Privacy Policy
Huddle
This Privacy Policy explains what information Huddle (operated by Erebos Lab) collects, how it is used, who it is shared with, and the choices you have. By using Huddle you agree to the practices described here.
Data-safety summary
At a glance, here is the data the app collects, whether it is linked to your identity, and whether it is used to track you across other companies’ apps and websites.
| Data category | Linked to you | Used for tracking | Purpose |
|---|---|---|---|
| Contact Info | Yes | No | Create and secure your account and identify you to your team. Session tokens are kept in the device secure store. |
| User Content | Yes | No | Deliver and store your conversations. Message content lives on the Matrix homeserver you connect to (self-hostable). |
| Contacts | Yes | No | Find contacts already using Huddle. Your raw phone numbers and emails are hashed on your device and never uploaded or stored in the clear. |
| Camera & Microphone | Yes | No | Real-time voice and video calls (huddles). Call media streams through LiveKit/WebRTC and is not stored by the app. |
| Social & Engagement | Yes | No | Operate the optional social and engagement features. |
| Identifiers & Diagnostics | No | No | Deliver notifications and keep the app working. No advertising identifiers are collected. |
| Purchases | Yes | No | Manage the optional Pro subscription. This feature is disabled unless configured; billing runs through Apple/Google via RevenueCat. |
What we collect
Contact Info
- Account name, @handle, display name, and avatar
- Matrix login credentials and session tokens (stored in your device keychain)
Create and secure your account and identify you to your team. Session tokens are kept in the device secure store.
User Content
- Messages, threads, and voice messages
- Photos, videos, and file attachments you send
Deliver and store your conversations. Message content lives on the Matrix homeserver you connect to (self-hostable).
Contacts
- SHA-256 hashes of contacts (only if you enable friend discovery)
Find contacts already using Huddle. Your raw phone numbers and emails are hashed on your device and never uploaded or stored in the clear.
Camera & Microphone
- Live audio and video during calls
Real-time voice and video calls (huddles). Call media streams through LiveKit/WebRTC and is not stored by the app.
Social & Engagement
- Friend graph and blocks
- XP, levels, streaks, quests, badges, events, and RSVPs
Operate the optional social and engagement features.
Identifiers & Diagnostics
- Device model and OS version
- Push notification token
Deliver notifications and keep the app working. No advertising identifiers are collected.
Purchases
- Subscription state for the optional “Huddle Pro” upgrade
Manage the optional Pro subscription. This feature is disabled unless configured; billing runs through Apple/Google via RevenueCat.
What we do NOT do
- We do not use tracking; the app declares no tracking and lists no tracking domains.
- Raw contacts never leave your device — only salted hashes are used for discovery.
- No third-party advertising or analytics SDKs are used.
Third parties who process your data
We share data only with the processors below, each bound to use it only to provide their service to us. Items marked "unverified" are placeholders we must confirm and name before this policy is treated as final.
- Matrix homeserver — Chat backend that stores your messages and media (self-hostable; a public homeserver is the default until you configure your own)
- LiveKit — Real-time voice/video call transport (self-hostable)
- Supabase — Friends graph, hashed contact index, and engagement data (self-hostable)
- Expo Push / Sygnal gateway — Push notification delivery via Apple (APNs) and Google (FCM)
- RevenueCat — Optional “Huddle Pro” subscription billing (disabled by default)
How we use your information
- Operate and personalize the app and its core features.
- Maintain your account, authenticate sessions, and provide support.
- Process payments and manage subscriptions/entitlements.
- Keep the service secure and prevent fraud and abuse.
- Comply with legal obligations and enforce our Terms of Service.
- Improve the product through aggregated, de-identified analytics.
Data retention
We keep personal information only as long as needed to provide the service. Account data is retained while your account is active and for a short recovery window after deletion, then deleted or anonymized. Billing records are retained as required by tax and accounting law. Backups are purged on a rolling basis.
Your rights and choices
Depending on your jurisdiction you may access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent. You can delete your account and its server-side data from within the app, or by emailing us. We respond within 30 days.
Children’s privacy
The app is not directed to children under 13 (under 16 in the EEA/UK) and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Security
We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, hashed passwords, least-privilege access, and audit logging. No system is 100% secure; please use a strong, unique password.
Changes to this policy
We may update this policy. Material changes will be reflected by a new "Last updated" date and, where required, announced in the app.
Contact
Privacy questions? Email caelum0x42@gmail.com.