Privacy Policy

Welcome to Huddle! Your privacy and safety are our top priorities. This Privacy Policy explains how we collect, use, protect, and process your personal data when you use the Huddle mobile application ("App") in accordance with the General Data Protection Regulation (GDPR).

1. Information We Collect

To provide you with the best social discovery experience, we collect the following types of information:

A. Information You Provide to Us

Account Data: Email address and Full Name.

Profile Data: Gender, Date of Birth, Bio, Interests, and your Avatar image. (Note: Your Date of Birth is hidden from public view by default).

Optional Integrations: Your Instagram handle, if you choose to link it.

B. Location Data

Live Location: We process your device's live GPS coordinates to show you nearby activities and power the "Huddle Radar." We do not persistently store your live, continuous location in our database. It is only used dynamically when you actively search the map.

Activity Locations: When you create an activity, the fixed geographic location of that specific event is permanently saved to allow others to find it.

C. Communication Data

Messages: Content sent within Activity Chats, Squad Chats, and Direct Messages.

Interaction Data: Who you message and when.

D. Behavioral & Reputation Data

To maintain a safe community, we calculate a Huddle Score, a dynamic reputation metric based on your positive interactions and negative behaviors (e.g., being reported).

2. Legal Basis for Processing (GDPR)

Under the GDPR, we process your data relying on the following legal bases:

Performance of a Contract: To create your account, provide our core services, and facilitate messaging and event participation.

Legitimate Interests: To calculate your Huddle Score, ensure platform safety, prevent fraud, and improve our services.

Consent: For optional profile fields (like linking your Instagram) and push notifications. You can withdraw this consent at any time.

3. How We Share Your Information

We do not sell your personal data. Your information is shared only within the App context:

Public Profile: Your basic profile information (Full name, Avatar, Bio, Interests, Gender, and Huddle Score) is publicly readable by other users.

Chat Participants: Your messages are visible to the specific participants of the Activity, Squad, or Direct Message thread.

Service Providers: We use trusted third-party processors, such as Supabase (for database and authentication hosting), to operate the App.

Law Enforcement & Safety: We may share user data with law enforcement or regulatory authorities if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect the safety of our users, or prevent child sexual abuse and exploitation.

4. International Data Transfers

Our servers and service providers (such as Supabase) may be located outside the European Economic Area (EEA), primarily in the United States. When your data is transferred outside the EEA, we ensure it is protected by implementing appropriate safeguards, specifically the European Commission's Standard Contractual Clauses (SCCs).

5. Data Security

Our database utilizes strict Row Level Security (RLS). This ensures that users can only modify their own profiles and can only read messages within activities or squads where they are an explicitly approved participant.

6. Data Retention and Deletion

You have the right to request the deletion of your account and associated data at any time.

How to request account deletion:

In the App: You can delete your account instantly by navigating to Settings > Delete Account within the Huddle app.

Via Email: If you no longer have the app installed, you can request account deletion by sending an email to info@basenodesolutions.com. Please send the request from the email address associated with your Huddle account. We will process your deletion request within 14 days.

What happens when you delete your account:

Data Deleted: Your personal profile, login credentials, squad memberships, radar alerts, and blocked user lists are permanently and irrevocably deleted.

Data Retained (Anonymization of Shared Content): To preserve the context of group chats for other active users, the chat messages you sent and the activities you created will remain visible. However, they will be fully anonymized and attributed to a "Deleted User." This anonymized content can no longer be linked back to your identity or active account.

7. Your Data Protection Rights

Under the GDPR, you have the right to:

Access the personal data we hold about you.

Rectify inaccurate or incomplete data.

Erasure (Right to be forgotten) of your personal data.

Restrict or Object to our processing of your data.

Data Portability: Request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with your local data protection authority (e.g., The Office for Personal Data Protection in the Czech Republic) if you believe we are processing your data unlawfully.

8. Contact Us

Data Controller: Basenode Solutions s.r.o.

Email: info@basenodesolutions.com