Privacy Policy

Last updated: 2026-11-07

Introduction

The operator of Hupeng ("we") handles personal information in Hupeng (the "Service") as described below.

1. Information we collect

When you use the Service, we collect the following:

• Account information: the user identifier provided by Apple or Google when you sign in with that account.

• Profile information: nickname, photo, gender, birth year and month, Japanese level, one-line bio, interest categories.

• Posts and activity: the content of events, notes and giveaways you post; your event applications and attendance history; group chat and giveaway handover chat messages and images; reviews; follows and blocks; the content and records of reports.

• Notification information: the device token used to send push notifications (APNs token).

• Enquiries: the content of your enquiry and any contact details you give us.

2. How we use it

We use this information to:

• register, authenticate and manage accounts;

• provide features such as profiles, posting, applying to events and chat;

• check event eligibility, and show hosts your age band;

• manage and display participation and reviews;

• send notifications such as application results, event changes and reminders;

• prevent misuse, investigate reports and act on violations of the Terms;

• respond to enquiries and requests about personal information, and meet legal requirements.

3. Age limit and your birth year and month

The Service is for people aged 18 and over only. People under 18 may not use it, even with a parent's or guardian's consent.

Your birth year and month are used to check event eligibility and to show hosts your age band.

Your birth year and month themselves are never shown to other users or sent to their devices. When you apply to an event, its host sees only your age band, never your birth year and month.

4. What other users can see

Other users can see your nickname, photo, one-line bio, interest categories, verification status, number of events hosted and attended, attendance rate, host rating, and published review tags.

Your birth year and month, gender, phone number, email address, unpublished reviews, and your follow and block lists are not shown to other users. However, event hosts can see the age band described in the previous section.

Whatever you write in posts or chats is visible to the people who can read them. Take care with what you share, such as an address or phone number.

5. Group chats and giveaway handover chats

A group chat can be read by the event's host and approved participants.

Chat images are kept in private storage and served through links that expire.

Seven days after an event ends, its chat becomes read-only and no new messages can be posted. The messages and images are not deleted at that point.

To handle reports, we may review reported content to the extent necessary.

When a giver picks a recipient for a giveaway, a chat that only the two of them can read is opened for that handover. Its images are also kept in private storage.

When the handover is completed, either side cancels, or the item is taken down, the chat becomes read-only, and its messages and images are deleted 15 days after it closes.

We do not routinely read handover chats. When a message in one is reported, we keep the reported message and some of the messages around it as the report record in order to handle the report, and we hold off deleting that chat until the report has been handled.

6. Push notifications

If you allow notifications, we send you application results, waitlist promotions, event changes, reminders, review requests and similar notices. For this we store a device token.

You can turn notifications off at any time in your device settings. When you sign out, we remove that device's token from our list of notification recipients.

7. Where data is stored and outside services

The Service's data is stored in the database and file storage services provided by Supabase. We also use Apple's services for Sign in with Apple authentication and to deliver push notifications.

To the extent needed to provide the Service, we may entrust the handling of personal information to outside providers. Where we do, we choose them carefully and supervise them as necessary and appropriate.

Where personal information is handled in a foreign country, we provide the necessary information, obtain consent, or take other measures as required by applicable law.

The Service contains no advertising SDKs and no third-party analytics SDKs.

8. Providing information to third parties

The display of information between users described in this policy happens according to the features you use, such as registering a profile, posting and applying to events.

Except where it does not legally count as providing to a third party — for example, entrusting the handling of personal data — we do not provide personal data to third parties without your consent, except where the law permits it, including:

• where required by law;

• where it is necessary to protect someone's life, body or property and it is difficult to obtain your consent;

• where it is necessary to cooperate with a national or local government body carrying out duties prescribed by law, and obtaining your consent would be likely to interfere with those duties.

Any provision of information to the police or other authorities also follows these legal requirements.

9. Security and retention

To prevent leaks, loss of, or unauthorized access to personal information, we take necessary and appropriate security measures, such as managing access rights.

We keep information for as long as needed to achieve the purposes of use, and we endeavor to delete information we no longer need without delay, unless the law requires us to keep it.

For how data is handled when you delete your account, see Article 10 of the Terms of Service.

10. Changing your information, access requests, and account deletion

You can change your nickname, photo, gender, Japanese level and interest categories under Edit profile.

Because your birth year and month affect event eligibility, you cannot change them yourself after registering. If they need correcting, please contact us.

If you would like us to notify you of the purpose of use, or to disclose, correct, add to, delete, stop using, or stop providing to third parties the personal information we hold about you, or to disclose records of provision to third parties, please contact us.

We will respond in accordance with the law after verifying your identity. If we cannot meet all or part of a request, we will tell you so and explain why.

You can delete your account at any time.

11. Changes to this policy

When we change this policy, we will announce the changes and the date they take effect in the app or on our website. Where the law requires your consent to a change, we will obtain it in the prescribed way.

12. Contact

For questions about this policy, enquiries about how your personal information is handled, or requests for disclosure, correction and the like, please use the contact point listed on the website below.

https://www.hupeng.app

Operated by Hupeng Team