Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to information we collect through Hespr.com, the Hespr mobile applications, customer support and communication channels connected to the Service, venue, event, profile, trust, safety, and moderation features within the Service, and related tools, pages, and features that link to this Privacy Policy.

This Privacy Policy does not apply to third-party services, websites, apps, platforms, venues, or payment processors that Hespr does not control, even if they interact with the Service.

2. The Core Privacy Reality of Hespr

Hespr is built around venue-level social discovery at public places.

If you choose to use visibility features, other users may be able to see that your profile is associated with a particular public venue. That is a core part of how the Service works. Hespr is not designed for private residential location sharing, exact-coordinate broadcasting to other users, constant person-tracking by the public, or emergency response.

Hespr does not sell users’ location data to advertisers, data brokers, or third-party advertising networks. However, because venue-level visibility is a core part of the Service, Hespr may display a user’s visibility status, venue association, or attendance-related signals to other users within the Service, including through paid features that expand how visibility information can be viewed or discovered inside Hespr.

Even though Hespr is not built to publicly broadcast exact coordinates, using visibility features still creates meaningful privacy tradeoffs. If you become visible at a venue, other users may infer that you are at, near, or associated with that place for a period of time. If you interact with others, they may also infer timing, attendance, or venue patterns based on your use of the Service.

You should use Hespr with that understanding and use care in deciding when to become visible, whom to interact with, and what you share.

3. Information We Collect

We collect information you provide directly, information collected automatically through your use of the Service, and information generated through how the Service functions.

• Information you provide directly, including account registration information, profile information, recent or live photos, support communications, reports, venue or event suggestions, payment-related information where applicable, and other information you choose to submit.
• Location and venue-related information, including device location, approximate or precise location depending on permissions and feature use, whether you are within an eligible venue area, the venue you appear associated with, visibility timing, attendance signals, and trust and safety signals used to detect suspicious or inaccurate location behavior.
• Photos, profile, and content information, including profile photos, recent or live photos, bios, prompts, uploaded content, moderation-related content, and related metadata such as upload time, content type, and account association.
• Selected contact-blocking information. If you choose contacts to block, the phone numbers for only those contacts are securely transmitted to Hespr servers so we can match them to Hespr accounts and enforce the block. Contact names remain on your device. Hespr stores a one-way hash and the last four digits of each selected number for block management, and does not use selected contacts to send invitations, messages, or advertising.
• Usage and device information, including device type, operating system, browser type, app version, language settings, IP address, device identifiers, session identifiers, crash data, error logs, performance diagnostics, app interactions, screens viewed, notification tokens, delivery data, and security or integrity-related signals.
• Advertising measurement information, including app install, app open, onboarding completion, app readiness, place exploration, going intent, go-visible intent, first successful visibility activation, and early activation signals. Where platform rules and your choices allow it, advertising partners may also receive advertising identifiers and hashed matching information such as email address, phone number, first and last name, date of birth, and gender.
• Payment and transaction information, including purchase type, subscription status, billing period, payment confirmation, refund status, chargeback or dispute status, and limited payment-related records needed for accounting, support, fraud prevention, and legal compliance.
• Information from reports, safety tools, and enforcement activity, including reports, appeals, screenshots, venue information, interaction history, device or behavioral signals, moderation actions, and records connected to trust and safety investigations.
• Information from third parties such as mobile operating systems, app stores, authentication and verification providers, analytics, hosting, communications, mapping, geolocation, cloud service providers, payment processors, venues, hosts, partners, and other users who submit reports or content involving your account.

4. How We Use Information

• To provide and operate the Service, including account management, venue-based visibility, profile functionality, notifications, and paid features.
• To determine venue eligibility and location-based functionality, including venue assignment, feature availability, stale visibility detection, and venue integrity.
• To maintain trust and safety, including detecting and preventing harassment, stalking, abuse, fraud, impersonation, spoofing, scraping, spam, and other misuse.
• To match phone numbers you specifically choose in the contact-blocking feature to Hespr accounts, prevent you and those accounts from seeing each other, and keep the block in place until you remove it or delete your account.
• To improve and develop Hespr, including product analytics, debugging, venue detection improvements, feature testing, and future functionality.
• To measure and improve advertising campaigns, including understanding whether ads lead to installs, onboarding completion, and early product activation, and avoiding wasted ad delivery where advertising platforms support that functionality.
• To communicate with you, including support, billing, safety, security, product, and account communications.
• To comply with legal obligations and protect rights, including legal requests, disputes, security incidents, accounting, enforcement, and protection of users, venues, service providers, and the public.

5. How Venue Visibility Works From a Privacy Perspective

If you choose to become visible at an eligible public venue, your profile may be shown to other users in connection with that venue, your visibility may continue for some period of time depending on feature design, device conditions, or detection logic, other users may infer that you are at, near, or associated with that venue, users you interact with may infer your attendance timing or patterns, and in some situations a user may still see your venue association briefly after you have left if departure detection is delayed or incomplete.

Depending on the product design, feature set, and your use of the Service, your visibility status may be viewable not only by users physically associated with the same venue, but also by users who have access to features that allow broader visibility discovery within Hespr, including certain paid features.

Hespr is designed around venue-level presence, not exact-coordinate broadcasting to other users. Even so, venue-level visibility still creates meaningful privacy implications, and you should use it carefully.

A venue appearance in the Service does not mean your location is perfectly accurate, real-time, or current. A user may remain visible after leaving. A user may be shown at the wrong venue. A user may fail to appear while present. These are both privacy and safety realities of the product.

6. When We Share Information

We do not sell personal information or location data to advertisers, data brokers, or third-party advertising networks in the ordinary sense of selling user lists or user location for advertising purposes.

We do share information with other users as part of the Service, with service providers that help us operate the Service, for legal, safety, and enforcement reasons, in business transfers, and with your direction or consent.

Depending on the feature and how you use Hespr, other users may see your profile, display name, bio, profile photos, recent or live photos if the feature makes them visible, the venue you are visible at, your visibility status, your attendance or going signal for a venue or event, your interaction status with them, and other content you choose to make visible through the Service.

Some of these disclosures are part of Hespr’s core venue-based social functionality. In some cases, paid features may allow users to view visibility status, venue association, or attendance-related information in ways that are not available on the free version of the Service. Hespr does not treat this product functionality as a sale of location data to advertisers or third-party ad networks.

7. Advertising, App Events, and Meta

Hespr may use advertising and app measurement tools, including the Meta SDK, to measure whether advertising campaigns lead to app installs and early activation. This helps us understand whether ads are working and improve how campaigns are delivered.

When permitted by your device settings, platform rules, and your choices, Meta may receive automatic app event information, advertiser tracking status, advertising identifiers, and app event signals that we configure. These signals may include app opened, onboarding completed, app ready, place explored, going intent, go-visible intent, first successful visibility activation, and early activation.

When permitted, we may also use Meta Advanced Matching, which can send hashed versions of information you provided to Hespr, such as email address, phone number, first and last name, date of birth, and gender, to help Meta match app activity to Meta users for advertising measurement and campaign optimization.

We do not send Meta your exact GPS coordinates, live venue name, profile photos, bio, prompts, waves, matches, meet spots, message-like interaction details, or the identities of people you interact with for advertising optimization.

On iOS, Hespr asks for App Tracking Transparency permission before sending Meta custom app events or Advanced Matching data that require tracking permission. If you ask the app not to track, Hespr does not send those Meta custom event or Advanced Matching signals from iOS, though Apple and advertising platforms may still support privacy-preserving or aggregated advertising measurement such as SKAdNetwork and Meta Aggregated Event Measurement where applicable.

8. What We Do Not Promise

Privacy tools reduce risk. They do not eliminate it.

• Location or venue assignment will always be accurate.
• Visibility will end immediately when a user leaves a venue.
• Every recent or live photo is genuine.
• Every user is authentic, truthful, or safe.
• Blocking or reporting will prevent all harm.
• Moderation will detect every bad act or bad actor.
• Venue or event data will always be accurate or current.

9. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to operate the Service, maintain safety, prevent fraud, comply with law, resolve disputes, enforce our terms, and maintain business and security records.

Retention periods vary depending on the type of information and why we need it. Active account information may be kept while your account remains active; profile and content information may remain available while your account is active and until removed or deleted; backups and system logs may persist for limited periods; billing and accounting records may be retained for financial and legal reasons; reports, moderation records, and safety-related evidence may be retained longer where needed to investigate abuse, defend legal claims, prevent repeat misconduct, or protect users; and certain records may be retained after account deletion where legally required or operationally justified.

10. Account Deletion and Removal of Information

If you delete your account, we will take reasonable steps to remove your profile from the live Service within a reasonable processing period.

For account-deletion review, we keep your first and last name, account creation and deletion times, chosen reason, and any written feedback for 30 days after deletion. Only authorized administrators can access this review history. After 30 days, names and written feedback are removed, and plain phone numbers, emails, and account identifiers are removed from deletion records. We retain the dates, selected reason, gender where available, internal account classification, and secure keyed hashes of phone numbers and account identifiers for recordkeeping and deletion safeguards. These hashes are pseudonymous identifiers, not contact information.

Deleting your account does not necessarily mean every piece of information disappears immediately or completely. Backups may remain for a period of time, logs may persist, moderation and safety records may be retained, transaction and billing records may be kept, reports involving your account may remain part of our records, and information may be retained where necessary for fraud prevention, legal compliance, dispute resolution, enforcement, or protection of users.

If you remove specific content before deleting your account, we will take reasonable steps to stop displaying it in the live Service, subject to technical and operational limitations.

11. Your Choices and Controls

You may also be able to manage device permissions, including location, camera, photos, and notifications, through your mobile operating system settings.

You may manage advertising and tracking choices through your operating system settings. On iOS, you can allow or deny App Tracking Transparency permission for Hespr. On Android, you may have controls for advertising ID use, ad personalization, and related settings depending on your device and Google account configuration.

Turning off certain permissions may limit or disable core functionality of Hespr.

• Control certain profile fields and what you choose to share.
• Choose whether and when to become visible at a venue.
• Stop being visible.
• Block users.
• Report users or content.
• Manage some notification settings.
• Update or delete certain profile information.
• Delete your account.

12. Access, Correction, and Rights Requests

You may request access to certain personal information we hold about you and ask that inaccurate information be corrected, subject to applicable legal and operational limitations.

You may also request deletion of certain information, though we may retain information where necessary for legal, security, fraud prevention, dispute, accounting, moderation, or safety reasons.

To make a privacy-related request, please use the official support or privacy contact channels made available through hespr.com or within the app.

We may take reasonable steps to verify your identity before acting on a request.

13. Children’s Privacy

Hespr is not for anyone under 18. We do not knowingly allow people under 18 to use the Service.

If we learn that an account belongs to a person under 18, we may suspend or delete the account and take related steps consistent with safety, legal, and operational needs.

14. Security

We use reasonable technical, administrative, and organizational measures intended to help protect information. However, no system is perfectly secure, and no method of storage or transmission can be guaranteed to be completely secure.

Because Hespr involves user-generated content, venue visibility, and in-person social interaction, security also depends on user behavior. You should protect your account credentials, use care when interacting with others, and report suspicious behavior.

15. International Access and Processing

Hespr is based in Canada, but the Service may be accessed from other locations, and information may be processed or stored by service providers in other jurisdictions depending on how the Service is operated.

By using the Service, you understand that your information may be processed in jurisdictions that may have privacy laws different from those of your home jurisdiction.

16. Third-Party Services and Links

The Service may contain links to or integrations with third-party services, websites, app stores, maps, payment systems, advertising measurement tools, analytics tools, or venue and event tools. Hespr is not responsible for the privacy practices of those third parties. Their handling of information is governed by their own terms and privacy policies.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by posting the updated policy on hespr.com, in the app, or through another appropriate communication method.

Your continued use of the Service after the updated Privacy Policy takes effect means you accept the revised policy.

18. Contact Us

Hespr Social Inc.

British Columbia, Canada

Website: hespr.com

For privacy-related questions, requests, or concerns, please use the official contact or support channels made available on hespr.com or within the Hespr app.