Effective Date: October 12, 2026 · Version 2026-10-12
This privacy policy applies to the Haps app (hereby referred to as "Application") for mobile devices that was created by haps events (hereby referred to as "Service Provider") as a Free service. This service is intended for use "AS IS".
The Application collects information when you download and use it. This information may include information such as:
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
Much of the Application is social by design. Your username, avatar, bio, public posts, stories, reviews, event listings, group activity and attendance may be visible to other users, and to anyone who can view a public group or event — including people who are not registered. Content shared to others, re-shared, screenshotted, or already delivered may persist even after you delete the original. Consider your privacy settings before posting, and never post someone else's location or personal details without their consent.
The Application collects your device's location, which helps the Service Provider determine your approximate geographical location and make use of in below ways:
The Application uses Artificial Intelligence (AI) technologies to provide and safeguard certain features:
AI processing is performed via our platform sub-processor, base44 AI (Base44 / Wix.com Ltd), under contractual confidentiality obligations. Your data is not used to train third-party AI models.
The Service Provider may use the information you provided to contact you from time to time to provide you with important information, required notices and marketing promotions. For a better experience, while using the Application, the Service Provider may require you to provide us with certain personally identifiable information. The information that the Service Provider request will be retained by them and used as described in this privacy policy.
Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.
The Service Provider may disclose User Provided and Automatically Collected Information:
We rely on a small number of vetted providers, each bound by contractual confidentiality and data-protection obligations:
We use automated systems to rank and recommend events and content based on your interests, saves, RSVPs, interactions, and location, and to detect abuse, fraud, duplicate accounts, and enforcement evasion. In some cases these systems may automatically limit an account, freeze a group, blur media, or hide content pending human review. Where an automated action materially affects you, you may request human review by contacting us or, where offered, submitting an appeal in-app.
To understand how the Application is used and where it can be improved, we record first-party product analytics tied to your account:
These records are stored on our own infrastructure, are accessible only to our administrators, and are not sold, shared with advertising networks, or used for cross-context behavioural advertising. We do not embed third-party ad or social tracking pixels. Your search history is kept locally on your device and can be cleared from the search screen.
Where you have granted location permission, the Application may compare your device's location with the location of events you have saved, RSVP'd to, or hold a ticket for, in order to record that you were actually present. This produces an attendance record noting the event, the time, and the signal that confirmed it (proximity, door scan, RSVP, or ticket). We record whether you were near the venue — we do not keep a continuous history of your movements, and we do not share your live location with organisers or other users.
When your ticket is scanned at the door, we record the scan time, the method (QR, NFC, or manual override), a short admission reference, and the name of the staff member who admitted you. Repeat presentations of an already-used ticket are counted to detect pass-back and screenshot fraud. This information is visible to the organiser of that event and to you on your ticket. You can withdraw location permission at any time in your device settings; you will still be able to check in manually at the door.
If you choose to use "Find your friends", your device asks you which contacts to share and then converts each contact's email address into a SHA-256 hash on your device. Only those hashes are submitted for matching. We generate the same hash for existing accounts and return eligible matches. These unsalted hashes are not anonymous: someone who guesses an email address can compute its hash and compare it.
We treat these hashes as personal information, not anonymized data. The matching handler processes them for the request without writing them to application records. Contact matching is optional and relies on your consent, which you may withdraw as described above.
After an event you actually attended, we may invite you to rate it. Your rating and any written comment are stored against the event together with the attendance signal that qualified you to review it. Ratings from geo-verified attendance are also aggregated into a private quality score for the organising group. That aggregate is used internally for trust and safety and quality purposes and is not displayed publicly unless and until we announce otherwise. You can delete your own review at any time.
With your permission we store a push notification token for your device so we can deliver event reminders, weather alerts for events you're attending, message and social notifications, ticket confirmations, and periodic digests or re-engagement reminders if you have been inactive. Tokens are tied to your account and deleted when you revoke permission, sign out of that device, or delete your account. Notification types can be tuned in the app's notification settings, permissions can be revoked in your device settings, and transactional messages (ticket receipts, refunds, safety and account notices) will still be sent because they are necessary to provide the service.
To reserve inventory and fulfil an order, the Application and Organiser Portal exchange a time-limited buyer and checkout reference, event and ticket selections, authoritative price and fee amounts, hold expiry, payment status and the resulting ticket identifiers. Stripe returns payment and refund references and status; full card details remain with Stripe. Signed checkout assertions and quotes are used to bind the correct account, event, amount and checkout attempt and to prevent replay or duplicate fulfilment.
We use these records to complete purchases, reconcile delayed or interrupted checkout, prevent duplicate tickets, manage transfers and refunds, provide receipts and support, meet accounting obligations and resolve disputes. Notifications and email are delivery channels only; the recorded payment, refund and ticket status remains authoritative. Operational rules are in our Ticketing & Refund Policy.
Organisers, their approved co-organisers, and connected Organiser Portal sessions can access data about their own events only:
Organisers act as independent controllers of the attendee data they receive and must use it only for running that event. They may not add you to unrelated marketing lists. Organisers cannot see your messages with other users, your other events, your location, or your device signals.
If you raise an issue about a ticket, a case is created containing your name, ticket and order details, the category of issue, and the messages and images exchanged. Cases are handled first by the event organiser or their staff — who may respond under a staff display name rather than their personal profile — and may be escalated to us if unresolved. We retain cases as a record of the dispute and any refund decision.
To keep the platform safe we keep enforcement records: warnings, suspensions and bans, moderation decisions and appeals, reports you make or that are made about you, admin action logs, and device signatures with the accounts seen on them. These are used to detect duplicate accounts, ban evasion, scalping and fraud, and are retained after content or an account is deleted so that enforcement cannot be reset by deleting and re-registering. Access is limited to our administrators.
Depending on where you live (including under the GDPR, UK GDPR, CCPA/CPRA, and the Australian Privacy Act), you may have the right to:
We will respond within the timeframe required by applicable law (generally 30 days) and will never discriminate against you for exercising these rights. Some data must be retained where we have a legal obligation, an unresolved dispute or chargeback, or a safety/enforcement record to preserve.
Your information may be stored and processed in countries other than your own, including the United States, Israel, and the European Union, where our providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent transfer mechanisms.
The Application uses cookies, local storage, and cached data to keep you signed in, remember your filters, drafts, theme and onboarding progress, and to cache map tiles and images for offline and performance reasons. These are strictly functional — we do not use third-party advertising trackers. Clearing app data or uninstalling the Application removes them.
You can turn off location, camera, microphone, and notification permissions at any time in your device settings, adjust visibility and messaging controls in the app's privacy settings, mute or block other users, and opt out of non-essential emails. You can stop all collection of information by uninstalling the Application, using the standard uninstall process available on your device or app marketplace. Some features will not function without the related permission.
If we become aware of a data breach likely to result in serious harm, we will notify affected users and the relevant regulator without undue delay, as required by applicable law, and describe the steps we are taking in response.
We keep data only as long as we need it for the purpose it was collected, or as long as the law requires. Indicative periods:
You can delete your account and associated data yourself at any time from within the Application via Settings → Account Actions → Delete Account. Alternatively, you may contact them at 7chancess7@gmail.com and they will respond in a reasonable time.
The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission.
If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider at 7chancess7@gmail.com so that they can review the account and handle the child's data appropriately. Haps applies residence-based account eligibility as described in the Terms of Service and does not currently offer parental-consent accounts. Minimum consent ages and other protections vary by jurisdiction; passing a date-of-birth check is not identity or age verification.
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
Acknowledging this Privacy Policy does not grant blanket consent to all processing. We use the legal bases described above, and request separate consent where required for optional processing. You may withdraw a consent without changing the lawfulness of processing already undertaken on that basis.
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at 7chancess7@gmail.com
Effective Date: October 12, 2026 · Version 2026-10-12