Hopli Privacy Policy

Here we tell you what data Hopli uses, what for, who we share it with, how long we keep it, and how you can access, correct or delete it. It is also our personal data processing policy under Law 1581 of 2012 of Colombia.

Version 1 · Effective from: [pending publication]

In short

• We don't sell your data, there are no ads, and we don't track you across apps.
• The history of places you pass through never leaves your phone. Sharing your location with the group is optional, approximate and temporary.
• Sensitive data is optional (health-related food needs, allergies, mobility, accessibility, LGBTQ interest). We only use it if you give us permission, and Hopli works without it.
• Rumbo is an artificial intelligence from Anthropic. What you write to it is processed in the United States, is not used to train its models, and the conversation deletes itself 30 days after your last message.
• Files you upload to import a trip or read a receipt are not stored.
• You can delete your account whenever you want: instantly from the app or, without the app, by requesting it at hopli.app/en/delete-account.
• For anything about your data: privacidad@hopli.app.

1. Who is responsible for your data

• Controller: [pending] ([pending])
• Address: [pending]
• Email for your data: privacidad@hopli.app
• Phone: [pending]

The controller also handles your questions and complaints about personal data, at that email.

2. What data we use and what for

We don't ask for your ID number, your address or your card details. If Hopli Pro ever charges, Apple or Google handles the payment and we don't see your card details.

3. Sensitive data

Health-related food needs, allergies, mobility, accessibility, LGBTQ interest and anything you write in the needs note are sensitive data.

• They are optional. You don't have to provide them and Hopli works without them.
• We only use them if you check them after reading the notice we show you at that moment. We store that permission with its version and date.
• We use them for one thing only: making what Rumbo proposes work (for example, gluten-free restaurants or places with ramps). That's why we send them to Rumbo's artificial intelligence together with your trip.
• On a group trip, only if you give that trip's permission, your food, mobility and accessibility needs are also taken into account when another person in the group plans with Rumbo. They go without saying whose they are (for example, "someone in the group doesn't eat gluten"). You can withdraw that permission on the trip.
• We never infer them from your use or send them to error logs.
• You can remove or change them whenever you want in the app.

If you add a companion's needs, make sure that person agrees.

4. Location

• On your phone: if you give permission, Hopli uses your location for the live day: what's next, when to leave and notifications when you arrive at the stops of your day (also in the background, for those notifications). If you share your location with your group and turn on "Hotel alerts", we let them know when you arrive at or leave your lodging. Your location history stays on your phone.
• Routes from "here": if you ask for a route from where you are, we send that point to Google to calculate it. We don't store it.
• Rumbo during the trip: when you write to Rumbo, we send your approximate point (about 110 meters) so it can search near you and tell you how far each thing is. It is used only to answer that message and we don't store it.
• Sharing with your group (optional): you choose with whom and until when (one hour, the rest of the day, or until you meet up). We send an approximate point (about 11 meters) that lives only in the server's memory, for 24 hours at most, and only the people you chose can see it. While you share, they may also get notifications such as "left the hotel", "arrived" or "running late". You can pause it whenever you want.
• You can remove the location permission in your phone's settings. Hopli keeps working: you type the place by hand.

5. Rumbo and artificial intelligence

• Rumbo runs on Claude, from Anthropic, in the United States. Before your first conversation we show you a notice and ask you to accept it.

• We send Anthropic what's needed to answer you:

  • your messages;
  • your trip (destinations, dates, stops, lodging);
  • your preferences (including the sensitive ones you've checked);
  • your companions' names or nicknames and their needs;
  • spending totals;
  • your approximate point and distances (see section 4).

  On a group trip we also send, without saying whose they are, the food, mobility and accessibility needs of those who gave permission, a summary of the group's budget and the open votes. When you import a file or read a receipt, we send that file to it.

• To learn your tastes, once a day we send Anthropic your activity with Rumbo: which proposals you accepted or rejected, with no sensitive data.

• Anthropic does not use that data to train its models. It keeps it for up to 30 days to operate the service, or up to 2 years if a message is flagged for violating its usage policy.

• Rumbo proposes and you decide. It doesn't make decisions for you with legal or similar effects: nothing enters your trip unless you confirm it.

• You can delete your conversations in You → Delete my chats.

6. Who we share your data with

With the people you choose. The people on your trip see the trip according to their role: your name, the stops you didn't mark as private, your arrivals and departures, the group's expenses, the votes and, if you show them, your payment details (only the people who owe you). They only see your location if you share it. They don't see your personal budget or your preferences; Rumbo may use them for the group without saying whose they are (see section 3).

With our providers, who process the data on our behalf and only to provide their service to us:

Google processes Google Maps data under its Privacy Policy.

With authorities, only if the law requires it and with a valid order.

We never sell your data, share it for advertising or hand it over to data brokers.

7. Data outside your country

Our providers store and process data mainly in the United States. By accepting this policy you authorize that transfer. We choose providers with data processing agreements that protect your information with safeguards similar to those in your country. In the European Union, the United Kingdom and Switzerland we use standard contractual clauses or the data privacy framework with the United States (see section 14).

8. How long we keep your data

The retention period for each piece of data is in the table in section 2. In addition:

• When you delete your account, everything of yours is deleted instantly: account, preferences, what was learned, conversations, permissions, notifications and trips where you are the only member. Group trips you created are handed over to another member or deleted for everyone (the app asks you). In group trips, the expenses you paid are deleted and your share of expenses paid by others goes to whoever paid, so everyone else's accounts add up. Stops you added to other people's trips are left without your name.
• We keep only the record that you deleted your account (with no data about you, just an identifier and the date) for 90 days, to finish the deletion in all systems and to answer if anyone asks.
• Database backups replace themselves: within 30 days at most, nothing of yours is left in them.

9. Your rights

You can, at any time and at no cost:

• know what data of yours we have and ask for a copy;
• correct or update it (you change almost everything yourself in the app);
• delete it (or delete your entire account from the app);
• withdraw a permission (sensitive data, location, Rumbo notice, notifications), without affecting what we did with it before;
• ask for proof of the permission you gave us and learn how we use your data;
• file a complaint with the data authority of your country (Colombia's Superintendence of Industry and Commerce (SIC), after writing to us first).

How: write to privacidad@hopli.app from your account's email (or tell us which one it is) and let us know what you need. We'll reply with a case number:

• inquiries: within 10 business days at most (if we can't make it, we'll let you know and reply within 5 more business days);
• claims (correcting, deleting, complaints): within 15 business days at most (if we can't make it, we'll let you know and reply within 8 more business days).

If the law of your country gives you more rights or shorter deadlines, we apply those (see section 14).

10. How we protect your data

Encrypted connections, per-person access permissions in the database (everyone sees only their own data and that of their trips), technical logs without personal data, backups and automatic deletions according to the periods above. No system is infallible: if something happens that affects your data, we'll tell you and notify the authority within the deadlines set by law.

11. Minors

Hopli is only for people over 18. We don't knowingly collect data from minors. If a companion without an account is a minor, we only store a label and their age range; their food or mobility needs are added by a responsible adult and are deleted 31 days after the trip. If you believe a minor created an account, write to us and we'll delete it.

12. The hopli.app website

hopli.app doesn't use cookies, analytics or third-party scripts. If you write to us by email, we use your message only to reply to you.

13. Changes to this policy

If we change something important (for example, a new type of data, a new use or a new provider), we'll tell you in the app before it takes effect and, if needed, ask for a new permission. Each version is kept with its date.

14. If you live in…

European Union, European Economic Area, United Kingdom or Switzerland

• Legal bases:
  • our contract with you (account, trips, group, sync, Hopli Pro);
  • your consent (sensitive data, location, Rumbo, files, notifications);
  • our legitimate interest (security, preventing abuse, usage limits, technical errors);
  • legal obligations.
• You also have the right to portability (receiving your data in a readable format), to object to processing based on legitimate interest and to restrict processing. We reply within one month.
• To send data to the United States we use the European Commission's standard contractual clauses or each provider's EU-US data privacy framework.
• Our representative in the EU and the UK is: [pending].
• You can complain to your country's data protection authority.

United States

• We don't sell or "share" your data for targeted advertising, and we don't use sensitive data to infer characteristics about you.
• Consumer health data (for example, in Washington and Nevada): health-related diet, allergies, mobility and accessibility may count as health data.
  • We collect them only from you and with your permission, and only to suggest plans that work for you.
  • We share them only with the providers in section 6 (Anthropic for Rumbo and our servers) and, without saying whose they are, with your group's plan if you give that permission. We never sell them, and you can view them, delete them and withdraw your permission at any time.
• You can exercise your rights by writing to privacidad@hopli.app. We don't treat you differently for doing so.

Brazil

We process your data under the LGPD, with the legal bases listed in the EU section. You can ask for confirmation, access, correction, anonymization, portability, deletion and information about who we share with, and complain to the ANPD.

Mexico

You can exercise your rights of access, rectification, cancellation and objection (ARCO) at privacidad@hopli.app. Your sensitive data is only processed with your express consent.

Argentina

You can exercise your rights of access (every six months at no cost, unless there is a legitimate interest), rectification, updating and deletion. Argentina's Agency for Access to Public Information (AAIP), the supervisory body of Law 25,326, handles complaints and claims from people whose rights over personal data are affected.