Effective 11 July 2026
Privacy Policy
Hotspots (“we”, “us”, the “app”) is operated by Innix. This policy explains what personal data the app collects, why, who processes it on our behalf, how long we keep it, and how you can delete it. Questions: hotspots [at] innix [dot] nl.
Hotspots is a social planning app for organising events with friends. We collect only what the app needs to work. We do not track you across other apps or websites, we do not sell your data, and we do not use advertising identifiers.
Who this applies to
Hotspots is not directed to children. You must be at least 13 years old (or the minimum digital-consent age in your country, if higher) to create an account.
What we collect and why
| Data | When | Why we need it |
|---|---|---|
| Name (display name) | You set it during sign-up | Your profile, friend search, and showing who hosts or is invited to an event |
| Email address | Sign-up / sign-in | Creating and securing your account (email & password, or Sign in with Apple / Google) |
| Account ID | Created automatically | The identifier that ties your data to your account |
| Photos (profile avatar, business logo) | If you upload one | Displaying your profile or business |
| Content you create (events, comments, announcements, group messages) | When you use the app | Delivering the core features — plans, chat, and RSVPs are shown to the people you share them with |
| Approximate location | Only while you use Explore, if you allow it | Sorting events by “near me”. This is a coarse, device-side fix; we do not store it on our servers unless you explicitly save a preferred location |
| Push notification token | When you enable notifications | Delivering the notifications you opt into (invites, RSVPs, group messages) |
| Crash and diagnostic data | Automatically, if the app crashes | Finding and fixing bugs |
We do not collect: precise GPS coordinates, your contacts, browsing or search history, health, financial, or any special-category data.
How your content is shared inside the app
Hotspots only shares your content with the people you choose. Invites and event visibility travel between accepted friends — friends-of-friends do not automatically gain access, and group messages are visible only to members of that group. Business accounts publish public events that are discoverable in Explore by design.
Service providers (data processors)
We use a small number of vendors to run the app. They process data only on our instructions and under their own security and privacy commitments:
- Supabase — database, authentication, and file storage (hosts your account, content, and photos).
- Apple and Google — optional sign-in providers, if you choose “Sign in with Apple / Google”.
- Expo (Expo Push Service) — delivers push notifications to your device.
- Resend — sends transactional email (account confirmation and password-reset messages).
- Sentry — crash and error diagnostics. We strip known personal fields before sending and never send event descriptions, comments, friend lists, or precise location.
- MapTiler — supplies the map tiles shown in Explore.
- Geoapify / LocationIQ — converts place names to coordinates (“geocoding”). This runs through our own server; these providers never receive your account identity.
We do not share your data with any other third parties, and none of these providers use your data for their own advertising.
Where data is processed
Your data is stored and processed by the providers above, which may operate servers outside your country. All data is encrypted in transit (HTTPS).
How long we keep it
- Your account data is kept for as long as your account exists.
- When you delete your account (see below), we hard-delete your account data immediately. Residual copies in encrypted backups age out on our provider’s backup schedule (currently 7 days) and are not restored except to recover from a disaster.
- Push notification tokens for devices that revoke notification permission are retained for up to 90 days and then automatically purged, so that we can stop sending to a device that is no longer reachable without losing delivery history too early.
Deleting your account and data
You can delete your account and its data at any time from inside the app:
- Personal accounts: Profile → Delete account, then confirm.
- Business accounts: Business owner dashboard → Settings → Delete account.
Deletion is immediate and permanent — it signs you out and removes your profile, content, and photos, subject to the backup ageing described above. If you cannot access the app, email hotspots [at] innix [dot] nl and we will delete your data on request.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. The in-app tools cover access (your profile) and deletion; for anything else, contact hotspots [at] innix [dot] nl and we will respond within the time your law requires.
Security
We use industry-standard measures including encryption in transit and access controls on the database. No system is perfectly secure, but we work to protect your data and to limit what we collect in the first place.
Changes to this policy
If we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.
Contact
Innix — hotspots [at] innix [dot] nl