Vanhuddle Privacy Policy

Last updated: 17 June 2026

Effective date: 17 June 2026

1. Introduction

This Privacy Policy explains how Vanhuddle (“Vanhuddle”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use the Vanhuddle mobile application and related services (together, the “Service”).

Use of the Service is also governed by our Terms of Service and Community Guidelines.

Vanhuddle is a social app for van lifers and road travellers. It lets you create a profile, discover and join huddles (meet-ups), message other users, share moments and community moments, and control how your location appears on the map.

Data controller. For the purposes of UK and European data protection law, the data controller is Kieran (trading as Vanhuddle). If you need our registered name or postal address for legal correspondence, email support@vanhuddle.com and we will provide it.

Contact. For privacy questions, requests, or complaints:

• Email: support@vanhuddle.com

This policy is written for users in the United Kingdom, the European Economic Area (EEA), and the United States, including California. If you use the Service from another country, local laws may also apply.

Not legal advice. This document describes our practices in plain language. It does not replace advice from your own lawyer.

2. Scope

This policy applies to personal information we process when you:

• download, install, or use the Vanhuddle app;

• create or use an account;

• interact with our support team at support@vanhuddle.com; and

• use features that connect to our servers (profiles, map, huddles, chat, moments, subscriptions).

It does not apply to third-party websites, apps, or services you reach through links in the Service (for example, Apple App Store, Google Play, or Google sign-in screens). Those services have their own privacy policies.

3. Personal information we collect

We collect personal information in the ways below. “Personal information” (and similar terms such as “personal data”) means information that identifies you or can reasonably be linked to you.

3.1 Information you provide

You can choose not to provide some profile or content fields, but certain features (for example, posting a moment with a photo) require the related information.

3.2 Information collected automatically

We do not use your location for background tracking as a default product behaviour. Live location is intended to update while you use the app with location sharing set to Live. If we introduce additional location features (for example, optional route tracking), we will update this policy and, where required, ask for your consent.

3.3 Information from third parties

We do not receive your full payment card details from the app stores; Apple and Google process payments under their own terms.

3.4 Information we do not intentionally collect

• We do not require government ID, precise home address, or financial account numbers to use the core Service.

• The Service is for users aged 16 and over (see Section 12).

4. How we use personal information

We use personal information only where we have a valid legal reason. Depending on your location, that may include:

• Contract — to provide the Service you signed up for;

• Legitimate interests — to keep the Service safe, prevent abuse, and improve reliability, balanced against your rights;

• Consent — where required (for example, certain optional features or marketing, if we offer them in future);

• Legal obligation — where we must comply with law.

Specific uses:

1. Provide the Service — accounts, profiles, map, huddles, messaging, moments, and subscriptions.

2. Send notifications — in-app notifications and, if you allow them on your device, push alerts for direct messages, join request activity, and huddle reminders (about one day and one hour before a huddle you host or attend, when scheduled far enough ahead), according to your in-app notification settings.

3. Apply your privacy choices — location mode (Live / Pinned / Hidden), DM privacy, people discovery, and blocks.

4. Safety and integrity — blocks, moderation, investigating reports, enforcing our terms, and preventing fraud or abuse.

5. Subscriptions — verifying paid features through RevenueCat and app store receipts.

6. Support — answering emails to support@vanhuddle.com.

7. Improve and maintain the Service — debugging crashes and errors (Sentry), fixing bugs, and planning features.

8. Legal — complying with lawful requests and protecting our rights and users.

We do not sell your personal information for money. We do not use your personal information for third-party behavioural advertising in the app today.

5. Location information (important)

Location is central to Vanhuddle. This section describes what we do in more detail.

5.1 Your choices

In the app you can set location sharing mode:

• Live — your location may be updated while you use the app and can be shown to others on the map according to product rules.

• Pinned — you share one fixed point on the map (stored on our servers). Other users may see your position in reduced precision on public map views (coordinates are rounded so exact GPS points are not shown).

• Hidden — you do not appear on the map or in “community people” discovery. You may still set a pin only to browse public huddles in an area; that browse pin is not shown on your profile to others.

You can change these settings at any time in the app. You can also revoke location permission in your device settings; some features will stop working until permission is granted again.

5.2 Huddles and map precision

• Public huddle listings may show locations with less precision for users who are not hosts or approved attendees (so exact meet-up coordinates are not exposed before you join).

• We do not display your full street address on your profile as a default product promise; map and feed features use coordinates and general area context.

5.3 Community and moments

• Community moments and people discovery may use your Home area or pinned/live centre and a radius around it, depending on your settings.

• Moments may include optional location metadata you attach when creating content.

6. How we share personal information

We share personal information only as described below.

6.1 With other users (your choices)

Depending on your settings and activity, other users may see:

• your profile (username, name, bio, avatar, tags, and similar public fields);

• your map presence when sharing is Live or Pinned;

• huddles you host or join, messages in huddle chats you participate in, and direct messages you send to recipients;

• community moments you choose to share publicly in a community scope;

• content you post that is visible under our product rules.

You can limit contact using DM privacy, people discovery, and block features.

6.2 With service providers (processors)

We use trusted providers who process data on our instructions and only for the purposes in this policy:

We require these providers to protect personal information and use it only to deliver services to us.

6.3 For legal and safety reasons

We may disclose information if we believe in good faith that it is necessary to:

• comply with law, regulation, legal process, or governmental request;

• protect the safety of any person, address fraud or security issues, or enforce our terms; or

• protect our rights or property.

6.4 Business transfers

If we are involved in a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction. We will notify you of any material change in ownership or use of your personal information.

7. International transfers

We and our providers may process personal information in the United Kingdom, the EEA, the United States, and other countries where they operate.

If you are in the UK or EEA, transfers to countries without an adequacy decision (such as the United States) are safeguarded using appropriate mechanisms, such as:

• the UK International Data Transfer Agreement or UK Addendum to EU Standard Contractual Clauses, where applicable; and/or

• the EU Commission Standard Contractual Clauses,

together with supplementary measures where appropriate.

You may contact support@vanhuddle.com for more information about transfer safeguards.

8. How long we keep personal information

We keep personal information only as long as needed for the purposes in this policy, unless a longer period is required by law.

Backups may retain deleted data for a limited time before they are overwritten.

9. Security

We use technical and organisational measures designed to protect personal information, including:

• encryption in transit (HTTPS/TLS);

• access controls and row-level security on our database where implemented;

• separation of privileged server keys from the mobile app; and

• limiting access to personal information to people and systems that need it.

No method of transmission or storage is completely secure. If you believe your account has been compromised, contact support@vanhuddle.com immediately.

10. Your rights and choices

Your rights depend on where you live. We will not discriminate against you for exercising privacy rights.

10.1 All users

You can:

• Access and update profile and privacy settings in the app;

• Control location via Live / Pinned / Hidden and device permissions;

• Control messages via DM privacy and blocks;

• Delete content you posted where the product supports deletion;

• Delete your account in the app under Settings → Account → Delete account (permanent; you will be asked to type DELETE to confirm). This removes your profile, trip log, shared community moments, messages you sent, and files we store for your account. If you have a subscription, cancel it separately in Settings → Manage subscription or in your Apple ID subscription settings;

• Request account deletion by email at support@vanhuddle.com if you cannot use the app (we may ask you to verify your identity).

10.2 United Kingdom and European Economic Area (UK GDPR / GDPR)

If UK or EU/EEA law applies, you may have the right to:

• Access a copy of your personal data;

• Rectify inaccurate data;

• Erase your data (“right to be forgotten”) in certain cases;

• Restrict processing in certain cases;

• Object to processing based on legitimate interests;

• Data portability — receive certain data in a structured, machine-readable format;

• Withdraw consent at any time where processing is based on consent (without affecting prior lawful processing);

• Lodge a complaint with a supervisory authority.

UK: Information Commissioner’s Office (ICO) — https://ico.org.uk

EEA: Your local data protection authority. A list is available from the European Data Protection Board.

To exercise rights, use in-app settings where available, or email support@vanhuddle.com. We respond within one month, which may be extended by two further months for complex requests as permitted by law.

10.3 United States

10.3.1 California (CCPA / CPRA)

If you are a California resident, you may have the right to:

• Know what personal information we collect, use, disclose, and sell or share;

• Delete personal information we hold about you, subject to exceptions;

• Correct inaccurate personal information;

• Opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising.

Our disclosures for California residents:

We do not sell personal information. We do not “share” personal information for cross-context behavioural advertising as defined under California law.

Sensitive personal information: Precise geolocation may be collected when you enable Live or Pinned sharing. We use it only to provide the Service and as described in this policy, not to infer characteristics about you for unrelated purposes.

Authorised agent: You may use an authorised agent to submit a request if they provide proof of authorisation as required by law.

Shine the Light: California Civil Code § 1798.83 — we do not share personal information with third parties for their direct marketing in a way that triggers that statute’s disclosure right.

10.3.2 Other US states

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out of certain processing. Contact support@vanhuddle.com and we will honour applicable rights.

10.3.3 Verification

We may need to verify your identity before fulfilling a request. We will not require an account to exercise rights beyond what is needed to verify you.

11. Marketing and communications

The Service may send push notifications and in-app notifications for operational events (for example, a new direct message or a join request update). You can control categories in Settings → Notifications and can turn off push entirely in your device’s system settings.

If we send marketing emails or promotional push notifications in future, we will:

• ask for consent where required (for example, UK/EEA); and

• provide an unsubscribe or opt-out mechanism.

You can always contact support@vanhuddle.com to opt out of non-essential communications.

12. Children

The Service is for users aged 16 and over. We do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has provided us with personal information, contact support@vanhuddle.com and we will delete it.

13. Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you (for example, automated credit scoring). Matching and discovery features use your profile, tags, location settings, and activity in ways you can understand and control in the app.

14. Third-party links and platforms

The Service may open external pages (for example, app store listings or OAuth sign-in). Those third parties process information under their own policies. We are not responsible for their practices.

Apple App Store / Google Play: Subscription management and refunds follow store rules.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version with an updated “Last updated” date. If changes are material, we will provide additional notice (for example, in-app message or email) where required by law.

Continued use of the Service after the effective date of an update means you accept the revised policy, to the extent permitted by law.

16. Contact us

Vanhuddle — Privacy

Email: support@vanhuddle.com

For data protection requests, include:

• the email address linked to your account;

• a clear description of your request (access, deletion, correction, etc.);

• your country of residence (UK, EEA country, US state, etc.) so we can apply the right rules.

Account deletion: use Settings → Account → Delete account in the app when possible. If you cannot access the app, email us from your registered address and we will process your request.

We aim to respond within 30 days.

Appendix A — Summary for quick reference

Appendix B — Technical list of subprocessors (current)

This list reflects providers integrated in the app as of the last updated date. We may update providers as the product evolves.

1. Supabase — infrastructure, auth, database, storage

2. Expo — push notification delivery infrastructure

3. Sentry — error monitoring (hosted in Germany for the configured project)

4. RevenueCat — subscriptions

5. Google — optional OAuth sign-in

6. Apple — App Store distribution and in-app purchases

7. Google (Play) — Play Store distribution and in-app purchases

For questions about this list, email support@vanhuddle.com.

End of Privacy Policy