Privacy Policy

Last updated: September 15, 2026

This Privacy Policy explains how Hypefy Platform Private Limited (CIN U62011UP2026PTC250914), a company incorporated in India with its registered office at House No. 420, Sambhal Road, Taharpur, Moradabad, Uttar Pradesh 244001 ("Hypefy," "we," "us") collects, uses, shares, and protects your personal data when you use the Hypefy applications and services (the "Service"), and the choices and rights you have. We act as the data fiduciary / controller for this data.

1. Data we collect

• Account data: your email address and, for password sign-ups, a password (stored only as a salted hash — we never see it). If you sign in with Google, we receive basic identity information from that sign-in.
• Profile data: display name, username, bio, avatar, banner, tags, anthem, and other details you add. You may confirm your age or date of birth at sign-up to meet age requirements.
• Content: posts, Shots, Shows, status notes, comments, messages, reactions, and media you upload.
• Activity data: follows, hypes, saves, poll votes, views, and read receipts, used to rank feeds and power features such as seen-states.
• Device and technical data: IP address, device and browser type, and app interactions, processed to keep the Service secure and working.
• Diagnostics: if the app encounters an error, we send limited error reports (error type, message, technical stack trace, and the in-app path where it occurred) to our error-monitoring provider to diagnose and fix problems.
• Purchases: if you buy a plan or a Shop item, what you bought, its price, and the status of the payment and subscription (for example, trial end and renewal dates). Your card or UPI details go to our payment processor and never reach us; we receive only a payment reference and its outcome.
• Push subscriptions: if you enable notifications, the push endpoint or device token needed to deliver them.

2. How we use your data and our legal bases

We use your data to:

• provide, operate, and secure the Service and your account (to perform our contract with you);
• personalize feeds, discovery, and notifications (our legitimate interests, or your consent where required);
• keep the Service safe, prevent abuse, and enforce our Terms (legitimate interests and legal obligations);
• respond to your reports, requests, and support enquiries (to perform our contract and meet legal duties);
• comply with applicable law, including intermediary and grievance obligations.

Where we rely on consent (for example, push notifications or, where required, certain personalization), you can withdraw it at any time without affecting prior processing.

3. What we do not do

• We do not sell your personal data.
• We do not track you across unrelated websites.
• We do not give advertisers your email address, your messages, or any other information that identifies you.

4. Who we share data with (processors)

We share data with service providers who process it on our behalf under contract:

• Supabase — database, authentication, and media storage.
• Vercel — application hosting and delivery.
• Razorpay — payments for plans and Shop purchases on the website. Purchases in the Google Play and Apple apps are handled by Google and Apple.
• Sentry — error monitoring and diagnostics.
• GIPHY — GIF search (your search query is proxied through our server).
• Apple (iTunes Search API) — song search; previews and artwork are served directly by Apple.
• Google (AdSense) — advertising in the feed, where it is shown. See section 11.
• Google Analytics — how the app is used: which screens are opened and in what order. It receives no name, username, email address or message content.

We may also disclose data where required by law, to respond to valid legal process, or to protect the rights, safety, and security of users and the public.

5. International transfers

Our providers may process data outside your country, including outside India or the EEA. Where we transfer personal data internationally, we rely on appropriate safeguards permitted under applicable law (such as standard contractual clauses) to protect it.

6. Data retention

We keep content until you delete it or your account. Shows and status notes expire automatically (after 24 hours). When you delete your account, we remove your profile, content, messages, and subscriptions from production systems; residual copies in encrypted backups expire on a rolling basis, and we may retain limited data where the law requires or to resolve disputes. Records of purchases are kept for as long as Indian tax and accounting law requires (currently up to eight years), even after you delete your account.

7. Your rights

Subject to applicable law (including India's DPDP Act, the GDPR, and similar laws), you can:

• access the personal data we hold about you and request a copy — you can export your data in-app from Settings → Account;
• correct or update inaccurate data;
• delete your account and data in-app from Settings → Account;
• object to or restrict certain processing, and withdraw consent;
• nominate another person to exercise your rights in the event of death or incapacity (DPDP);
• lodge a complaint with your data protection authority, or with our Grievance Officer (below).

8. Children's privacy

The Service is not intended for children under 13, and we do not knowingly collect their personal data. For users identified as minors under applicable law, we apply additional protections and, where required, seek verifiable parental consent. If you believe a child has provided us data without proper consent, contact our Grievance Officer and we will act promptly.

9. Messages

Direct messages are private to the members of a conversation. Hypefy staff do not read your messages except where necessary to investigate a report that you or another participant files, or where required by law.

10. Cookies and local storage

We use essential cookies and local storage to keep you signed in, remember preferences (such as your feed tab and whether music is muted), and secure the Service. These are necessary for the Service to function.

Analytics cookies (Google Analytics) and advertising cookies (Google AdSense) are used only with your consent, which you give or refuse in the cookie banner and can change at any time from Settings. In the European Economic Area, the United Kingdom and Switzerland they are off until you turn them on; elsewhere they are on until you turn them off. Our Cookie Policy lists every cookie we use, what it does and how long it lasts.

11. Advertising

Some Hypefy feeds include ads, shown between posts and marked "Sponsored". They are served by Google AdSense. Where an ad appears, Google receives your IP address, your device and browser type, and the page it was shown on, and may set cookies to measure it and to limit repeats. Google does not receive your email address, your username, your messages, or anything else that identifies your Hypefy account.

Ads are not shown everywhere. They are not shown in the Hypefy Android app. They are not shown to anyone who has turned advertising cookies off. And they are not yet shown to people in the European Economic Area, the United Kingdom or Switzerland, even with consent, because ads there require a Google-certified consent platform we do not yet use. Where ads do not run, the slot carries a Hypefy notice instead and no third-party script loads at all.

Ads are personalised only where we can confirm you are 18 or over from a date of birth you have given us. Everyone else — including anyone who has never given us one — sees non-personalised ads, which are chosen from the page rather than from anything about you.

You can review and change Google's ad settings at myadcenter.google.com. Blocking ads does not affect your access to Hypefy.

12. Security and breach notification

We use reasonable technical and organizational measures — including encryption in transit and at rest, hashed passwords, and access controls — to protect your data. Photos, videos, files and voice notes sent in a private chat can only be opened by the people in that conversation.

Direct messages are not end-to-end encrypted. They are stored on our servers so we can deliver them, which means the people who operate Hypefy can technically access them. We do not read private messages. We only look at a conversation if it is reported to us or we are legally required to.

No system is perfectly secure, but if a personal data breach occurs that affects you, we will notify you and the relevant authorities as required by applicable law.

13. Changes to this policy

We may update this policy from time to time. We will announce material changes in-app or by other reasonable means and update the date above.

14. Contact and Grievance Officer

Privacy questions or data requests:

• General: privacy@hypefy.chat
• Grievance Officer: Mohd Aman, Hypefy Platform Private Limited, grievance@hypefy.chat
• Address: Hypefy Platform Private Limited, House No. 420, Sambhal Road, Taharpur, Moradabad, Uttar Pradesh 244001, India