Privacy Policy

This Privacy Policy explains how Hangin, Inc. (“Hangin,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects information when you use Hangin.

Hangin includes our websites, web applications, iMessage, SMS and RCS experiences, artificial intelligence features, APIs, connected-account services, integrations, recommendations, offers, rewards, and related products and services collectively, the “Service.”

This Privacy Policy applies to information processed by Hangin. Third-party merchants, financial providers, payment processors, messaging platforms, and connected services may process information under their own privacy policies.

Our contact information is:

Hangin, Inc. 115 Grand Street New York, New York Website: hangin.so Email: hey@hangin.so

1. Information We Collect

The information we collect depends on the features you use, the permissions you grant, and the information you choose to provide.

A. Account and Contact Information

We may collect:

• name;

• email address;

• phone number;

• username;

• account identifiers;

• date of birth or confirmation that you are at least 18;

• authentication information;

• profile photo;

• city, neighborhood, or region;

• communication preferences;

• referral information; and

• support and account-verification information.

When you sign in through Apple, Google, or another provider, we may receive information permitted by that provider and your account settings.

B. Messages and Conversation Content

When you communicate with Hangin, we may collect and process:

• messages;

• prompts;

• responses;

• photos;

• screenshots;

• attachments;

• links;

• voice or audio content, when supported;

• message timestamps;

• sender and recipient identifiers;

• delivery information;

• interaction information; and

• conversation history.

We may use this information to:

• understand and respond to your requests;

• remember information you ask us to save;

• provide search results;

• personalize the Service;

• make recommendations;

• provide reminders; and

• operate features you enable.

C. Content You Upload or Save

We may collect content you submit, upload, send, or save, including:

• photos;

• product images;

• screenshots;

• links;

• social posts;

• videos;

• documents;

• lists;

• notes;

• places;

• restaurants;

• events;

• brands;

• products;

• services;

• reviews;

• comments;

• likes and dislikes;

• inspiration;

• things you want to remember; and

• other content you provide.

We may analyze this content to identify characteristics such as:

• topics;

• objects;

• text;

• products;

• brands;

• locations;

• colors;

• visual styles;

• categories;

• preferences; and

• interests.

This analysis helps Hangin organize your content and provide a more relevant experience.

Unless we provide a separate notice and obtain any consent required by law, we do not use uploaded photos to create facial-recognition templates or identify unknown individuals using facial geometry.

D. Preferences and Personalized Profile Information

We may collect information about your:

• interests;

• tastes;

• favorite places;

• preferred neighborhoods;

• budget;

• product preferences;

• clothing sizes;

• dietary preferences;

• accessibility preferences;

• shopping habits;

• travel interests;

• event interests;

• availability;

• social preferences; and

• other preferences you provide.

We may also create inferences based on your:

• requests;

• saved content;

• uploaded content;

• offer interactions;

• searches;

• responses;

• purchases;

• reward activity; and

• previous use of Hangin.

These inferences may be used to create and update your personalized Hangin profile.

E. Connected Email, Calendar, Contacts, and Other Services

When you choose to connect a third-party account, we may access information covered by the permissions you grant.

Depending on the connected account and feature, this may include:

• email messages;

• email metadata;

• sender and recipient information;

• subject lines;

• attachments;

• receipts;

• purchase confirmations;

• reservations;

• appointments;

• tickets;

• travel information;

• offers;

• delivery information;

• calendar events;

• event participants;

• event locations;

• reminders;

• contact information;

• documents;

• files;

• tasks;

• social-account information;

• commerce-account information; and

• other data available through the connected service.

We may search, organize, summarize, classify, display, or extract information from connected services to provide features you request.

For example, Hangin may use connected information to:

• locate a receipt;

• find a reservation;

• identify an upcoming event;

• find an unused benefit;

• identify a scheduling conflict;

• answer a question about your account;

• save relevant information;

• create a reminder; or

• identify an offer relevant to a purchase you are considering.

We do not access a connected account until you authorize the connection.

F. Financial, Payment, and Transaction Information

When you purchase a paid feature, link an eligible card or financial account, activate an offer, claim a reward, or receive a payment, we and our providers may collect:

• billing name;

• billing address;

• payment-method type;

• card brand;

• limited card information, such as the last four digits;

• tokenized card or account identifiers;

• financial institution;

• card issuer;

• account type;

• merchant name;

• merchant category;

• transaction amount;

• transaction date and time;

• transaction location;

• transaction status;

• authorization information;

• settlement status;

• refund information;

• reversal information;

• chargeback information;

• offer eligibility;

• offer activation;

• reward amount;

• reward status;

• redemption history;

• payout information;

• identity-verification information;

• tax information; and

• fraud and risk indicators.

Payment, financial-account, or card-linking credentials may be collected directly by Plaid, a payment processor, a payment network, a financial institution, or another service provider.

The information Hangin receives depends on the provider, the feature, and the permissions you grant.

G. Location Information

We may collect:

• a city or neighborhood you provide;

• approximate location derived from an IP address;

• location associated with a saved place;

• location associated with an event or transaction; and

• precise device location when you affirmatively enable a feature that requires it.

We may use location information to provide:

• local recommendations;

• nearby offers;

• events;

• merchant information;

• travel information; and

• other location-based features.

You can control device-location permissions through your operating-system settings. Certain features may not work without location access.

H. Device, Network, and Technical Information

We may automatically collect:

• IP address;

• browser type;

• operating system;

• device type;

• device identifiers;

• application version;

• language;

• time zone;

• network information;

• referring page;

• cookie identifiers;

• crash information;

• diagnostic information;

• authentication events;

• security logs; and

• technical-performance information.

I. Usage and Engagement Information

We may collect information about how you interact with Hangin, including:

• searches;

• requests;

• features used;

• links opened;

• recommendations viewed;

• items saved;

• messages opened;

• offers displayed;

• offers activated;

• rewards claimed;

• purchases matched;

• clicks;

• response times;

• session activity;

• feature settings;

• subscription activity;

• cancellation activity;

• support activity;

• errors; and

• performance events.

J. Information From Merchants and Partners

Merchants, brands, offer providers, payment networks, financial providers, event platforms, referral partners, and other partners may provide:

• offer eligibility;

• offer activation information;

• transaction confirmation;

• redemption status;

• purchase information;

• merchant-funded reward information;

• referral status;

• fulfillment information;

• customer-support information;

• fraud indicators; and

• dispute information.

K. Information From Other People

Another person may:

• share content with you;

• send Hangin your contact information;

• invite you to Hangin;

• refer you to an offer; or

• include you in a collaborative feature.

Do not provide Hangin with another person’s private or sensitive information unless you have permission or another lawful basis to do so.

2. How We Use Information

We may use information to:

• provide and operate the Service;

• create and manage accounts;

• authenticate users;

• respond to messages and requests;

• conduct searches;

• save and recall content;

• organize links, photos, messages, and files;

• create and maintain personalized profiles;

• provide recommendations;

• identify receipts, reservations, tickets, purchases, benefits, and offers;

• provide calendar and reminder features;

• identify qualifying transactions;

• administer offers and rewards;

• process subscriptions and payments;

• deliver payouts;

• verify identity;

• prevent fraud, abuse, and unauthorized activity;

• provide customer support;

• maintain security and reliability;

• debug and improve features;

• measure product performance;

• develop new features;

• communicate with you;

• comply with legal obligations;

• enforce our agreements; and

• protect Hangin, our users, merchants, providers, and the public.

3. AI and Automated Processing

Hangin uses artificial intelligence and machine-learning technologies to:

• understand requests;

• analyze content;

• conduct searches;

• create summaries;

• organize saved information;

• identify preferences;

• build personalized profiles;

• generate recommendations;

• match offers;

• identify relevant information in connected accounts; and

• operate other Service features.

Prompts, relevant conversation context, links, images, files, connected-account content, and other information may be processed by Hangin and third-party AI or infrastructure providers.

We may configure providers to limit retention and secondary use when those controls are supported.

AI training and product improvement

Hangin does not use the private contents of your messages, private connected email, private calendar content, or financial-account data to train generalized artificial-intelligence models without your explicit opt-in.

We may use the following to evaluate and improve Hangin:

• de-identified information;

• aggregated information;

• technical and performance information;

• feedback you intentionally provide;

• test data;

• evaluation data designed to improve reliability and safety;

• publicly available information; and

• content you separately authorize for improvement purposes.

Authorized personnel may review limited content when reasonably necessary to:

• provide customer support;

• investigate abuse or fraud;

• investigate a security incident;

• debug a technical problem;

• comply with law; or

• act with your affirmative permission.

AI-generated inferences and recommendations may be inaccurate. You may contact us to request correction or deletion of personal information associated with your profile.

4. Google API Services Data

When you connect a Google account, Hangin may request access to selected Google products, such as Gmail, Google Calendar, Google Contacts, or Google Drive.

Hangin uses information received from Google APIs only to provide or improve user-facing features that you request or enable.

Hangin may use authorized Google information to:

• locate receipts, reservations, confirmations, or tickets;

• identify relevant benefits;

• summarize information for you;

• answer a question about your account;

• display upcoming plans;

• identify scheduling conflicts;

• save relevant information;

• create a reminder; or

• perform another action you request.

Hangin does not use Google user data to:

• serve targeted or interest-based advertising;

• retarget you on third-party services;

• sell information to data brokers;

• create advertising profiles for third parties;

• determine creditworthiness;

• make lending decisions; or

• conduct surveillance.

Hangin does not transfer Google user data except:

• to provide or improve the user-facing feature you requested;

• with your affirmative consent;

• to service providers acting on our behalf and subject to appropriate restrictions;

• to investigate security, fraud, or abuse;

• to comply with applicable law; or

• as part of a permitted corporate transaction.

Hangin restricts human access to private Google user data except when:

• you affirmatively authorize access to specific information;

• access is necessary to investigate abuse, fraud, security, or a technical failure;

• access is required by law; or

• the information has been aggregated or de-identified for permitted internal operations.

Hangin’s use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You may revoke Hangin’s Google access through your Google account settings.

Revocation prevents future access but may not automatically delete information previously imported into Hangin. You may request deletion by contacting hey@hangin.so.

5. Financial Connections, Linked Cards, and Plaid

Hangin may use Plaid or another provider to:

• connect financial accounts;

• link eligible payment cards;

• verify transactions;

• process payments;

• verify identity;

• prevent fraud;

• administer offers; or

• deliver rewards.

When you use a financial connection:

• the provider may collect authentication credentials directly from you;

• the provider may access information from a financial institution with your permission;

• the provider may provide Hangin with tokenized identifiers and permissioned financial information;

• Hangin may use that information to provide the feature you selected; and

• the provider’s privacy policy and terms also apply.

Hangin may use permissioned transaction information to:

• identify a qualifying purchase;

• calculate or verify a reward;

• administer an activated offer;

• investigate suspected fraud;

• resolve a support request;

• process a payout; or

• provide another financial feature you request.

Hangin does not use connected financial information to determine creditworthiness or make lending decisions unless we introduce a separate regulated feature with its own disclosures and consent.

You may disconnect a financial account or linked card through Hangin or the applicable provider.

Disconnecting may stop future access but may not remove information that Hangin must retain for completed transactions, rewards, accounting, taxes, fraud prevention, dispute resolution, or legal compliance.

6. Billing and Subscription Information

When you purchase a subscription or paid feature, we may use payment and billing information to:

• process charges;

• administer subscriptions;

• deliver paid features;

• calculate taxes;

• prevent payment fraud;

• send receipts;

• manage renewals;

• process cancellations;

• resolve billing disputes; and

• comply with financial-recordkeeping obligations.

Complete payment-card information may be processed by a third-party payment provider rather than stored directly by Hangin.

Linking a card for reward verification does not automatically make that card the payment method for a subscription. We will request separate authorization before charging a payment method.

7. Sponsored Recommendations and Offers

Hangin may personalize sponsored recommendations or offers using information such as:

• interests and preferences you directly provide;

• your city or neighborhood;

• saved content;

• prior Hangin searches;

• offer interactions;

• reward history;

• activity within Hangin; and

• information you authorize for that purpose.

Hangin does not use the private contents of your Google email or calendar to target advertising or sponsored placements.

Brands and merchants may provide Hangin with eligibility or campaign criteria. Hangin may determine internally which users may find an offer relevant.

Unless you authorize otherwise, brands and merchants do not receive:

• your private Hangin messages;

• private connected-account content;

• complete payment-card information;

• financial-account passwords; or

• other financial credentials.

We may provide merchants and offer partners with:

• aggregated campaign reporting;

• performance information;

• anonymous, pseudonymous, or hashed identifiers;

• confirmation that an offer was activated;

• confirmation that a qualifying action occurred;

• transaction or redemption information necessary to administer an offer;

• information you direct us to share; and

• information needed for fraud prevention or legal compliance.

8. How We Disclose Information

We may disclose information to the following categories of recipients.

A. Service Providers

We may use providers for:

• cloud infrastructure;

• databases;

• storage;

• security;

• authentication;

• messaging;

• email delivery;

• artificial intelligence;

• search;

• analytics;

• customer support;

• payment processing;

• subscription management;

• financial-account connection;

• card linking;

• identity verification;

• fraud prevention;

• reward delivery;

• communications; and

• professional services.

These providers may process information on our behalf for the services they provide to Hangin.

Some providers may also process information as independent businesses under their own privacy policies.

B. Connected Services

We may send information to a connected service when necessary to perform an action you request, such as creating a calendar event or saving information to an authorized account.

C. Merchants, Brands, and Offer Partners

We may disclose limited information necessary to:

• determine offer eligibility;

• attribute a transaction;

• administer an offer;

• fulfill a reward;

• investigate fraud;

• deliver a purchased product or service; or

• provide support.

D. At Your Direction

We may disclose information when:

• you ask us to share it;

• you use a feature that clearly involves sharing;

• you invite another person;

• you authorize another person or service to receive it; or

• you make content publicly available.

E. Legal, Safety, and Security Reasons

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with law, regulation, subpoena, court order, or legal process;

• enforce our agreements;

• prevent fraud, abuse, or security incidents;

• investigate unlawful activity;

• protect rights, property, or safety; or

• respond to an emergency.

F. Corporate Transactions

Information may be disclosed or transferred in connection with:

• financing;

• merger;

• acquisition;

• reorganization;

• bankruptcy;

• sale of assets; or

• another corporate transaction.

Any successor will remain subject to applicable legal obligations concerning the information.

G. Aggregated or De-identified Information

We may disclose information that has been aggregated or de-identified so that it does not reasonably identify you.

9. Sale and Sharing of Personal Information

Hangin does not sell personal information for money.

Hangin does not sell:

• private messages;

• private connected-email content;

• private calendar content;

• private uploaded photos;

• financial-account information; or

• payment-card information.

Hangin does not currently share personal information for cross-context behavioral advertising as that term is defined under applicable California law.

Personalized sponsored recommendations delivered within Hangin may use information collected through Hangin. Brands generally provide targeting or eligibility criteria while Hangin performs user selection internally.

If our practices change in a way that creates a legal right to opt out, we will update this Privacy Policy and provide the required controls.

10. Sensitive Personal Information

Depending on the features you use, Hangin may process information considered sensitive under applicable law, such as:

• financial-account information;

• transaction information;

• payment information;

• precise location;

• account credentials;

• government identification information submitted through a secure verification flow; and

• information contained in private communications.

We use sensitive information only as reasonably necessary to:

• provide requested features;

• verify identity;

• process payments or rewards;

• maintain account security;

• detect fraud;

• comply with law; or

• perform another purpose disclosed at collection.

We do not use sensitive personal information to infer personal characteristics for unrelated advertising purposes.

11. Cookies and Similar Technologies

Hangin may use cookies, pixels, local storage, software-development kits, and similar technologies to:

• keep you signed in;

• operate the Service;

• remember settings;

• maintain security;

• prevent fraud;

• understand usage;

• measure performance;

• diagnose errors; and

• improve features.

You may control certain technologies through your browser or device settings. Disabling them may affect Service functionality.

We will honor legally recognized opt-out preference signals when they apply to our practices.

12. Data Retention

We retain information for as long as reasonably necessary to:

• provide the Service;

• maintain your account;

• preserve saved items;

• fulfill rewards;

• complete transactions;

• administer subscriptions;

• prevent fraud;

• comply with financial, accounting, tax, and legal obligations;

• resolve disputes; and

• enforce agreements.

Conversation history, saved items, preferences, and connected-account information may be retained for the life of your account unless you delete them earlier.

When you delete your account or submit an eligible deletion request, we generally begin deleting or de-identifying eligible account information within 30 days.

Information may remain in encrypted or access-restricted backups for up to 90 additional days before being overwritten through ordinary backup cycles.

We may retain limited information for longer when necessary for:

• completed transactions;

• payment records;

• tax reporting;

• fraud prevention;

• security investigations;

• legal holds;

• disputes;

• enforcement;

• regulatory compliance; or

• demonstrating that an opt-out request was honored.

Aggregated or properly de-identified information may be retained without the same limitations.

Disconnecting an integration stops future access but does not necessarily delete previously imported information. You may separately request deletion.

13. Security

Hangin uses administrative, technical, and organizational safeguards designed to protect information.

Safeguards may include:

• encryption in transit;

• encryption at rest where appropriate;

• access controls;

• authentication measures;

• monitoring;

• logging;

• vendor reviews;

• data minimization;

• restricted personnel access; and

• security-response procedures.

No system is completely secure. We cannot guarantee that unauthorized access, loss, misuse, alteration, or disclosure will never occur.

You are responsible for protecting:

• your devices;

• your messaging account;

• your email account;

• passwords;

• authentication codes; and

• verification links.

14. Your Choices and Controls

Depending on available features, you may:

• update profile information;

• correct preferences;

• delete saved items;

• delete conversations;

• disconnect integrations;

• revoke Google permissions;

• disconnect financial accounts;

• unlink eligible payment cards;

• control device-location access;

• manage communications;

• opt out of eligible text messages;

• control browser cookies;

• cancel subscriptions; and

• request access, correction, export, or deletion.

Revoking access or deleting information may cause certain features to stop working.

15. Privacy Rights

Depending on where you live, you may have the right to:

• know what personal information we collect;

• access personal information;

• obtain a portable copy;

• correct inaccurate information;

• delete information;

• restrict certain processing;

• object to certain processing;

• withdraw consent;

• opt out of certain sales, sharing, targeted advertising, or profiling; and

• appeal a decision concerning a privacy request.

We may need to verify your identity before completing a request.

We may deny or limit a request where permitted by law, including when information must be retained for:

• security;

• fraud prevention;

• completed transactions;

• financial records;

• taxes;

• legal obligations;

• disputes; or

• another person’s rights.

Authorized agents may submit requests where permitted by law, subject to identity and authorization verification.

We will not unlawfully discriminate against you for exercising privacy rights.

Privacy requests may be submitted to hey@hangin.so.

16. California Privacy Information

California residents may have rights under the California Consumer Privacy Act and California Privacy Rights Act.

The categories of personal information we may collect include:

• identifiers;

• customer-record information;

• commercial information;

• internet or electronic-network activity;

• geolocation information;

• audio, electronic, visual, or similar information;

• professional information when provided;

• sensitive personal information; and

• inferences.

We may collect these categories from:

• you;

• your devices;

• connected services;

• financial providers;

• payment providers;

• merchants;

• brands;

• business partners; and

• publicly available sources.

We use and disclose these categories for the business and commercial purposes described in this Privacy Policy.

Hangin does not currently sell personal information or share it for cross-context behavioral advertising.

17. Communications

We may send service-related communications, including:

• responses;

• security alerts;

• authentication messages;

• connected-account notifications;

• reminders;

• reward updates;

• payment information;

• subscription information; and

• transaction confirmations.

You may not be able to opt out of essential account, security, billing, or transactional communications while maintaining an active account.

Marketing emails and text messages will include applicable opt-out instructions.

Opting out of marketing will not necessarily stop:

• messages you request;

• responses to your requests;

• essential account messages; or

• transactional messages necessary to provide the Service.

18. Children and Age Restrictions

Hangin is intended only for individuals who are at least 18 years old.

We do not knowingly permit individuals under 18 to create or use a Hangin account.

If we learn that we collected personal information from a person under 18 in violation of this policy, we may close the account and delete the information, subject to applicable legal-retention obligations.

A parent or guardian who believes a minor has provided information may contact hey@hangin.so.

19. International Data Processing

Hangin is based in the United States.

Information may be stored and processed in the United States and in other countries where our service providers operate.

Those countries may have privacy laws different from the laws where you live.

Where required, we will use legally recognized safeguards for international data transfers.

The Service is currently intended primarily for users located in the United States.

20. Third-Party Services

This Privacy Policy does not govern independent third-party services, including:

• websites;

• merchants;

• brands;

• social platforms;

• messaging providers;

• wireless carriers;

• financial institutions;

• Plaid;

• payment processors;

• payment networks;

• Apple;

• Google; or

• other connected services.

Review their privacy policies before providing information or connecting an account.

21. Changes to This Privacy Policy

We may update this Privacy Policy as Hangin and its features evolve.

We will update the effective date when changes are made.

For material changes, we may provide notice through:

• the Service;

• email;

• text or another message;

• an account notification; or

• another reasonable method.

Where required, we will obtain renewed consent before using previously collected information for a materially different purpose.

22. Contact Us

Questions, privacy requests, or complaints may be sent to:

Hangin, Inc. 115 Grand Street New York, New York Website: hangin.so Email: hey@hangin.so