Privacy policy.

HypeHaus Entertainment Private Limited (“HYPEHAUS”, “we”) runs the HYPEHAUS app for guests, its App Clip, Cartel for the businesses on HYPEHAUS, and this website. We are the data fiduciary (controller) for the personal data described here.

• Your phone number. It is your account. We send a one-time code to it to sign you in.
• Your date of birth, asked once, to confirm you are 18 or older. It is held where only our server can read it and is never shown to anyone, including businesses.
• Your profile: a @handle, and whatever you add: a name, a photo, a line about you, links, the music you say you like (and, only if you connect it, your top artists from Spotify), and optionally your gender.
• A recovery email, only if you add one, so you can get back in if you lose the number.
• What you buy and book: tickets, café orders and bills, pieces from brands, refunds, HYPECOINS earned and spent, and a HYPEPASS if you have one. For something shipped to you, the name and address you give for delivery.
• What you post and send: photos and words on a night's wall and pregame, messages, and reports you make.
• Location, only while the app is open and only if you allow it: to pick your city and draw the map around you. Your position is sent to other people only when you choose to share it, with someone you matched or with your Safe Home contacts, and only for the time you set.
• Camera, to take a photo you choose to post and to scan a code. Nothing is saved unless you post it.
• Your device's notification token, so a notification reaches this phone, and basic records of what was opened (for example, which night), so a ticket can be issued, sponsored placements can be counted, and the app can be kept working.
• Safety records: when someone takes a screenshot of a private chat, post or profile, the other person is told and the event is recorded.

The App Clip collects only what the one thing you are doing needs: for a purchase, your phone number, and a delivery address if something is shipped.

• The email or phone number each person signs in with, their role in the business, and the passkeys they add.
• The business: its name, @handle, address, map pin, tax number where given, and the bank or UPI details payouts go to.
• What the business publishes: nights, menus, pieces, posters and photos, offers and posts.
• What the business does: orders moved, tickets scanned, bills settled, and staff clock-in times under a staff PIN.
• The camera, to scan tickets at a door: the frames are read for the code and are not stored. Bluetooth and the local network, to reach a receipt printer.

Your email address if you join the waitlist or write to us, and the audience you say you belong to. Aggregate, cookie-free traffic measurement (Vercel Web Analytics): pages viewed, approximate region, browser type. No account is needed to read this site.

A venue, organiser, café, brand or creator never receives your phone number, your email, your date of birth or your location from us. At a door they see that a ticket is valid, and your @handle and Aura. Counts and statistics are shown to a business only when at least ten people are in them. The one exception is delivery: a brand that ships you something sees the name and address you gave for that order, until it is delivered or cancelled.

A stranger sees your card: your @handle, city, the year you joined and your Aura tier. People are not searchable. On a wall, in a pregame and in a first chat you appear under an alias; your name and profile open to someone only when you both choose each other. A first chat and its photos are deleted at dawn unless you both keep it. A wall is seen only by people who were scanned in at that night. You can go ghost for a night, block anyone at once, and report anything.

• To run the service: sign you in, sell and hold your ticket, take your order, deliver what you bought, pay businesses.
• To keep people safe: the 18+ check, reports, blocks, moderation by a person, and checks against fraud and abuse.
• To tell you things you asked to hear about: a night you follow, an order that is ready. You choose the categories and quiet hours in the app and can turn each off.
• To order what you see: the feed and the people you may meet at a night use your city, your taste and what you chose to follow. Paid placements are marked SPONSORED and are sold by us directly.
• To meet the law: tax, accounting and lawful requests.

Our grounds are your consent (which you can withdraw), performing our agreement with you, and legitimate uses the law allows, such as safety and compliance.

These companies process data on our instructions, for the purpose named, and not for their own advertising:

• Razorpay: payments. Your card, UPI and bank details go to Razorpay; we never see or store them.
• Supabase and Vercel: the database and the servers the service runs on.
• Twilio and WhatsApp (Meta): delivering the one-time sign-in code to your number.
• Resend: sending email you asked for, such as confirming your address or a recovery link.
• Apple: delivering notifications to your phone.
• Spotify, only if you connect it; Shopify, only where a brand you bought from fulfils orders through it.

Some of these store data outside India. We also disclose information where the law requires it, or as part of a merger or sale of the business, with notice.

For as long as you have an account. Deleting your account deletes your profile, what you posted, your messages, your date of birth and your activity. Records the law requires us to keep, such as payment, invoice and tax records, are retained for the period the law sets, no longer linked to your profile. First chats and their photos are deleted at dawn. A view-once photo cannot be opened a second time. Waitlist details are kept until the waitlist closes or you ask us to remove you.

• Delete your account in the app (HYPEHAUS: settings → DELETE MY ACCOUNT; Cartel: MORE → SETTINGS → CLOSE ACCOUNT), or see how to delete your account.
• Get a copy of your data: EXPORT MY DATA in the HYPEHAUS app's settings; for Cartel, write to us.
• Correct your profile in the app at any time. Withdraw location, camera or notification permission in iPhone Settings: the app keeps working, with a city picker instead of the map around you.
• Nominate someone to exercise these rights for you, or complain: write to our Grievance Officer below. You may also approach the Data Protection Board of India.

HYPEHAUS is for adults. You must be 18 or older to have an account. We close an account we learn belongs to someone under 18 and delete its data.

Data travels encrypted. Access inside the company is limited to the people who need it and is logged. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

If we change this policy in a way that matters, we tell you in the app or by email before it takes effect, and the date at the top changes.

Questions, requests and complaints: support@hypehaus.org. Grievance Officer: Aditya Raghatate, Director, at the same address. We acknowledge within 48 hours.