Privacy Policy

This policy describes how the hangu app (available at hangu.app, the “App”) processes users' personal data. We make every effort to ensure your data — and in particular your location and the content of conversations — is protected and used solely to operate the App.

1. Data controller

The controller of your personal data is Krystian Frydryk, who operates the hangu App. For all matters concerning personal data you can contact us by email: krychaxp.pl@gmail.com.

2. What data we process

In connection with your use of the App, we process the following data:

• Account data — email address and password (stored only in hashed form by the authentication provider). When signing in with Google — basic Google account data shared during sign-in (email address, identifier).
• Profile data — display name, gender (including an optional self-description) and pronouns, date of birth (used to verify you are 18 and to display your age), an “about me” description, what you are looking for and what you're in the mood for, and optionally: height, weight, relationship status, social media profile names (Instagram, X, Facebook) and profile photos (up to 6 photos).
• Location — the precise geographic coordinates of your device, obtained with the browser's consent. We use them solely to calculate distances to other users. Your raw coordinates are never shared with other users — others only see a rounded distance, depending on your privacy settings (exact, approximate or fully hidden).
• Activity data — “online” status and “last seen” information.
• Communication — the content of messages in 1:1 conversations, photos sent in chat (including view-once photos) and read receipts.
• Interactions — likes/taps, blocked users and abuse reports submitted to moderation.
• Technical data — diagnostic information about App errors and anonymous visit statistics, as well as cookies necessary to maintain the login session.

3. Purposes and legal bases for processing

We process data for the following purposes and on the following bases (GDPR):

• providing the service (creating an account, displaying the profile, the grid of nearby people, chat) — Art. 6(1)(b) GDPR (performance of a contract);
• geolocation and voluntary sensitive data (e.g. data that may indicate sexual orientation or health, if you provide it yourself in your profile or photos) — Art. 6(1)(a) and Art. 9(2)(a) GDPR (your explicit consent; providing this data is voluntary);
• security, content moderation and abuse prevention (including automated photo moderation, handling blocks and reports) — Art. 6(1)(f) GDPR (legitimate interest of the controller and users);
• verifying you are 18 — Art. 6(1)(f) GDPR (legitimate interest — the App is intended only for adults);
• handling complaints and pursuing/defending claims — Art. 6(1)(f) GDPR.

4. Automated photo moderation

To ensure safety, every profile photo and photo sent in chat is automatically analysed by the Google Gemini artificial intelligence service for prohibited content (including nudity, sexual content, violence, presence of faces). For this purpose the photo is transferred to Google. Photos deemed prohibited as a profile photo are rejected, and sensitive photos in chat may be flagged so the recipient opens them knowingly.

5. Data recipients (processors)

We use trusted providers who process data on our behalf, solely to the extent necessary for the App to operate:

• Supabase — database hosting, authentication, real-time communication and photo storage;
• Vercel — App hosting and anonymous visit analytics;
• Google — sign-in via Google account (OAuth) and automated photo moderation (Google Gemini);
• Sentry — App error and performance monitoring (including recording the session at the moment an error occurs).

Some providers may process data outside the European Economic Area (e.g. in the USA). In that case, the transfer takes place on the basis of appropriate safeguards, in particular standard contractual clauses approved by the European Commission.

6. Retention period

We store account and profile data for as long as you have an account in the App. After you delete your account, all related data (profile, location, messages, photos, likes, blocks) is permanently deleted. Technical and diagnostic data (logs, error reports) is stored for a shorter, necessary period. Data needed to defend against claims may be stored until those claims expire.

7. Your rights

In connection with the processing of your data, you have the following rights:

• the right to access your data and obtain a copy of it;
• the right to rectification (correction) of your data — you can edit it in your profile settings;
• the right to erasure (“the right to be forgotten”) — carried out yourself via the “Delete account” feature in settings;
• the right to restriction of processing and the right to object;
• the right to data portability;
• the right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal);
• the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (PUODO).

8. Account deletion

You can delete your account at any time in Settings → Delete account. The operation is immediate and irreversible — it deletes your profile, location, messages, photos and all other data associated with the account.

9. Cookies

We use cookies that are necessary for the App to operate (maintaining the login session) and, to a limited extent, for anonymous visit analytics. Necessary cookies are required to use the App and cannot be disabled without losing the ability to log in.

10. Security

The connection to the App is encrypted (HTTPS). Access to data is restricted by security rules at the database level — each user has access only to their own data and to data that others knowingly share in their profile. Raw location is not available to other users.

11. Age of users

The App is intended only for people who are 18 years or older. We do not knowingly process data of minors. If we learn that an account belongs to a minor, it will be deleted.

12. Changes to the policy

This Privacy Policy may be updated. We will notify you of significant changes in the App. The current version is always available on this page along with the date of the last update.

13. Contact

For matters concerning privacy and personal data, write to: Krystian Frydryk, krychaxp.pl@gmail.com.