PRIVACY POLICY

Last updated: October 25, 2026

• 1. Who we are
• 2. What we collect
• 3. How we use it
• 4. Contacts
• 5. Location
• 6. Who sees or receives it
• 7. How long we keep it
• 8. Your choices and rights
• 9. Safety and moderation
• 10. Security
• 11. Children
• 12. Changes
• 13. Contact

1. Who we are

Wutz Poppin’ is an event-discovery app and website operated by Wutz Poppin’ LLC, an Indiana limited liability company (“we”, “us”). This policy explains what the app and wutzpoppin.com collect and what we do with it. The app is currently in open beta.

2. What we collect

Account information

When you create an account: your name, email address, and password. Your password is stored only as a one-way hash, never in readable form. We also create a username for you, which you can change.

Profile details you choose to add

Optional: phone number, home city, a short bio, social-media handles (Instagram, TikTok, Snapchat, Facebook), and a profile picture you pick from your photo library.

Content you post

• “Itz Poppin’” pins — a note dropped at a location on the map.
• Statuses — a short personal note from your profile.
• Event check-ins — “I’m at this event.” These carry the venue’s location, not your GPS position.
• Chat messages in event and place chat rooms, shown with your display name.
• Events you submit as a promoter or venue.

Location

Your device location, if you allow it. See section 5.

Contacts

Only if you choose the friend-finding feature and grant permission. See section 4.

Safety records

If you report content or block someone, we record who reported or blocked whom and, for reports, what was reported and the reason you gave.

Technical data

Like any online service, our servers receive your IP address and the details of each request (for example, the map area the app asks about) and keep standard server logs to run and secure the service. We don’t use advertising or cross-app tracking, and we don’t build advertising profiles.

3. How we use it

• To run your account and keep you signed in (a sign-in token is stored in your device’s secure storage for up to 30 days).
• To show events, hotels, pins, statuses, and chat rooms relevant to where you are or where you’re going.
• To show other people the content you choose to post, and to find friends you choose to connect with.
• To review reports, enforce our Terms, and prevent abuse and fraud.
• To fix bugs, keep the service secure, and improve the app.
• To let you reset a forgotten password: we email a single-use link to the address on your account. It expires after 30 minutes, and using it signs you out of every other device.
• To answer you when you contact us.
• To comply with the law.

4. Contacts

Contact access is off unless you turn it on. If you tap the friend-finding feature and allow it:

• The app reads the email addresses and phone numbers in your contacts on your device and converts each one into a one-way code (a SHA-256 hash). It doesn’t upload names, or the addresses and numbers themselves.
• Those codes are sent to us only to check which of your contacts already have an account. We use them for that match and don’t keep them — we keep only the total number of contacts you synced.
• To let others find you this way, we store hashed versions of your own email and phone number on your account.

A hash isn’t the same as anonymous, which is why we use it only for matching and never share it. You can revoke contacts access in your device settings at any time.

5. Location

• Location is requested only while you’re using the app, to center the map and find nearby events and hotels.
• The area you’re viewing is sent to our servers so we can fetch events and hotels. We don’t keep a location history on your account, though standard server logs may record the area of each request for a limited time.
• Your exact position is stored only when you drop an “Itz Poppin’” pin (24 hours).
• You can turn location off in your device settings; the map still works, just without “near me.”

6. Who sees or receives it

We don’t sell your personal information. Here’s who else sees it:

Other users

• Pins, statuses, and check-ins — public ones are visible to other users of the app; you can instead share a post with your Circle only.
• Chat messages — visible to everyone who can open that room, next to your display name.
• Friends you connect with can see the profile details you’ve added, which can include your email address and phone number if you entered them. Leave those blank if you don’t want them shared.

Service providers

• Hosting — our servers and database run with a cloud hosting provider (DigitalOcean).
• Email — password-reset emails are sent through Google’s Gmail service, so Google handles the recipient address and the message while it is delivered, under its own policy.
• Mapbox — provides the map and hotel-location data. The map in the app loads directly from Mapbox, so it receives your device’s IP address and map requests under its own policy.
• Ticketing data — event listings come from ticketing providers such as Ticketmaster. We request events for an area; your account details are not sent.

Booking and ticket partners (when you tap a link)

Tapping “Get tickets” or “Book now” opens a partner’s website in your browser: ticketing sites such as Ticketmaster, and for hotels Expedia Group or Stay22, which may send you on to providers such as Booking.com. The link carries the hotel’s name and location, any stay dates, and our affiliate ID so the partner can credit us. It doesn’t include your account details. Once you’re on the partner’s site, they see your device as any website would, and their own privacy policy applies. We may earn a commission if you buy.

Legal and business reasons

We may disclose information if the law requires it, to protect people’s safety or our rights, or as part of a merger, acquisition, or sale of the business (we’d tell you first if your information became subject to a different policy).

7. How long we keep it

• Pins and check-ins — deleted automatically 24 hours after posting.
• Statuses — deleted automatically after 7 days; you can delete them earlier. Editing doesn’t extend the 7 days.
• Chat rooms expire automatically. Chat messages are not deleted when a room expires, and you can’t currently delete an individual message yourself. If you delete your account, your messages stay but are changed to show “Deleted User” and are no longer linked to your profile.
• Your account and profile — kept until you delete your account.
• Password-reset links — valid for 30 minutes and single-use; we store only a one-way hash of the link, and any left over are removed when you delete your account.
• Reports — kept for safety and moderation records.
• Server logs — kept for a limited time for security and troubleshooting.

8. Your choices and rights

• Delete your account: Profile → Delete Account. This removes your profile, your pins, statuses and check-ins, your friend connections, your blocks, and your sign-in. Chat messages are anonymized as described above.
• Edit your profile — change or clear any optional detail in your Profile at any time.
• Permissions — turn off location, contacts, or photo access in your device settings.
• Access or correction — email us and we’ll help. Depending on where you live (for example California, or the EU/UK), you may also have rights to access, correct, delete, or receive a copy of your data, and to object to certain uses. We’ll respond within the time the law requires. We don’t discriminate against people who use these rights.
• Marketing — we don’t send marketing emails today.

9. Safety and moderation

You can report a message or block a user from inside chat (press and hold a message). Blocked users’ messages are hidden from you. We review reports and may remove content or accounts that break our Terms.

10. Security

Data travels between the app and our servers over HTTPS. Passwords are stored as hashes, and your sign-in token is kept in your device’s secure storage. No system is perfectly secure, so please use a strong, unique password. If we learn of a breach that affects you, we’ll notify you as the law requires.

11. Children

Wutz Poppin’ isn’t directed at children under 13 and we don’t knowingly collect their data. If you believe a child has given us information, email us and we’ll delete it. Some events are 18+ or 21+; we show the age restriction where the ticketing provider supplies one.

12. Changes

If we change this policy in a meaningful way we’ll update the date above and, where the change matters to you, tell you in the app or by email.

13. Contact

Wutz Poppin’ LLC, Indiana, United States
Privacy questions, data requests, or password resets: wutzpoppin2026@gmail.com