Contact: contact@hugathon.me
The short version
Hugathon.me is built around one idea: you stay anonymous. We don't know who you are. We don't want to know. The app works precisely because we don't.
What we collect
To make the app work, we store a small amount of data on our servers. Here's everything, with nothing left out:
- An anonymous username we generate for you — random, unlinked to your identity. You can request a different one, but we never ask for your real name and we won't accept it
- A hashed password — we cannot read it, we don't store the original, and we will never be able to recover it for you. We have no way to reach you anyway: no phone, no email, nothing
- The posts you write — text only, stripped of personal information before saving
- The reactions you send and receive
- A push notification token if you allow notifications — this is a device identifier issued by Apple or Google, not linked to your identity
How we use your data
We don't analyse it, sell it, share it, or profile you with it.
We store it so the app works. That's it.
You can't sell what you don't have. We don't know who you are, and we're not trying to find out. There's no profile to build, no identity to link, no data to broker.
If we ever add paid features (like in-app purchases through Google or Apple), those transactions go through their platforms directly. They share a purchase token with us — a code that tells us a subscription is valid — but not your name, email, or payment details. Even if you pay, we still don't know who you are.
Personal information in posts
We actively work to keep personal information out of posts. Before a post is saved, it passes through three layers of moderation: a pattern-matching filter that catches and removes common formats like email addresses, phone numbers, and obfuscated variations of those; a content moderation AI that screens for harmful material; and a second AI layer specifically trained to detect attempts to identify or expose another person. If a post doesn't pass, it's rejected — not stored. This protects both the person posting and anyone mentioned in the post.
If something slips through, report the post in the app and we'll remove it.
Third-party services
We use a small number of external services to run the app:
- Cloudflare — hosts our backend and database. Your data sits on their infrastructure. Cloudflare Privacy Policy
- Expo (push notifications) — routes push notifications through Apple and Google infrastructure. We pass a device token, not your identity. Expo Privacy Policy
- OpenAI — we send post content to OpenAI's moderation API to check for harmful content. Posts are not stored by OpenAI beyond their standard data retention. OpenAI Privacy Policy
No advertising SDKs. No analytics platforms. No tracking pixels.
Data retention
Posts are automatically deleted after 30 days. This is by design — the moment passes, the post goes with it.
You can delete your own posts at any time from your profile screen. You can also delete your entire account directly from the app — all your posts and data go with it, immediately and permanently. If you no longer have access to your account and want it removed, contact us at the email above and we'll handle it within 30 days — provided we can establish together, in a transparent way, that the account is yours. We know nothing about you, which cuts both ways: we can't verify identity through the usual means, and we won't delete an account on someone else's request.
If you lose your password, we cannot recover it. We have no email, no phone number, no way to reach you — and that's the whole point. Keep your password somewhere safe. If you lose it, your account is gone, but you can always start fresh with a new one.
Children
Hugathon.me is rated 17+ on the App Store and Play Store. It is not intended for anyone under 17. We do not knowingly collect data from minors.
Your rights
Depending on where you live, you may have the right to access, correct, or delete the data we hold about you. Since we hold very little and none of it is personal, this is mostly academic — but if you want to exercise any of these rights, email us and we'll help.
Changes to this policy
If we ever change how we handle data in a meaningful way, we'll update this page and note the date at the top. We won't notify you by email because we don't have your email.