation link, we record that you referred them, and how the referral was detected. The first time you open HOPN after installing it from such a link, the app may check your clipboard for a HOPN invitation link, and iOS asks your permission before HOPN can read it. HOPN reads only its own invitation links. If you enter a HOPN contest, such as a referral competition, we use your referral records to count your entries, and if you win we collect what the contest rules require, such as proof of student enrollment, to verify eligibility and deliver the prize. Each contest's official rules explain what they require.

4. How We Use Personal Information

We use personal information to:

4.1 Provide and Personalize the Service

• Create, authenticate, secure, and maintain accounts
• Record trips and routes, calculate trip statistics, detect and confirm stops, and maintain trip history
• Operate maps, location visibility, Pouches, chat, feeds, profiles, polls, notifications, search, sharing, and gamification
• Generate and display Morning Recaps
• Suggest users, venues, content, and features
• Remember settings and provide customer support

4.2 Operate Location and Safety Features

• Share live or last-confirmed location with authorized users according to your settings
• Detect whether a trip may still be active and automatically end qualifying inactive trips or Pouches
• Operate Flare and Pouch coordination features
• Investigate credible reports of stalking, threats, abuse, account compromise, or other safety concerns

4.3 Protect HOPN and Its Users

• Authenticate requests and prevent unauthorized access
• Detect, investigate, and prevent fraud, spam, abuse, manipulation, illegal conduct, and violations of our Terms
• Enforce blocks, privacy settings, content rules, rate limits, suspensions, and account restrictions
• Automatically screen photos attached to posts, Film shots, and event, vacation, and business-profile images, and refuse to publish those an automated classifier flags as sexual content
• Preserve or disclose information when reasonably necessary for legal, safety, security, or rights-protection purposes

4.4 Analyze and Improve the Service

• Measure feature adoption, reliability, performance, and user experience
• Debug errors, monitor crashes, and improve battery and location performance
• Test, develop, and improve features, algorithms, stop detection, safety systems, and Recap quality
• Create aggregated or de-identified operational statistics

We do not use private HOPN content to train a general-purpose HOPN foundation model. If we propose materially different AI-training uses in the future, we will update this Policy and provide any notice or choice required by law.

4.5 Communicate With You

• Send authentication, security, account, Pouch, event, social, recap, safety, and other service-related emails or notifications, including weekend reminders to go out that may name people you went out with before, summaries of activity you missed while away, and tips about new features, each of which you can turn off in notification settings
• Respond to support, privacy, legal, and safety requests
• Send product news or marketing communications where permitted; you may opt out of marketing messages, but not essential service communications

4.6 Comply With Law

We use information to comply with applicable law, respond to valid legal process, establish or defend legal claims, protect rights and safety, and meet recordkeeping obligations.

4.7 Legal Bases for EEA, UK, and Similar Jurisdictions

Where applicable, our legal bases include:

• Contract: providing the account, trips, Pouches, maps, feeds, Recaps, notifications, support, and other features you request
• Consent: device permissions, optional information, marketing, and processing for which applicable law requires consent; you may withdraw consent, subject to processing already completed
• Legitimate interests: securing and improving the Service, preventing abuse, understanding feature performance, protecting users, and establishing or defending legal claims, after considering the effect on your rights
• Legal obligation: complying with laws, court orders, regulatory requirements, and valid governmental requests
• Vital interests: responding to a credible emergency involving a risk of death or serious physical harm where permitted by law

Providing account information and location during an active trip is necessary for the corresponding Service features. If you do not provide it, those features may not function.

5. How Visibility and Sharing Work

5.1 Profiles, Feed, and Social Activity

Depending on your account and content settings, other HOPN users may see your username, display name, profile photo, biography, badges, Hop Score, follower relationships, posts, replies, reposts, quotes, hashtags, tags, trip summaries, routes, stops, photos, reactions, and other social activity. If you hold a business account, your business profile and the events you publish are public content shown to HOPN users, including on the map.

Content marked public may be available to HOPN users beyond your followers. Content limited to followers or otherwise restricted is shown according to the applicable setting, blocks, and relationship rules.

If your account is private, people who do not follow you can still see your username, display name, and profile photo, and signed-in users can see who you follow and who follows you. A reply you post under someone else's post is visible to anyone who can see that conversation, even if they do not follow you. Your own posts, trips, badges, Hop Score, biography, and city are limited to your followers.

If your account is public, your confirmed public visits to a business can place you on that business's venue leaderboard, which shows your name, photo, and visit-based score to the business and to other signed-in users. Private accounts do not appear on venue leaderboards. Changing a setting may not remove copies already saved, screenshotted, downloaded, or reshared by another person.

At present, a new trip, post, or check-in may initially be set to public unless you select a different audience before sharing. Review the audience control each time you create content or start a trip. Public trip visibility can expose the processed route and stops after the trip, even if live-map sharing was restricted while the trip was active.

5.2 Map and Location Visibility

HOPN has one location-sharing setting, which applies both to your Pouch and to the map your followers see. It has three options:

• Share Live Location: real-time location may be shown to mutual followers while your trip is active and to members of your Pouch
• Share Check-Ins: real-time movement is not shown, but an eligible confirmed stop from an active trip may appear as a last-seen location for up to approximately eight hours (this is the default)
• Share Nothing: you do not appear to other users on the map, although HOPN still processes location needed for your own active trip and related features

Your membership status and this setting determine whether other Pouch members receive live, stop-level, or no map information. Mutual followers who can see you on the map can also see the name of the Pouch you are in and which of its members are sharing. A map pin may be delayed, incomplete, or inaccurate. Users may also infer location from posts, photos, captions, check-ins, trip routes, or other context even when live sharing is disabled. Separately from the social map, answering a Flare with a pin shares that coordinate with the member who sent it, as described in Section 3.4.

Trip visibility is separate from live-map visibility. A trip or trip summary set to public or followers may expose its processed route, stops, photos, timing, and statistics to the selected audience.

5.3 Pouches and Pouch Chat

Authorized Pouch members may see information needed to participate in the Pouch, including member identity, participation status, location-sharing setting, trip or stop activity allowed by that setting, Pouch posts, chat messages, message reactions, and developed Film shots.

Unless you choose Share Nothing, Pouch members can also see:

• Your route on the crew map. During the night, members see your path while you share live location, or your path between your first and latest check-ins while you share check-ins. After the night, the recap's crew map shows each member's route between their first and last stops. Crew maps are kept with the recap and remain visible to anyone who was a member of the Pouch, whatever visibility setting your trip has.
• Your recent stops and saved places, to name check-ins. When a member checks in, HOPN may suggest a venue name from a stop you checked into nearby in the last 45 minutes, or from one of your saved places within about 60 meters of them. HOPN can also use a nearby saved place of yours to name a Pouch-mate's stop automatically. HOPN only makes these suggestions within a short distance of that member's current location, and never shows members a list of your saved places.

If you use the lock-screen Live Activity during a trip, it shows your current venue, your Pouch's name, and the names or photos of other active members on your device's lock screen.

Pouch chat is not end-to-end encrypted. HOPN and its service providers have the technical ability to process chat messages to deliver chat, generate eligible Morning Recaps, investigate reports, enforce our Terms, protect safety, and comply with law.

5.4 Morning Recaps and Artificial Intelligence

HOPN uses Anthropic's commercial API to generate Morning Recaps and vacation recaps. HOPN generates a recap for you only if you have turned on AI recaps, which you can change at any time in Settings. Turning AI recaps off stops new recaps for you. It does not remove you from recaps generated for other members of a Pouch you were in, which may include your display name, stops, eligible chat messages, and captions. Depending on the trip and privacy rules, inputs may include:

• Pouch or trip name and description
• Member display names and participation windows
• Stops, venue names, stop ratings, times, movement gaps, trip distance, and other trip statistics
• For vacation recaps, the vacation's title, destination, dates, and the venues and highlights of each night
• Selected Pouch chat messages and eligible post captions
• Aggregated photo signals, such as counts associated with a member or venue; HOPN does not send the photo files to Anthropic for this purpose
• Previous Recap framing used to improve variety

HOPN applies visibility and block filters before constructing Recap inputs, including restrictions for members using the most private Pouch mode. A generated Recap may still refer to people, places, timing, and activity included in the eligible inputs. Recaps may be inaccurate, incomplete, or unexpected and should not be treated as an authoritative record or safety information.

Anthropic processes this information as a service provider under commercial terms. HOPN does not intentionally opt Recap inputs into general model training.

5.5 Service Providers

We disclose personal information to providers that perform services for HOPN, such as:

• Supabase: authentication, databases, file storage, realtime updates, and server functions
• Twilio: sending text-message codes when you sign in or verify a phone number
• Resend: delivering account emails such as sign-up confirmation and password reset
• Vercel: hosting and content delivery for the HOPN website and for HOPN's internal administrative dashboard
• PostHog: product analytics in the app, on our servers, and for our website's download and invitation links
• Sentry: crash, error, hang, and performance monitoring
• Anthropic: AI-generated Morning Recaps
• Sightengine: automated moderation of images submitted for publication
• Launchlist: storing the waitlist submissions collected on our website before HOPN was released
• Voyce Technologies, an affiliated company under common ownership with HOPN: the chat and contact widget on our website
• Apple: device platform services, maps, Sign in with Apple, and push-notification delivery; our servers also send stop coordinates to Apple Maps to identify nearby venues
• Google: Google Sign-In when selected
• Email, security, moderation, support, and infrastructure providers we may use to operate the Service

We require providers to process information for authorized purposes and to maintain protections appropriate to their role. Their processing may also be governed by their own terms and privacy notices where they act independently, such as when you choose a third-party sign-in service.

5.6 Legal, Safety, and Enforcement Disclosures

We may preserve, use, or disclose information when we reasonably believe it is necessary to:

• Comply with applicable law, a valid subpoena, court order, warrant, or other legal process
• Respond to an emergency involving a risk of death or serious physical injury
• Detect, investigate, or prevent fraud, abuse, stalking, threats, account compromise, or illegal activity
• Enforce our Terms or protect HOPN, our users, venues, or others
• Report apparent child sexual abuse material to the National Center for Missing & Exploited Children as required by law

5.7 Business Transfers

Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction. Any successor will remain subject to applicable law and the privacy commitments that apply to the transferred information.

5.8 With Your Direction or Consent

We disclose information when you direct us to do so, such as when you publish a post, share a Recap, join a Pouch, select a location-sharing setting, use a third-party sign-in service, or otherwise consent to a disclosure. When you share a photo post to Instagram or another app, the image HOPN creates includes the author's name and photo, and the destination app handles it under its own terms.

5.9 Links and Previews Visible Outside the App

Some HOPN links open a web page or a link preview that anyone can view without a HOPN account:

• Public posts: the author's name, a short excerpt of the caption, and the first photo
• Events and Pouch invitations: the title, description, date and time, venue and address, planned stops, cover image, number of people going, and the host's name and profile photo
• Business listings and weekly specials: the details the business published, including its name, profile photo, address, and map location, even after a listing has ended

Anyone holding such a link, including a person it was forwarded to, can open it.

6. Sale, Advertising Sharing, and Venue Partners

HOPN does not sell personal information for money. HOPN does not share personal information for cross-context behavioral advertising and does not use precise location for targeted advertising.

HOPN offers business accounts, and lets business accounts and approved hosts publish events, as described in our Terms of Service. HOPN does not give businesses or hosts your location history, contact details, or analytics about you beyond what is described here:

• Guest lists: the host, co-hosts, and other guests of an event can see who responded to it and how
• Event statistics: hosts and co-hosts see counts for their event, such as how many people responded, how many Pouches formed, how many guests checked in somewhere during the event, and the venues those guests visited most. These are counts, not names
• Venue leaderboards: a business and other signed-in users can see the leaderboard for the business's locations, as described in Section 5.1
• Followers: like any signed-in user, a business can see who follows it

If we introduce any further venue or business analytics program, we will first update this Policy, establish de-identification and contractual controls, and provide any notice, consent, or opt-out required by law.

7. Photos and Media

HOPN re-encodes uploaded images as JPEG files for storage and delivery. This process is designed to omit source metadata such as embedded GPS and camera details. We cannot guarantee that visible details in a photo, its caption, a tagged venue, or other context will not reveal where or when it was created.

Before a photo you attach to a post, a Film shot, or an event, vacation, or business-profile image is published, HOPN submits it to Sightengine, an automated image-moderation provider, which classifies it for sexual content and returns a score and an allow-or-reject result. HOPN records that result and related information for moderation, threshold tuning, and repeat-violation signal. A photo the classifier rejects is not published and is deleted from HOPN storage. Automated classification is imperfect and is not guaranteed. It may reject a photo our rules permit or allow a photo that violates them. Profile photos, Pouch chat photos, planned-Pouch cover images, and stop photos are not currently screened this way. If the moderation service is briefly unreachable, a post photo may publish without being screened (Film shots are never published unscreened); if the service is unavailable to HOPN for a longer period, photos are refused until it can be used again. In that case a photo can be declined for reasons that have nothing to do with the photo itself. If a photo you submitted was rejected and you believe that was wrong, you may request review as described in our Terms of Service.

Except for Film shots, which are kept in private storage and shown through temporary links, media files are served from web addresses that are not individually password-protected. HOPN controls where media appears inside the Service according to your settings, but anyone who obtains a file's direct web address — for example because you or a permitted viewer copied or forwarded it — may be able to open that file without a HOPN account, regardless of the audience you selected for the surrounding post. These addresses are long and are not published or indexed by HOPN, so they are not ordinarily discoverable, but you should treat any photo you upload as potentially viewable by anyone who obtains its link.

Deleting a post, trip, or other content removes it from the Service, and the content stops appearing in feeds, profiles, maps, and recaps. The underlying image files are removed from HOPN's storage either at the time you delete the content or, at the latest, by an automated cleanup process that runs daily, so a file ordinarily remains no more than about 24 hours after the content that displayed it is deleted, and may be reachable during that period by anyone holding its direct address. Image files attached to stops are not yet covered by that cleanup and remain in storage until your account is deleted. Cover images for Pouches, events, and vacations are not covered by that cleanup or by account deletion and may remain in storage. Completing account deletion removes your stored profile, post, stop, and Film images as described in Section 8. A recipient may also save or reshare media outside HOPN, and HOPN cannot delete copies controlled by other people or third-party services.

8. Retention

We retain information for the period needed to provide the Service, comply with law, protect safety and security, resolve disputes, and enforce agreements. Current principal retention practices are:

When you delete your account, HOPN immediately disables access and begins or completes deletion of authentication data, profile information, routes, stops, posts, photos, Pouch messages, social relationships, votes, Recaps, notifications, and other account-linked data. HOPN retains a de-identified account tombstone where needed to preserve database integrity. Reports filed against an account, deletion audit records, security records, legal holds, and temporary backup or reconciliation copies may remain for the limited purposes described above.

Deletion from active systems may occur before deletion from encrypted backups or provider recovery systems. Residual copies are isolated from ordinary use and expire according to applicable backup schedules unless preservation is legally required.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These include authenticated access, authorization rules, encryption in transit, provider security controls for stored data, restricted administrative access, rate limits, security monitoring, and account-erasure procedures.

No system is completely secure. You are responsible for protecting your credentials, device, and account. Notify support@hopn.app promptly if you believe your account has been compromised.

10. Your Choices and Controls

You can:

• Edit profile information and account privacy within the Service
• Turn off Find Me Through Contacts and revoke HOPN's Contacts permission in device settings
• Choose Share Live Location, Share Check-Ins, or Share Nothing for your Pouch and the map
• Turn AI recaps on or off in Settings
• Delete Film shots after they develop, and delete saved places
• Change trip visibility and unshare eligible trip content
• Leave or end eligible Pouches
• Control location, motion and fitness, camera, photo-library, and notification permissions through device settings; denying Motion & Fitness affects only battery efficiency, not trip tracking
• Manage notification preferences within HOPN and device settings
• Block users and report accounts or content
• Delete eligible posts, trips, or other content using available in-app controls
• Delete your account through Settings; deletion is immediate and cannot be undone
• Opt out of marketing email using the unsubscribe method provided

Turning off device location stops new GPS collection through that permission but may prevent trip, map, stop-detection, auto-end, and safety features from functioning. It does not delete information previously collected.

11. Privacy Rights

Depending on where you live and subject to legal exceptions, you may have the right to request access, correction, deletion, restriction, objection, or portability of personal information, and to withdraw consent where processing is based on consent.

Submit a request to privacy@hopn.app with the subject "Privacy Rights Request." We may verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law, subject to verification.

11.1 California

If HOPN is subject to the California Consumer Privacy Act for your information, California residents may have rights to:

• Know the categories and specific pieces of personal information collected, sources, purposes, categories of recipients, and disclosures
• Delete personal information, subject to exceptions
• Correct inaccurate personal information
• Opt out of sale or sharing for cross-context behavioral advertising; HOPN does not currently engage in either practice
• Limit uses and disclosures of sensitive personal information outside legally permitted purposes; HOPN uses precise location and other sensitive information to provide requested features, protect security and safety, and for other permitted purposes described in this Policy
• Receive equal service and pricing without unlawful discrimination for exercising privacy rights

11.2 Other U.S. States

Residents of states with applicable comprehensive privacy laws may have similar rights, including rights to access, correct, delete, obtain a portable copy, opt out of targeted advertising, sale, or certain profiling, and appeal a denied request. HOPN does not currently sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising.

To appeal a denied request, email privacy@hopn.app with the subject "Privacy Request Appeal" and explain the decision you want reviewed.

11.3 EEA, Switzerland, and United Kingdom

Where applicable, you may have rights to access, rectify, erase, restrict, port, or object to processing; withdraw consent; and complain to your local data-protection authority. You may also request information about safeguards used for international transfers.

HOPN does not make decisions producing legal or similarly significant effects solely through automated processing. Automated systems may detect stops, rank content or suggestions, calculate scores and badges, close inactive trips, rank venue leaderboards, and screen submitted images and refuse to publish those flagged as sexual content. These functions do not determine legal rights. Where an automated decision blocks content you submitted, you may request human review as described in our Terms of Service.

12. International Transfers

HOPN is based in the United States, and information is processed in the United States and other locations where our providers operate. Those locations may have different data-protection laws than your home jurisdiction.

Where applicable law requires a transfer mechanism, HOPN relies on legally recognized safeguards such as adequacy decisions, contractual protections, or Standard Contractual Clauses. Contact privacy@hopn.app for more information relevant to your jurisdiction.

13. Cookies and Similar Technologies

The mobile application uses software development kits, local storage, and similar technologies for authentication, settings, analytics, performance, security, and Service functionality.

Our website does not use analytics or advertising cookies. It records the server-side analytics event described in Section 3.10 when you use a download or invitation link, without setting a cookie. The chat widget described in Section 3.10 uses cookies or browser storage of its own in order to function, so that it can retain a device identifier and your recent conversation. If we later add non-essential website technologies such as analytics or advertising cookies, we will update this Policy and request consent where required.

HOPN does not use this information for cross-context behavioral advertising.

14. Third-Party Services

The Service may link to or interoperate with third-party services, including Apple, Google, map and venue providers, and sharing destinations. Information you provide directly to a third party is governed by that party's terms and privacy notice. HOPN is not responsible for third-party privacy practices.

15. Changes to This Privacy Policy

We may update this Privacy Policy as the Service and law change. We will post the updated version and revise the "Last Updated" date. If a change materially affects how we use or disclose previously collected information, we will provide additional notice and obtain consent where required by law.

A Privacy Policy describes processing practices and is not itself a request to waive privacy rights. If a change to our Terms requires renewed agreement, HOPN may separately request that agreement before you continue using the Service.

16. Contact Us

For privacy questions, requests, or complaints, contact:

HOPN LLC

Attn: Privacy

Arlington, Virginia, United States

Email: privacy@hopn.app

For support or account-security issues, email support@hopn.app.