Privacy Policy
Last updated: 2026-08-22
Overview
Happyyou LLC ("we") operates the happyyou mobile application and website (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use the Service.
Our commitment: we never sell user data, we do not serve targeted advertising, and Q&A content is strictly private.
Information We Collect
Account Information
- Username (3-32 characters, lowercase letters, digits, underscores)
- Encrypted password (bcrypt hash, never stored in plain text)
- Optional: display name, city, bio (creators only)
Location Data
With your permission, we collect your approximate location (latitude and longitude) to show nearby places. You may decline, in which case the default city (New York) is used.
Content You Create
- Reviews: text + rating + photos (optional)
- Questions to creators: text (private, visible only to you and the creator)
- Creator insights: opinions about places (public after review)
Payment Information
Processed by Stripe (PCI DSS compliant). We do not store your credit card number, CVV, or expiration date. Stripe provides us only with:
- Payment intent ID
- Last 4 digits of the payment method
- Transaction status
Data Sharing
Public Information
Your username, reviews, and ratings are publicly displayed on place pages.
Q&A Privacy (Important!)
Questions and answers are 100% private, visible only to the person who asked and the creator. We never sell or share Q&A content with third parties.
Service Providers
We share data with the following providers:
- Stripe (payment processing)
- Cloudflare (CDN + security)
- AWS (server hosting)
Legal Requirements
We may disclose data when required by law or to protect the safety of our users.
Data Retention
| Data type | Retention period |
|---|---|
| Account information | For the life of the account, and up to 30 days after a deletion request |
| Reviews | Until you delete them |
| Q&A history | 12 months (for dispute handling), then anonymized |
| Payment records | 7 years (tax/legal requirements) |
| Server logs | 30 days |
Your Rights (GDPR / CCPA)
You have the right to:
- Access: obtain a copy of your personal data
- Correction: correct inaccurate data
- Deletion: delete your account
- Export: export your reviews and data
- Restrict processing: temporarily limit how we use your data
- Object: opt out of certain processing
To exercise these rights, please contact [email protected]
Security Measures
- TLS/HTTPS encryption throughout (Cloudflare + Caddy)
- Bcrypt password hashing (10 rounds)
- JWT authentication (valid for 7 days)
- PostgreSQL + PostGIS for geospatial data
- API rate limiting
- Stripe Connect creator payouts (PCI compliant)
Contact Us
If you have any questions, please contact:
This Privacy Policy is maintained by Happyyou LLC · 2026-08-22