Privacy Policy

Effective Date: 29 March 2026

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address and password when you create an account
• Profile Information: Display name (optional)
• Event Data: Event names, descriptions, locations, dates, and times you create
• Availability Data: Time slots you mark as available for events
• Comments: Messages you post on events
• Social Connections: Friend connections you establish within the App
• Push Notification Tokens: Device tokens used to send you notifications (collected when you grant notification permission)

1.2 Information Collected Automatically

• Device Information: Device type and operating system version for App compatibility
• Usage Data: Basic interaction data to ensure the App functions correctly

1.3 Information We Do Not Collect

• We do not use analytics or advertising tracking services
• We do not collect precise location data
• We do not access your contacts, photos, or other device data
• We do not sell or share your data with advertisers

1.4 Error Monitoring

• We use Sentry to capture technical errors and crashes to help us fix bugs. We configure Sentry to minimise personal data capture. Error reports may include device type, OS version, and a stack trace, but we do not intentionally capture your personal content (event names, comments, etc.)

2. Lawful Basis for Processing

Under the UK GDPR and EU GDPR, we must have a lawful basis to process your personal data. The table below sets out the basis we rely on for each type of processing:

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the App's core functionality
• Enable event creation, scheduling, and coordination with friends
• Send you notifications about events you're participating in, including reminders sent by the event organiser to participants who have not yet responded (with your permission)
• Send you email notifications about events you're participating in (you can turn this off in the App)
• Allow you to add finalised events to your device calendar (with your permission)
• Respond to your support requests
• Improve the App based on general usage patterns

4. How We Share Your Information

We share your information only in the following circumstances:

• With Event Participants: Your name, availability, and comments are visible to all participants of events you join. An event can be joined by anyone who has been given the event link — so your event data is visible to anyone the link is shared with, not only people explicitly invited by name by the organiser
• With Service Providers: We use trusted third-party services to operate the App:
  • Clerk — Authentication and account management
  • Supabase — Database hosting
  • Railway — Backend hosting
  • Cloudflare — Content delivery and web hosting
  • Sentry — Error monitoring
  • Resend — Email delivery
  • Expo — Push notification delivery
• Legal Requirements: If required by law or to protect our legal rights

We do not sell your personal information to third parties.

5. International Data Transfers

Some of our third-party service providers (including Clerk, Sentry, Railway, and Expo) are based in the United States. When your data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission and UK ICO, where applicable
• Transfers to countries covered by an adequacy decision where available

By using the App, you acknowledge that your data may be transferred to and processed in countries outside the UK and EEA. We take all reasonably necessary steps to ensure your data is treated securely and in accordance with this Privacy Policy.

6. Data Storage and Security

• Your primary data is stored on secure servers located in the European Union
• We use encryption for data transmission (HTTPS/TLS)
• Passwords are securely hashed and never stored in plain text
• Authentication tokens are stored securely on your device using platform-provided secure storage
• The App caches certain data locally on your device (event details, availability, comments) to support offline access. This cache is cleared when you log out or delete the App

7. Data Retention

• We retain your data for as long as your account is active
• Event data is retained until the event is deleted by its creator
• When you delete your account, all your personal data is permanently removed within 30 days

8. Your Rights (GDPR)

Under the UK GDPR and EU GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Delete your account and all associated data (available in App settings)
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data, including processing based on legitimate interests
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise these rights, contact us at [email protected].

You also have the right to lodge a complaint with your local data protection supervisory authority:

• UK: Information Commissioner's Office (ICO) — ico.org.uk
• Ireland: Data Protection Commission (DPC) — dataprotection.ie
• EU: Your national data protection authority — find your authority here

9. Calendar Access

The App may request access to your device calendar to add finalised events. This permission is:

• Only requested when you choose to add an event to your calendar
• Used solely to create calendar entries for events you've confirmed
• Never used to read or access your existing calendar data

10. Email Communications

We send transactional emails to notify you of:

• Event invitations
• Events being finalised

You can disable email notifications at any time in the App under Profile → Notifications. We do not send marketing emails.

11. Children's Privacy

HangSync is not intended for children. The minimum age to use the App is:

• 16 years in Ireland and most EU member states (in line with GDPR Article 8 and local implementation)
• 13 years in the United Kingdom

We do not knowingly collect personal information from children below these ages. If you believe we have collected such information, please contact us immediately at [email protected].

12. Account and Data Deletion

You can delete your HangSync account and all associated data at any time directly within the App:

1. Open the App and tap Profile
2. Scroll down and tap Delete Account
3. Confirm the deletion when prompted

What is deleted: Your account, profile information, events you created, availability data, comments, friend connections, and push notification tokens are all permanently deleted.

What is retained: Events created by other users that you were invited to will remain, but your participation and any comments you posted will be removed.

Retention period: Deletion is processed immediately. Any residual data in backups is purged within 30 days.

If you are unable to access the App, you may also request deletion by emailing [email protected] with the subject line "Delete My Account".

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy in the App or sending you an email. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

14. Contact Us