HighPoints Privacy Policy
HighPoints is made by Happihack Studios ("we"). This policy says what the HighPoints app and service collect, why, and what you can do about it. It is written to be read, not skimmed. If something here is unclear, email support@highpoints.io.
What HighPoints is
HighPoints lets you find, share, and rate outdoor spots. You choose what to post. We do not track where you go.
What we collect
Account. A username you choose, and one of: an email address and password, a Sign in with Apple identifier, or a Sign in with Google identifier. If you use Apple's Hide My Email, we receive the relay address Apple gives us. Passwords are stored only as a one-way hash.
Profile, if you add it. A profile picture, a short bio, and a mood line. All optional.
Spots you post. A name, a note, an optional kind, photos and an optional video, and a location you place on a map by hand. You choose whether each spot is public or friends-only, and whether others see the exact pin or a 1 km circle around it. Location data embedded in photos and videos by your camera is removed on your device and again on our server before anything is stored.
Ratings. Four scores from 1 to 5 for a spot, and your statement that you have been there.
Friends, blocks, reports. Who you are friends with, who you have blocked, and any report you send about a spot, a rating, or a person.
Session and device basics. A random sign-in token per device, the device's name, and the times you signed in. Our web host records standard server logs (IP address, request path, time) for security and debugging.
What we do not collect
- We do not track your location. The app asks for location only to centre the map or place a pin you are about to post, and that reading is used on the spot and discarded. Nothing runs in the background.
- No advertising identifiers, no ad networks, no analytics or tracking SDKs.
- No contacts, no calendar, no health data.
Map tiles
The map is drawn from tiles served by OpenFreeMap, an OpenStreetMap-based project. When the map loads, your device requests tiles from their servers, which see your IP address and the tile coordinates. We do not send them anything about you. Their policy is at https://openfreemap.org.
How we use what we collect
To run the service: show spots to the people allowed to see them, sync your data between your devices, and keep friends and blocks working. To keep it safe: act on reports, block abuse, and protect accounts. We do not sell or rent any of it, and we do not use it for advertising.
Who can see what
- Public spots are visible to any signed-in user, with the pin precision you chose.
- Friends-only spots are visible to your accepted friends only.
- Your username, profile picture, bio, mood, and public spot count are visible to signed-in users who are not blocked by you or blocking you.
- Your email is never shown to other users.
- Reports are read by a person at Happihack Studios and are not shown to the person reported.
Where it lives
Data is stored on servers in the United States operated by our hosting provider. Photos and videos are stored on those servers and served only to signed-in users allowed to see the spot.
How long we keep it
Spots, media, and ratings you delete are hidden immediately and purged within 30 days. When you delete your account, your spots, media, ratings, friendships, and blocks are removed and your account record is anonymised at once; media files are purged within 30 days. Reports you sent stay, without your identity attached, because they are about other content. Server logs are kept for 30 days.
Your choices
- Delete your account any time from Profile. It is immediate and cannot be undone.
- Change your username, picture, bio, and mood any time.
- Change a spot's audience and pin precision any time, or delete it.
- Block anyone; they are not told.
- Ask us for a copy of your data or to correct it: support@highpoints.io.
Age
HighPoints is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone younger, and we delete it if we learn we have.
Security
Connections use HTTPS. Sign-in tokens are stored hashed on our servers and in your device's secure storage. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.
Changes
If this policy changes in a way that matters, the app will tell you before the change takes effect. The date at the top always reflects the current version.
Contact
Happihack Studios, P.O. Box 155, Canby, OR 97013, support@highpoints.io.