Privacy Policy

1. Who We Are

Hopscotch (“we,” “us,” or “our”), a Delaware limited liability company with principal operations in California, provides the Hopscotch mobile application and related services. This Privacy Policy describes the information we collect, how we use it, and the choices you have. By using Hopscotch, you agree to the practices described here.

2. Information You Provide

When you create an account we collect your phone number for one-time-passcode verification. You may also provide a first name, last name, username, profile photo, and messages you send to other users or businesses. If you log a visit or follow a place, we record that activity on your account. If you register or are added as a member of a business account, we also collect your business name, role, and business contact information.

3. Information Collected Automatically

We collect device and usage information, including device model, operating system version, app version, language, time zone, crash and performance diagnostics, and in-app events. With your permission we collect approximate or precise location to surface nearby venues, sort search results, and enable check-ins. You can change location permission at any time in iOS Settings.

4. Camera, Photos & NFC

If you choose to upload a profile photo, we access your Photos library only for the image you select. If you scan an NFC tag or QR code at a venue, we read the tag's identifier to log your visit. We do not access your camera, photo library, or NFC reader in the background.

5. How We Use Information

We use your information to: (a) provide and operate the Service, including authentication, place discovery, punch cards, wallet cards, visit logging, and messaging; (b) personalize content such as nearby places and recommendations; (c) communicate with you about your account, security, and updates; (d) prevent fraud and abuse; and (e) understand, troubleshoot, and improve the Service.

6. App Clip

Hopscotch provides an App Clip that allows you to take quick actions, such as logging a visit by scanning an NFC tag or QR code, without installing the full Hopscotch application. The App Clip collects the same categories of information described in this Privacy Policy, limited to what is necessary to perform the requested action. App Clip data, including any account or visit data created through the App Clip, is governed by this Privacy Policy and may be associated with your Hopscotch account if you later install or sign in to the full application.

7. Sharing With Participating Businesses

When you follow a business, log a visit, redeem a reward, or message a business, we share the information necessary for the business to provide its service to you, such as your display name, username, profile photo, visit history at that business, and message contents. Each business is an independent operator and uses your information under its own privacy practices.

8. Service Providers

We use trusted third-party providers to operate Hopscotch, including Google (Places API for venue data and maps; on-device ads conversion measurement, if enabled), Apple (push notifications, App Clip, and platform services), and Firebase (authentication, storage, real-time database, analytics, and crash reporting). These providers process information on our behalf under appropriate agreements.

9. Cookies & Similar Technologies

The app uses local storage and device identifiers to keep you signed in, remember your preferences, and measure performance. We do not use third-party advertising cookies inside the app. Some browsers offer a “Do Not Track” (DNT) signal; because there is no consistent industry standard for how to respond to DNT signals, we do not currently change our practices in response to them.

10. Analytics, Advertising, and App Tracking Transparency

We use Firebase Analytics and crash-reporting services to understand how the Service is used and to improve reliability. These analytics are tied to a per-installation identifier and not to identifiers that follow you across other apps or websites. We may also measure the effectiveness of advertising campaigns that drive new installs using on-device, privacy-preserving measurement provided by Apple (SKAdNetwork / AdAttributionKit) and Google's on-device ads conversion APIs. We do not currently engage in “tracking” as defined by Apple's App Tracking Transparency framework — that is, we do not link data collected in Hopscotch with data collected by third parties about you for advertising or measurement purposes across other companies' apps and websites. If this changes, we will request your permission through the App Tracking Transparency prompt before doing so.

11. Your Choices

You can: (a) edit your profile information in Account; (b) revoke location, photos, notifications, or NFC permissions in iOS Settings; (c) stop sharing your visits with a business by unfollowing it; (d) opt out of push notifications, including marketing notifications, in iOS Settings (transactional notifications required to use parts of the Service may be unavailable if disabled); and (e) delete your Hopscotch account directly in the app from Account settings, or by emailing info@superherohospitality.com. Some information, such as messages you have already sent, may remain visible to recipients.

12. Data Retention

We retain account data while your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will remove your profile and visit history within a reasonable time, except where retention is required by law.

13. Security

We use industry-standard safeguards to protect your information in transit and at rest. No method of transmission or storage is 100% secure. Please keep your phone number and device secure, and contact us promptly if you suspect unauthorized access.

14. Children

Hopscotch is not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

15. International Users

Hopscotch is operated from the United States. If you use the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

16. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at info@superherohospitality.com. We will not discriminate against you for exercising your rights.

17. California Privacy Rights (CCPA/CPRA)

This section applies to California residents and supplements the rest of this Privacy Policy. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), California residents have certain rights regarding their personal information.

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information: (a) identifiers (phone number, account ID, device identifiers); (b) customer records (first name, last name, username, profile photo); (c) commercial information (visit history, follows, punch-card progress, rewards redemptions); (d) internet or network activity (app usage events, crash diagnostics, performance metrics); (e) geolocation data (approximate or precise location, with your permission); (f) sensory data (profile photos and NFC/QR identifiers you choose to scan); and (g) inferences drawn from the above to personalize content such as nearby places and recommendations. We do not collect Social Security numbers, financial-account numbers, biometric identifiers, genetic data, precise health information, or contents of mail, email, and text messages other than messages you send within Hopscotch.

Sources and Purposes

We collect this information directly from you, automatically from your device when you use the Service, and from service providers such as Google Places, Apple, and Firebase. We use it for the purposes described in “How We Use Information,” “Sharing With Participating Businesses,” “Service Providers,” and “Analytics, Advertising, and App Tracking Transparency” above.

Sale and Sharing of Personal Information

We do not sell your personal information for money, and we do not share your personal information for cross-context behavioral advertising. We have not sold or shared personal information of California residents in the preceding 12 months, and we have no actual knowledge that we sell or share personal information of consumers under 16 years of age.

Sensitive Personal Information

We use precise geolocation, when you grant permission, only to provide the Service (for example, to surface nearby venues and enable check-ins). We do not use sensitive personal information for purposes that would trigger a right to limit under the CCPA.

Retention

We retain each category of personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements, consistent with the “Data Retention” section above.

Your California Rights

California residents have the right to: (a) know the categories and specific pieces of personal information we collect, the sources, the business purpose for collecting it, and the categories of third parties to whom we disclose it; (b) request deletion of personal information we have collected from you, subject to certain exceptions; (c) request correction of inaccurate personal information; (d) opt out of the sale or sharing of personal information (we do not sell or share, but you may still submit a request); and (e) limit the use of sensitive personal information (as noted, we do not use sensitive personal information for purposes that would trigger this right). You also have the right not to receive discriminatory treatment for exercising your CCPA rights.

How to Exercise California Rights

To exercise any of these rights, email info@superherohospitality.com with the subject line “California Privacy Request” and indicate which right you wish to exercise. We will need to verify your identity before fulfilling your request, typically by confirming control of the phone number associated with your account. You may use an authorized agent to make a request on your behalf; the agent must provide proof of authorization and we may require you to verify your identity directly.

18. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice within the app or by other means. The “Last updated” date at the top of this page reflects the latest revision.

19. Contact

Questions about this Privacy Policy or your data? Contact us at info@superherohospitality.com.