Privacy Policy

Last updated: April 23, 2026 (revised)

HappyMaps, Inc. ("we," "us," or "our"), a Delaware corporation, operates the HappyMaps mobile application ("the App"). This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the App.

1. Information We Collect

• Account information — When you register, we collect your email address, username, display name, and age (self-reported age bracket to verify 21+ eligibility).
• Phone number — We collect your mobile phone number to enable contact matching, so your friends can find you on the app and vice versa.
• Content you create — When you use the App, we store the ratings, reviews, favorites, tonight's plans ("going" intentions), crawl plans, and group memberships you create. Some of this content is visible to other users, as described in Section 4.
• Social connections — We store the friend connections you make and the groups you join within the App.
• Bar preferences — We store the types of bars you've indicated interest in (e.g., rooftop, dive bar, speakeasy) to help us surface relevant recommendations.
• Favorite bars — We store the bars you mark as favorites to personalize your feed.
• City preference — We store which city you've selected to browse (e.g., Los Angeles, Washington DC) so we can show you the right bars and events.
• School — If you choose to tell us which university you attend, we store that school affiliation. This is self-reported and not verified.
• Contacts — If you choose to use the "find friends" feature, we access your device contacts to identify phone numbers that match existing HappyMaps users. We do not store your contact list — only a flag indicating you granted contact access.
• Profile photo — If you upload a profile photo in Settings, we store it in our encrypted storage.
• Device and usage data — We collect limited device information (device model, operating system version, app version) and usage data (crash reports, performance metrics) through Supabase and Expo. This helps us debug issues and improve the App. We do not use this data for advertising or user tracking.
• Push notification tokens — If you enable notifications, we store a device-specific token to deliver notifications about friend activity, group voting, and crawl updates.

2. How We Use Your Information

We use the information we collect to:

• Show you which bars are trending and how many people plan to attend tonight
• Display where your friends are planning to go
• Enable features like group voting, crawl coordination, and bar rating
• Send transactional emails (email verification, password resets, security notifications, account deletion confirmation)
• Send push notifications you've opted into
• Detect and prevent abuse, spam, and violations of our community guidelines
• Improve the App's performance and user experience
• Comply with legal obligations

3. Information We Do Not Collect

HappyMaps is built on a privacy-first principle. We do not:

• Access or collect your device's location
• Track your GPS coordinates
• Sell your personal data to third parties
• Share your information with advertisers
• Use your data to serve targeted ads
• Use facial recognition or biometric identification

4. Information Visible to Other Users

Certain information you provide is visible to other HappyMaps users:

• Your display name, username, profile photo, and school
• Ratings and reviews you publish for bars (attributed to your username and profile photo)
• Your tonight's plan (the bar you indicate you plan to visit), visible to your friends
• Your membership in groups you join
• Your crawls and crawl memberships, visible based on crawl privacy settings

You can control who sees your content through your profile settings and by choosing which friends and groups to join.

5. Data Sharing with Third Parties

We do not sell, trade, or rent your personal information. We share data only with service providers who help us operate the App:

• Supabase (supabase.com) — Our database, authentication, and storage provider. Supabase stores your account data, content, and files. Data is encrypted in transit and at rest. Supabase servers are located in the United States.
• Resend (resend.com) — Our email delivery provider, used solely to send transactional emails. We share only your email address and the email content with Resend.
• Expo / EAS (expo.dev) — Provides app build, crash reporting, and over-the-air update infrastructure. Expo receives anonymized crash and performance data.

These providers are contractually required to protect your data and use it only to provide services to us.

6. Data Retention and Deletion

We retain your account and associated data for as long as your account is active.

You may delete your account at any time from Settings → Privacy & Safety → Delete Account & Data. When you delete your account:

• Your profile, ratings, favorites, tonight's plans, crawls, group memberships, and friend connections are permanently deleted
• Your email address, password, and authentication records are removed
• Your profile photo is removed from storage
• Deletion is permanent and cannot be reversed
• Some anonymized aggregate data (e.g., "X people went to this bar on this date") may be retained but cannot be linked back to you

Account deletion takes effect immediately. Backup systems may retain deleted data for up to 30 days as part of normal database operations, after which it is permanently purged.

7. Security

We protect your information through:

• TLS encryption for all data in transit
• Encryption at rest for stored data (provided by Supabase)
• Password hashing using industry-standard algorithms
• Regular security reviews
• Limited employee access to user data

No system is 100% secure. If you discover a security issue, please contact us immediately at the email below.

If we experience a data breach that affects your personal information, we will notify you within 72 hours of discovery via email and in-app notice, consistent with applicable data protection laws.

8. Children's Privacy

HappyMaps is intended for users who are 21 years of age or older, the legal drinking age in the United States. We do not knowingly collect personal information from anyone under 21. If we discover that we have collected data from a user under 21, we will delete that information promptly. If you believe a minor has created an account, please contact us immediately.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information through the App's Edit Profile screen
• Delete your account and all associated data at any time
• Export a copy of your data by contacting us at the email below. We will respond within 30 days.

California residents have additional rights under the CCPA, including the right to opt out of the sale of personal information. We do not sell personal information.

Users in the European Economic Area have rights under GDPR, including the right to data portability and the right to object to certain processing.

To exercise any of these rights, contact us at the email below.

10. International Data Transfers

Your data is stored on Supabase servers in the United States. If you access HappyMaps from outside the U.S., your data will be transferred to and processed in the U.S., which may have different privacy protections than your home country.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, through an in-app notice or email. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Not Affiliated with UCLA or Other Universities

HappyMaps is not affiliated with, endorsed by, or sponsored by UCLA or any other university. School group features are independently operated by HappyMaps. References to universities are for identification purposes only.