Last updated: September 5, 2026

Privacy Policy

Welcome to Capybara ("we," "our," or "us"). Capybara is a location-based social platform that connects people for spontaneous activities and hangouts. We are committed to protecting your privacy and being transparent about how we collect, use, and share your personal information.

This Privacy Policy explains our practices when you use our mobile application ("App") and related services ("Services"). By using our App, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Information You Provide

Account: Phone number (required for OTP), optional email, name, age (18+), gender, occupation status, college/university.

Profile: Profile photos (3–5), interests, verification selfie with government-issued ID.

Content: Hangout posts, messages, join requests.

1.2 Automatically Collected

Location: Precise GPS when you use the App; we may cache location for performance.

Device & usage: Device type, OS, identifiers, IP, app usage, interactions, logs.

1.3 Third-Party Services

If you sign in with Google or Apple, we receive basic profile and auth data. We use Firebase Analytics for usage and performance.

2. How We Use Your Information

We use it to: create and manage your account; show your profile and location-based features; verify identity; send notifications; improve safety and the app; comply with law; and enforce our terms.

2.1 Capy invitations

When you enable Capy, we use your saved area and coordinates, distance, activity choices, availability and time zone to watch for suitable hangouts, including while the App is closed. Capy uses the location selected in the App; it does not need continuous background GPS tracking.

We store your Capy on/off preference, invitations, delivery acknowledgements, decisions, related join or booking outcomes, and any optional feedback you submit. These records support invitation delivery, avoid repeated suggestions and help us understand reliability and participation. Recent invitation decisions and negative feedback help avoid repeating an event during a 30-day matching window. This matching window is separate from how long the records are retained.

Apple's push service and, on Android, Firebase Cloud Messaging receive the delivery token and invitation details needed to deliver the live surface. A Live Activity can show the hangout's venue, area, activity, time and match explanation on your Lock Screen and other supported system surfaces. Anyone who can see that screen may see those details.

You can change supported preferences in Tune, pause Capy, and control notification and Live Activity access in device Settings. Pausing stops future automatic suggestions and pending automatic starts; it preserves your preferences and does not cancel a booking or withdraw a join request. Invitation frequency is capped at the limit shown in the App, and invitations depend on available matches.

The current Capy controls do not collect accessibility, dietary or alcohol preferences. If you supplied these through an earlier version, they may remain in your account records; the current hangout selector does not enforce them. Check any venue access or dietary requirements with the host before joining. You can contact us to request access to, correction of, or deletion of stored preference and feedback records.

After a joined hangout ends, you can optionally tell us whether you attended. We store this as your own report, separately from host check-ins and booking status. Skipping or not answering does not count as a no-show.

Capy records follow the account retention policy in section 4. Pausing Capy or disabling Live Activities does not delete them. Deleting your account removes its Capy preferences, invitations, feedback, attendance responses and delivery records from the active database. Contact support@capybarahangouts.com for a data request.

3. How We Share Your Information

With other users: Profile (name, age, photos, interests, verification status) and approximate location for map and hangouts.

With providers: Firebase (auth, Firestore, Storage, FCM, Analytics), Google Maps, and Google/Apple Sign-In where you use them.

Legal: When required by law or to protect rights and safety.

With your consent: When you explicitly agree.

4. Data Storage and Security

Data is stored on Firebase (Google Cloud) and our backend (Supabase). We use HTTPS, secure auth, and access controls. We retain your data while your account is active; after deletion we delete or anonymize within 30 days except where law requires retention. Verification images may be kept longer for safety.

5. Your Rights and Choices

You can view and update your profile, request a copy of your data, delete your account, control location and notification permissions, and choose phone vs social sign-in. Disabling location limits core features.

6. Children's Privacy

Our App is for users 18+. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.

7. International Transfers

Data may be processed in the US, EU, or other regions where our providers operate. We use appropriate safeguards.

8. Third-Party Links

We are not responsible for third-party sites or their privacy practices. We use Firebase, Google Maps, and Google/Apple Sign-In; their policies apply to their services.

9. California (CCPA) and European (GDPR) Rights

California residents: you may have rights to know, delete, and opt out of sale (we do not sell personal information). EEA residents: you may have access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact us to exercise these rights.

10. Contact Us

Questions about this Privacy Policy or our data practices:

Email: support@capybarahangouts.com

We will respond within 30 days.

11. Changes

We may update this policy. We will notify you of material changes in the App or by email and update the "Last updated" date. Continued use after changes means you accept the updated policy.

12. Consent

By using our App, you consent to the collection, use, and sharing described here. You may withdraw consent by deleting your account or contacting us.

Effective date: January 26, 2026