Privacy policy
Last updated October 3, 2026
Hopalong is a mobile app for people 18 and over to find and join spontaneous plans nearby. It is operated by Ariel Nathan, an individual based in Montréal, Québec, Canada, who is also the person responsible for protecting personal information (the "privacy officer"). Contact: privacy@hopalong.app.
The short version: we collect only what the app needs to work, we don't sell it, we don't show ads, and we don't track you across other apps or sites. You can delete your account and data yourself, inside the app.
What we collect and why
| What | Why | Who can see it |
|---|---|---|
| Email and password | Create and secure your account, send sign-in codes. Your password is stored only as a one-way hash by our authentication provider; we never see it. | Only you (and our service providers who operate the service). |
| First name, last name, age, sex (optional) | Your profile; confirming you are 18+. | Other users see your first name only. Last name, age and sex are never shown to other users. |
| Profile photo (optional) | Your avatar. | Only you, for now. |
| Quests you post | Show your plan to others. If location is on, we save an approximate position (rounded to about 1 km) so quests can be sorted by distance. | Other users, according to the audience you pick (everyone, friends, or one crew). |
| Joining, ratings, follows, blocks, reports | Run the app, keep it safe, and handle abuse. | Joins and ratings are visible in the app; blocks and reports are private to you and our reviewers. |
| Crews and crew messages | Group chat and shared plans. | Members of that crew. |
| Quest completions: recap, amount spent, group size, photo or video proof | Earn progress (streaks, XP, badges) after a person reviews it. | You and our reviewers. Once approved, the completion and its photo are visible to people who follow you and to people in a crew with you (not to people you've blocked or who blocked you). |
| Your device location (only if you allow it) | Sort quests by distance, only while the app is open. It stays on your device except as described in this table. | See "Quests you post" and "Weather" below. |
| Weather lookup | Show the current weather. The app sends approximate coordinates (your location rounded to about 1 km if allowed, otherwise downtown Montréal) to Open-Meteo, a weather service, with each lookup. | Open-Meteo, under its own privacy policy. |
What we don't do
- We don't sell or rent your personal information.
- We don't show ads and don't include advertising or cross-app tracking tools.
- We don't currently use analytics services. If that changes, we'll update this policy first.
Who processes your data for us
- Supabase — database, sign-in, and file storage. Your data is stored in Canada (Amazon Web Services, Canada Central region, in the Montréal area).
- Resend — sends the emails containing your sign-in and password-reset codes. It handles your email address and the code, and may do so outside Canada.
- Open-Meteo — weather lookups, as described above; it receives only approximate coordinates and may be located outside Canada.
These providers handle data only to provide their service to us. Where a provider processes the limited data described above outside Canada, it is subject to the laws of that country, including access by its authorities.
Reviews and safety
Completion photos and videos, and anything reported to us, may be reviewed by a person to keep the community safe. You can block and report people and content in the app.
How long we keep it, and deleting it
We keep your information while your account exists. You can delete your account at any time in the app (Profile → Delete account). That permanently deletes your profile, the quests you posted, your photos and uploaded files, your messages, joins, ratings, follows and blocks. Completions other people made of a quest you posted are removed along with that quest. Copies in our provider's backups are overwritten on its normal schedule. Reports you made about others may be kept where needed to keep people safe. If you can't use the app, email privacy@hopalong.app from your account address.
Your rights
You can ask to see the personal information we hold about you, correct it, delete it, withdraw consent, or receive a copy in a usable format. Email privacy@hopalong.app; we aim to reply within 30 days. You can also complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
Age
Hopalong is for people 18 and over. We don't knowingly collect information from anyone younger; if you believe someone under 18 has an account, tell us and we'll remove it.
Security
Connections are encrypted, access to data is restricted by database rules so people see only what they're allowed to, and uploaded files are stored privately. No system is perfectly secure; if a breach puts you at risk, we'll tell you and the relevant authority as the law requires.
Changes
If we change this policy in a meaningful way we'll update the date above and, for significant changes, tell you in the app.