Welcome to HeyyThere!
If you are reading this, you are probably wondering about the use of your personal data. This document will get a little long, so to save you some time and effort, here is the quick user friendly and digestible version of it!
We are consumers too and we hate it when companies abuse and sell our data. Therefore, we give you our word that we will do our best effort to protect your privacy and only use the data that is necessary to give you a good experience on the app HeyyThere.
We also want to be completely transparent about the data that we use. Here is a summary, we hope you enjoy the clarity:
- your name, phone number : to create your account
- device type, device identifier: to deliver push notifications and account protection
- (optional) profile picture : to customize your account
- contacts: we do not store your contact list. When you invite a contact to join you and allocate a slot for this person, we create a temporary inactive account with this contact's name and phone number. This is to allow this contact to claim his account when he joins you, and claimthe content you have sent to him.
- analytics: we use light analytics tied to your account: date of last login and the alerts you send to your contacts.
- anonymous analytics: we use third party trackers like Google Analytics. These are to understand general usage of features, and are anonymous, they are not tied to your account.
We will only use the data needed to typically let you manage your account like on every other app, and to deliver the services and features that make using HeyyThere so fun!
You may edit, delete and request a copy of all your data at any moment, as long as this does not expose other user's privacy.
1. Scope and Application
Personal Data is defined as any information relating to a natural person who can be identified, directly or indirectly. It is for example: the name, first name, email and postal address of a physical person, his image on a photograph or a video, an IP address, a location data, etc.
Details On The Personal Data Collected and Processed
HeyyThere collects two types of data:
Profile Data: This is the Data that you are voluntarily entering in order to pursue the creation of your account. This data may be but is not limited to your phone number, first or last name, date of birth, username, and password. You can also fill in optional Data: your biography, email address, profile picture. Communications with HeyyThere : When you report a problem with the Platform (inappropriate content, bugs, errors), respond to a survey about the quality of our Services, request assistance, or make a request to exercise your rights, we record the information you agree to share with us or that we need to respond to your request.
Connection Data: date of registration, date of your last connection;
Data about how you interact with other Users: the number of friends and invitations, the number of messages you send to your friends, the friends with whom you interact the most;
Data about how you use our Services, including use of a profile picture, time of posting.
Phonebook Data: With your consent, HeyyThere may access your phone book to identify your contacts already registered on HeyyThere or so that you can invite your friends to register on the Platform. We never access your contact list without your permission.
Control Over Your Information
We want you to be in control of your information. You can access and edit most of your basic account information right in our apps. You can also request to obtain a copy of information at any moment. Because your privacy is important to us, we will ask you to verify your identity or provide additional information before we let you access or update information that is not directly manageable through your account. We may also reject your request to access or update your personal information for a number of reasons, including, for example, if the request risks the privacy of other users or is unlawful.
If for some reason you ever want to completely delete all records of your account and activity, please send a request by email. Because your privacy is important to us, we will ask you to verify your identity or provide additional information before we delete your personal information. We may also reject your request to delete your personal information for a number of reasons, including, for example, if the request risks the privacy of other users or is unlawful.
Information About Users Located In the USA
This clause is only valid and legally binding if you are a party to the HeyyThere Terms of Service. This clause regarding U.S. users, including California and Virginia residents, applies to Personal Information (as defined in applicable regulations) provided to HeyyThere by the User.
In light of the California Consumer Privacy Protection Act of 2018 (“CCPA”), we are providing this information to you as a service provider required to process your Personal Information (as defined in the applicable law), to confirm that we have adequate contractual terms in place. The term “applicable law” refers to all laws, regulations, standards, regulatory guidance and self-regulatory guidelines that may apply in relation to the management of your Data. Applicable laws include, but are not limited to, the California Consumer Privacy Protection Act (Cal. Civ. Code §1798.100 - 1798.199), or the Virginia Consumer Data Protection Act (SB 1392).
As a service provider, we will collect, hold, use, disclose and process your personal information only to fulfill our obligations to you under our agreement, for operational purposes previously stated in this Policy, to the exclusion of any other purpose.
We will not sell your personal information or disclose your personal information for commercial purposes.
International Data Transfers
We may collect your personal information from, transfer it to, and store and process it in the United States and other countries outside of where you live. Where applicable, we use standard contractual clauses and/or other mechanisms approved by the European Commission to maintain a level of protection for your Personal Data equivalent to that guaranteed by the GDPR.
EEA and UK Privacy Notice
Users in the European Economic Area (EEA) and the United Kingdom (UK) have certain privacy rights as specified under EU and UK law, including the General Data Protection Regulations (GDPR) and UK Data Protection Act 2018. Our Privacy Principles and the privacy controls we offer to all users are in line with these laws—this notice makes sure we cover the EEA and UK-specific requirements. For example, all users can request a copy of their data, request deletion, and control their privacy settings in the app.
Your country only allows us to use your personal information when certain conditions apply. These conditions are called “legal bases” and the uses are described in the paragraph above called " Details On The Personal Data Collected and Processed ".
We process the above-described Data in accordance with the requirements of the GDPR for various purposes on the bases of:
Contract performance where the processing enables HeyyThere to provide the Services as described in the Terms of Service. This includes: Access to the Platform and related services (profile visibility, transmission of notifications and messages, and shared content, communications with friends);
The proper functioning of Users' accounts;
Notifications that are triggered by a friend or relative of the User;
Notification of changes to our services;
User support services;
Administration of the Platform, repair and correction of bugs, updates;
The provision of services for sharing User Content and interacting with other Users;
Our legitimate interests where the processing allows us to provide you with an efficient and dynamic Platform. This includes:
Monitoring User Content, messages and notifications and associated metadata for administrative purposes and to verify their compliance with our Terms of Service;
Verifying the compatibility of the content presentation methods with respect to the type of device used;
The understanding of the modalities of use of the Platform by the Users for the purposes of improvement, development and commercial promotion of the Application;
Verifying the stability and security of the Platform;
Identifying criminal activities, fraudulent behavior, misuse of the Platform;
Sending surveys and requesting feedback in order to improve the Services offered.
Compliance with our legal obligations where the processing of Data is aimed at preventing and combating abusive, fraudulent, and illegal activities.
In case of refusal of cookies, objection to those stored by default, or deletion of the cookies, the User is informed that he can no longer benefit from a number of features that are nevertheless necessary to navigate in some areas of the Platform. Where appropriate, HeyyThere disclaims any responsibility for the consequences related to the degraded operation of its Services resulting from the inability of HeyyThere to record or view the cookies necessary for the proper functioning of the Platform and that you have refused or deleted.
HeyyThere may uses the following cookies and trackers:
On the Application:
Cookies that are necessary for you to use the Services, such as allowing you to stay logged into your account;
Cookies analyzing your use of the Application to generate statistical reports, without identifying you: (Google Analytics, Amplitude)
Cookies necessary for the proper and efficient operation of the Application, for example by saving your user preferences.
On the website www.heyythere.com: cookies analyzing your use of the website to generate statistical reports, without identifying you: Google Analytics
You have the right to object to our use of your information. With many types of data, we've provided you with the ability to simply delete it if you don't want us processing it anymore. For other types of data, we’ve given you the ability to stop the use of your data by disabling the feature altogether. You can do these things in the app. If there are other types of information you don't agree with us processing, you can contact us at heyy / at / heyythere.com.
Security of Personal Data
Respect of the rights of the Platform Users
You have certain rights regarding your Personal Data, as follows:
Right of access: it allows you to access free of charge the Personal Data collected about you.
Right of rectification: it allows you to update or correct the accuracy of your Data. You can exercise this right directly from your account settings.
Right of deletion: it can be exercised when the processing of Personal Data is no longer necessary for the purposes for which they were collected or, if applicable, when you withdraw your consent to the processing.
Right to object to the collection and processing of all or part of your Personal Data: this right is not absolute and applies only to Personal Data collected for commercial prospecting purposes, including profiling when it is linked to commercial prospecting activities. When you choose to object to such processing we ask you to indicate the reasons for your objection so that we can balance our legitimate interests against your request.
Right to limit the processing of Personal Data. This right is not absolute, and can only be applied when:
- a request for rectification has been made under the right of rectification described above. You may then request that the processing of your Personal Data be stopped for the time necessary to verify the accuracy of the requested rectification.
- you wish to object to the deletion of your Personal Data whose processing was unlawful;
- HeyyThere no longer needs the Personal Data in accordance with the purposes of processing but they are still necessary for the establishment, exercise or defense of legal claims;
- You wish to exercise your right to object as described above. You may then request that the processing of your Personal Data be stopped for the time necessary to balance our legitimate interests against your request.
Our services are not intended for — and we don't direct them to — anyone under 13. And that's why we do not knowingly collect personal information from anyone under 13. In addition, we may limit how we collect, use, and store some of the information of EEA and UK users between 13 and 16. In some cases, this means we will be unable to provide certain functionality to these users. If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent's consent before we collect and use that information.