Legal

Privacy Policy

Effective May 12, 2026

Happenin’ is a local discovery app for Providence, RI. We built it to help people find what’s happening near them — not to collect data about them. This policy explains exactly what we store, why, and what you can do about it.

What we collect

We collect only what we need to make the app work:

  • Email address — when you sign in via magic link. Used to send your sign-in email and identify your account. Never shared with third parties.
  • Saved venues — spots you bookmark, stored against your account so they sync across devices. Private to you.
  • Vibe drops — your Crowd / Music / Wait ratings, stored with a timestamp and your user ID to enforce the one-drop-per-venue-per-hour throttle. The aggregate shown on venue pages is anonymous; your identity is never displayed.
  • Vibe Check answers — your mood, group size, and distance preference are stored in your browser’s localStorage only. They never leave your device and are not sent to our servers.

What we don't collect

  • We do not track your physical location
  • We do not run third-party analytics (no Google Analytics, no Mixpanel)
  • We do not run advertising scripts or sell data to advertisers
  • We do not use cookies beyond what Auth.js requires to maintain your session
  • We do not collect your device fingerprint, IP address history, or browsing behavior

Third-party services

Happenin’ uses a small number of third-party services to operate:

  • Resend — sends your magic-link sign-in email. Resend sees your email address in transit. See resend.com/privacy.
  • CARTO, Stadia Maps, OpenStreetMap — provide map tiles. When the map loads, your browser requests tiles directly from these providers; they may log your IP address per their own policies.
  • Railway — hosts the app and database. Your data lives on Railway’s infrastructure in the United States. See railway.app/legal/privacy.
  • Google Fonts — fonts are loaded from Google’s CDN. Google may log your IP when fonts are requested. We plan to self-host fonts before any public launch.

How we use your data

  • To authenticate you and maintain your session
  • To sync your saved venues across devices
  • To throttle vibe drops to one per user per venue per hour
  • To generate anonymous aggregate vibe summaries for venue pages

We do not use your data for marketing, advertising, or any purpose beyond operating the features above.

Data retention

Your account data (email, saved venues, vibe drops) is kept for as long as your account exists. If you delete your account, we remove your email, saved venues, and the user-ID link on your vibe drops within 7 days. Anonymized vibe-drop aggregates may remain in venue stats after deletion since they are not personally identifiable.

Your rights

You have the right to access, correct, export, or delete the data we hold about you. To exercise any of these rights:

  • Email us at hello@happenin.app
  • We will respond within 7 days and complete any deletion within 30 days

If you are in the European Economic Area (EEA) or California, you may have additional rights under GDPR or CCPA respectively. Contact us and we will honor them.

Children's privacy

Happenin’ is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

Changes to this policy

If we make material changes to this policy, we will update the effective date at the top of this page. Continued use of the app after a change constitutes acceptance of the updated policy. We will not retroactively weaken protections for data already collected without explicit consent.

Contact

Questions about this policy? Email hello@happenin.app. This is a pilot app run by a small team in Providence, RI.