VibeHunt Privacy PolicyEffective date: To be set at launch
This policy explains what personal data VibeHunt collects, why we collect it, and what you can do about it. It covers the VibeHunt app and the vibehunt.app website.
Summary
We collect what the game needs to work: your account, your profile, the hunts you create, and the photos you take.
We never store your location.
We don't sell your data, show ads, or share data with data brokers.
Your profile and the hunts you create are public. Your photos and completions are private.
You can delete your account and its data at any time, in the app or by email.
Who we areVibeHunt is operated by Ryo Hilmawan, the data controller for the Service. You can reach us at privacy@vibehunt.app.If VibeHunt incorporates as a company, that company will become the controller under this policy. We'll update this page and notify you in the app before that takes effect.
Who can see what
Public: your username, display name, points, home country, and the hunts you create.
Private to you: your completions, the photos you take, and the places and series you save. Photos are stored privately and served only to you through links that expire.
Never public: your email address.
What we collect and whyWe collect only what the game needs. The list below shows each item, why we collect it, and how long it stays after you delete your account.
WhatWhyKept for
Email address
WhySign-in, verification codes, and our mailing list. We don't send marketing email today; if we start, it will be opt-in
Kept for30 days after deletion
Email addressSign-in, verification codes, and our mailing list. We don't send marketing email today; if we start, it will be opt-in30 days after deletion
Username and display name
WhyYour public profile
Kept for30 days after deletion
Username and display nameYour public profile30 days after deletion
Home country
WhyChoosing which country the map shows first. Shown on your profile
Kept for30 days after deletion
Home countryChoosing which country the map shows first. Shown on your profile30 days after deletion
Photos you take in the app
WhyRecording the hunts you complete
Kept for30 days after deletion
Photos you take in the appRecording the hunts you complete30 days after deletion
Completions and the places and series you save
WhyScoring and your completed counts. A completion records the hunt, when you completed it, your points, and any quiz answers
Kept for30 days after deletion
Completions and the places and series you saveScoring and your completed counts. A completion records the hunt, when you completed it, your points, and any quiz answers30 days after deletion
Hunts you create
WhyPublishing them to other players
Kept forKept after deletion with your identity removed; see "Deleting your data" below
Hunts you createPublishing them to other playersKept after deletion with your identity removed; see "Deleting your data" below
Usage analytics
WhySeeing which screens and features are used so we can improve the app. Linked to your account so we can follow one player's experience
Kept for12 months
Usage analyticsSeeing which screens and features are used so we can improve the app. Linked to your account so we can follow one player's experience12 months
Crash and error reports
WhyFinding and fixing faults
Kept for12 months
Crash and error reportsFinding and fixing faults12 months
App version, build, and update channel
WhyKnowing which release a fault came from
Kept for12 months
App version, build, and update channelKnowing which release a fault came from12 months
IP address
WhyServing requests and keeping the Service secure
Kept forOnly as long as the request and security logs need it
IP addressServing requests and keeping the Service secureOnly as long as the request and security logs need it
Legal basis: everything you give us to run your account is processed under our contract with you. Analytics, crash reports, IP addresses, and the mailing list are processed under our legitimate interest in running a reliable Service. We don't make automated decisions about you that have legal or similarly significant effects.
Your locationThe app asks to use your location while it's open so it can show you what's nearby. We never store your location. The distance to nearby hunts is calculated on your phone. Completions don't record where you were, and location metadata (EXIF GPS) is removed from photos before upload. Map telemetry is disabled.Your coordinates are sent off your phone in two cases, and neither one stores them. When the app opens on your location, it asks our server once which country you're in. When you search the map, your search text and the area you're viewing go to Mapbox to find matching places.You can decline location access and browse the map manually.
Who we share data withWe share data only with the services below, and only so they can do their work for us. Each one is bound by a contract to protect your data to the same standard as this policy. We don't share personal data with anyone else unless the law requires it.
ServiceWhat they do for usWhere
Supabase
What they do for usDatabase, sign-in, and photo storage
WhereSingapore
SupabaseDatabase, sign-in, and photo storageSingapore
Google
What they do for usSign-in, if you choose to sign in with Google. We keep only the email address Google confirms; Google's own privacy policy covers what it records about the sign-in
WhereUnited States
GoogleSign-in, if you choose to sign in with Google. We keep only the email address Google confirms; Google's own privacy policy covers what it records about the sign-inUnited States
PostHog
What they do for usUsage analytics and error tracking, linked to your email, username, and home country
WhereUnited States
PostHogUsage analytics and error tracking, linked to your email, username, and home countryUnited States
Resend
What they do for usOur mailing list. Holds your email address, username, and home country
WhereUnited States
ResendOur mailing list. Holds your email address, username, and home countryUnited States
Mapbox
What they do for usMap tiles and place search. Receives your IP address when the map loads, and your search text and map area when you search; map telemetry is off
WhereUnited States
MapboxMap tiles and place search. Receives your IP address when the map loads, and your search text and map area when you search; map telemetry is offUnited States
Expo (EAS)
What they do for usApp builds and over-the-air updates
WhereUnited States
Expo (EAS)App builds and over-the-air updatesUnited States
Your account data and photos are stored in Singapore. Analytics, crash reports, and email pass through providers in the United States under those contracts, which include the standard contractual safeguards for international transfers.
Deleting your dataYou can delete your account in three ways:
In the app: from the settings screen
Within 30 days we remove your profile, completions, photos, saved list, and mailing-list contact. Encrypted backups expire within a further 7 days. Hunts and series you created are kept with your identity removed, so other players' completions keep working. If you want any of them gone, delete them before deleting your account; a hunt no one has completed can be deleted at any time.We may keep specific records longer where the law requires it or to resolve a dispute, limited to the minimum necessary.
Your rightsAt any time you can:
Access the data we hold about you
Correct it, in the app or by asking us
Delete it
Receive a copy of it in a portable format
Leave the mailing list at any time by emailing us. Any email we send will also include an unsubscribe link, and leaving the list doesn't affect your account
Object to processing based on our legitimate interests
Complain to your data protection authority (in Singapore, the Personal Data Protection Commission)
To exercise any of these rights, email privacy@vibehunt.app. We respond within 30 days.
SecurityData travels over HTTPS. Stored data is accessible only to the account that owns it, photos are served through links that expire, and access to production systems is limited to the operator.
ChildrenVibeHunt is for ages 13 and up. We don't knowingly collect personal data from children under 13. If you believe a child under 13 has an account, email privacy@vibehunt.app and we'll delete it.
Changes to this policyWe'll post changes here and update the effective date. For material changes, we'll notify you in the app before they take effect.
ContactRyo Hilmawan (operator of VibeHunt) privacy@vibehunt.app