Effective 12 October 2026
Privacy Policy
Hotspots (“we”, “us”, the “app”) is operated by Innix. This policy explains what personal data the app collects, why, who processes it on our behalf, how long we keep it, and how you can delete it. Questions: hotspots [at] innix [dot] nl.
Hotspots is a social planning app for organising events with friends. We collect only what the app needs to work. We do not track you across other apps or websites, we do not sell your data, and we do not use advertising identifiers.
Your use of Hotspots is also governed by our Terms of Use.
Who this applies to
Hotspots is not directed to children. You must be at least 13 years old (or the minimum digital-consent age in your country, if higher) to create an account.
What we collect and why
| Data | When | Why we need it |
|---|---|---|
| Name (display name) | You set it during sign-up | Your profile, friend search, friends lists shown to your friends, and showing who hosts or is invited to an event |
| Email address | Sign-up / sign-in | Creating and securing your account (email & password, or Sign in with Apple / Google) |
| Account ID | Created automatically | The identifier that ties your data to your account |
| Photos (profile avatar, business logo) | If you upload one | Displaying your profile or business |
| Content you create (events, comments, announcements, group messages) | When you use the app | Delivering the core features — plans, chat, and RSVPs are shown to the people you share them with |
| Approximate location | Only while you use Explore, if you allow it | Sorting events by “near me”. We do not store it on our servers unless you explicitly save a preferred location |
| Precise location | Only when you tap “Use current location”, if you allow it | Turning your coordinates into a place name (via our geocoding provider) so you can fill a location field. We do not store it against your account and we do not track your movements |
| Blocks and reports | When you block someone or report content | Enforcing blocks, and reviewing reports. A report stores who filed it, what was reported, the reason you picked, and a copy of the reported content at that moment, so we can review it even if it is later edited or deleted |
| Push notification token | When you enable notifications | Delivering the notifications you opt into (invites, RSVPs, group messages) |
| Crash and diagnostic data | Automatically, if the app crashes | Finding and fixing bugs |
We do not collect: your contacts, browsing or search history, health, financial, or any special-category data. We never track your location in the background — location is read only while you are actively using the relevant screen.
How your content is shared inside the app
Hotspots only shares your content with the people you choose. Invites and event visibility travel between accepted friends — friends-of-friends do not automatically gain access, and group messages are visible only to members of that group. Your accepted friends can see your friends list; you can hide it in Settings → Privacy, and people who have turned off friend search appear in it only to their own friends. Business accounts publish public events that are discoverable in Explore by design.
You can block another personal account. You and that person then stop seeing each other in search, on profiles, in friends lists and on each other’s personal events, and no notifications pass between you. They are not told. You can see and undo your blocks in Settings → Privacy → Blocked accounts. You can also report a profile, comment, group message, event or business. Reports are reviewed by us; the person you report is never told who reported them.
Service providers (data processors)
We use a small number of vendors to run the app. They process data only on our instructions and under their own security and privacy commitments:
- Supabase — database, authentication, and file storage (hosts your account, content, and photos).
- Apple and Google — optional sign-in providers, if you choose “Sign in with Apple / Google”.
- Expo (Expo Push Service) — delivers push notifications to your device.
- Resend — sends transactional email (account confirmation and password-reset messages), and alerts our team about new reports. These alerts contain only report IDs, types and reasons — never the reported content or anyone’s name.
- Sentry — crash and error diagnostics. We strip known personal fields before sending and never send event descriptions, comments, friend lists, or precise location.
- MapTiler — supplies the map tiles shown in Explore.
- Geoapify / LocationIQ — geocoding: converts place names to coordinates and, when you tap “Use current location”, converts your coordinates back into a place name. This runs through our own server; these providers receive the location being looked up but never your account identity.
We do not share your data with any other third parties, and none of these providers use your data for their own advertising.
Where data is processed
Your data is stored and processed by the providers above, which may operate servers outside your country. All data is encrypted in transit (HTTPS).
How long we keep it
- Your account data is kept for as long as your account exists.
- When you delete your account (see below), we hard-delete your account data immediately. Residual copies in encrypted backups age out on our provider’s backup schedule (currently 7 days) and are not restored except to recover from a disaster.
- Push notification tokens for devices that revoke notification permission are retained for up to 90 days and then automatically purged, so that we can stop sending to a device that is no longer reachable without losing delivery history too early.
- In-app notifications (your Alerts history) are kept for 90 days from when they were created and then automatically deleted, whether or not you have read them.
- Blocks are kept until you unblock, or until either account is deleted.
- Reports, including the copy of the reported content, are kept until we resolve them and then for 365 days, after which they are automatically deleted. If you delete your account, reports you filed or that concern you are kept until then as a record of what was reported, but are no longer linked to your account.
Deleting your account and data
You can delete your account and its data at any time from inside the app:
- Personal accounts: Profile → Delete account, then confirm.
- Business accounts: Business owner dashboard → Settings → Delete account.
Deletion is immediate and permanent — it signs you out and removes your profile, content, and photos, subject to the backup ageing described above. If you cannot access the app, email hotspots [at] innix [dot] nl and we will delete your data on request.
For step-by-step instructions and a full list of what is deleted or kept, see Delete Your Account.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. The in-app tools cover access (your profile) and deletion; for anything else, contact hotspots [at] innix [dot] nl and we will respond within the time your law requires.
Security
We use industry-standard measures including encryption in transit and access controls on the database. No system is perfectly secure, but we work to protect your data and to limit what we collect in the first place.
Changes to this policy
If we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.
Contact
Innix — hotspots [at] innix [dot] nl