Last updated: 2026-08-23
Hapz is a group chat for planning trips and parties. To do that it holds your plans, your messages, and the amounts your group owes each other. This page says exactly what that means.
It is written to be read, not to be survived. If something below is unclear, that is a defect in this page and worth reporting.
Your account. A handle and a display name that you choose, and a session token so you stay signed in. There is no password, no email address, and no phone number.
Your Hapz. The messages, photos, availability, votes, RSVPs, Pot contributions, expenses and food orders belonging to each group you are in. This is the app; without it there is nothing to show you.
Money. Amounts, who paid, and who owes whom. Hapz does not store card numbers, bank details or payment credentials. When a Ringleader places a food order, the card lives with the payment provider, never with us.
Nothing else. No contacts, no location, no advertising identifier, no browsing history, no cross-app tracking.
Some information is calculated for you alone and is deliberately never shown to your group:
This is enforced by the code, not just promised here. Anything shared with the group's AI assistants passes through a strict allow-list that fails closed: a field that is not explicitly permitted cannot leave, even by accident.
Your Crew sees what you post to the Table, which is the point of a group chat.
Nobody else. We do not sell your data, we do not share it with advertisers, and we do not use it to train models. We disclose data only if legally compelled, and we will tell you unless we are prohibited from doing so.
Service providers we rely on to run the app (hosting, payment processing) see only what they need to do their job, and are bound to use it for nothing else.
Photos you add are stripped of their embedded metadata before they are stored — including GPS coordinates. Phones tag photos with the exact place they were taken, and a holiday album with GPS intact publishes where everyone in it lives. Hapz removes that on the way in, not on the way out.
Your data is kept while your account exists. When you delete your account:
Backups are purged on their own schedule, within 30 days.
You can, from inside the app: see everything Hapz holds about you, correct your profile, and delete your account.
Depending on where you live you may also have rights to export or restrict processing, and to object to it. Requests go to help@hapz.cc and are answered within 30 days.
Hapz is not intended for people under 13, and we do not knowingly collect data from them. If you believe a child has an account, write to help@hapz.cc and we will remove it.
Data is encrypted in transit. Money movements and role changes are written to a tamper-evident audit log, so a disputed charge is settled by a record rather than an argument. No system is perfect, and we will tell you promptly if something goes wrong.
If this policy changes in a way that affects you, we will say so in the app before it takes effect — not by quietly updating a date at the top of a page.
help@hapz.cc