TL;DR — The Short Version
- What we collect: Account info, GPS location (when you log a harvest, record a trail, or share your location in chat), photos, and chat messages.
- Why: To run the app and help you coordinate hunts.
- Who sees it: Your club members (by design) and our service providers — hosting, maps, email, analytics, crash reporting, and moderation alerts (all listed in Section 3).
- What we don't do: Sell your data, target ads at you, or track you outside the app.
Questions? Email privacy@thehuntclubapp.com
1. Information We Collect
A. Information You Provide
- Account data — Email address and password. Passwords are hashed and never stored in plaintext.
- Profile data — Display name, avatar photo, and phone number. All optional.
- Club membership — Which clubs you join and your assigned role (Owner, Admin, Member, or Guest).
- User-generated content — Chat messages, harvest logs, stand notes, event RSVPs and comments, photos, poll questions and votes, and reactions.
B. Information Collected Automatically
| Data Type | When Collected | Details |
|---|---|---|
| Trail recording GPS | During active trail recording | Background location only while recording; stops when you tap Save or Cancel |
| Harvest GPS | When logging a harvest | Single foreground location reading |
| Chat location share | When you tap “Location” in club chat | User-initiated single foreground reading, shared with your club members as a chat message |
| Usage analytics | As you use the app | Screens viewed, taps, and feature events (e.g. “checked in”, “harvest logged”), tied to a pseudonymous user ID and your club ID. GPS coordinates are stripped before sending. Processed by PostHog (Section 3.B) |
| Crash reports | When the app crashes or errors | Stack trace, device model, OS, app version, your user ID and account email. GPS coordinates are scrubbed before sending. Processed by Sentry (Section 3.B) |
| Push notification token | When you enable notifications | Device push token stored to deliver club notifications via Expo's push service |
| Device info | On app launch | OS, app version — for crash diagnostics and analytics |
C. Information From Third Parties
None. We do not purchase or receive data from data brokers or other third-party sources.
2. How We Use Your Information
- Provide the service — Authenticate you, display club content, and manage stands, reservations, and check-ins.
- Check-in visibility — Share your real-time check-in status — which stand you are occupying — with fellow club members.
- Communications — Transactional emails such as club invitations and email confirmation.
- Weather — Pass map coordinates to Open-Meteo for local forecasts.
- Improve the service — Crash reports (via Sentry) and pseudonymous product analytics (via PostHog). Analytics events are tied to an internal user ID — not your name or email — and GPS coordinates are removed before anything is sent.
- Moderation and enforcement — When a chat message is reported, the reported content and the names of the people involved are forwarded to our private moderation channel so we can review and act on reports promptly.
- Legal compliance — Retain records as required by applicable law.
We do NOT:
- Use your data for advertising or ad targeting
- Sell your data to data brokers or third parties
- Build profiles for third-party marketing
- Perform automated decision-making that produces legal effects on you
3. How We Share Your Information
A. With Your Club Members
Sharing with club members is a core function. Club members can see your display name, avatar, check-in status, locations you choose to share in chat, harvest logs, chat messages, event RSVPs, and reservations.
B. With Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase (US) | Database, authentication, file storage | All app data; encrypted at rest and in transit |
| Mapbox | Map tile rendering | Device location for map centering |
| Open-Meteo | Weather forecasts | Latitude/longitude of map center |
| Resend | Email delivery | Recipient email, club name, inviter name |
| PostHog (US) | Product analytics | Pseudonymous user ID, club ID, screen views, taps, and feature-usage events, plus device data (model, OS, app version). GPS coordinates are stripped before sending. Analytics can be disabled remotely by us without an app update |
| Sentry (US) | Crash and error reporting | Crash reports with stack traces, device data, app version, your user ID and account email. GPS coordinates are scrubbed before sending |
| Expo (US) | Push notification delivery | Device push token and notification content |
| Slack (US) | Moderation & operational alerts | When a chat message is reported: the reported message content, the author's and reporter's display names, club name, and report reason are forwarded to our private moderation workspace. Limited operational events (e.g. a new club being created) may include display names |
C. Legal Requirements
We may disclose your information if required by law, subpoena, or court order, or to protect our users or the public from harm.
4. Data Retention & Account Deletion
Stale check-ins auto-checkout after 24 hours. Club invite tokens expire after 7 days. Your account data is retained until you delete your account.
What happens when you delete your account (Settings → Delete Account):
- Permanently deleted — Your login credentials, email address, avatar, phone number, preferences, notification settings and device tokens, location pings, poll votes, event RSVPs, reservations, and your club memberships. You are removed from every club.
- Retained under “Deleted User” — Your chat messages, harvest logs, check-in history, notes, and photos remain in your clubs’ records, attributed to an anonymous “Deleted User” profile, so club history and shared records stay intact. Where we had copied your display name into photo tags, that copy is replaced with “Deleted User”. Free text is not rewritten: your own messages, and other members’ messages that mention you by name, are left as written.
- Club owners — If you own a club, ownership transfers automatically to its longest-standing admin, or failing that its longest-standing member, or failing that its longest-standing guest. If you are the club’s only member, the club is deleted along with your account. You are never blocked from deleting.
- Your email address is released — You can sign up again later with the same address. That creates a completely new account; it does not restore or re-link anything from the deleted one.
- Subscriptions — If you subscribe through the App Store, deleting your account does not cancel that subscription. Only Apple can cancel it, in your Apple ID subscription settings.
5. Your Rights & Choices
- Access — Request a copy of your personal data
- Deletion — Delete your account from the app (Settings → Delete Account) or the web dashboard. See Section 4 for exactly what is deleted versus retained anonymously
- Location controls — You share location only when you log a harvest, record a trail, or share it in chat; manage the location permission anytime in your device settings
- Content removal — Delete harvest logs, event comments, reservations, and reactions yourself
EU/EEA/UK users have additional GDPR rights (rectification, portability, restriction, objection). California residents have CCPA/CPRA rights. Email privacy@thehuntclubapp.com to exercise any rights. We respond within 30 days.
6. Data Security
- All communication uses TLS/HTTPS
- Data encrypted at rest on Supabase infrastructure
- Row-Level Security (RLS) on every database table
- JWT-based sessions with automatic token refresh
- Passwords hashed; never stored in plaintext
- Service role keys restricted to server-side processes
7. Children's Privacy
HuntClub is intended for users aged 13 and older (16 in the EU). We do not knowingly collect personal information from children under 13. Contact privacy@thehuntclubapp.com if you believe a child has provided us with personal information.
8. International Data Transfers
HuntClub is operated by AJC Apps, LLC from the United States. Data is stored on Supabase infrastructure in the US. EU/EEA/UK data is transferred under Standard Contractual Clauses (SCCs).
9. Changes to This Policy
We may update this policy from time to time. For material changes, we will provide at least 30 days notice via in-app notification or email. Continued use constitutes acceptance.
10. Contact Us
For privacy questions or data requests, email privacy@thehuntclubapp.com. We respond within 30 days.