Privacy policy
Short version: Hampi keeps what you tap, not who you are. We never store your location, we don't sell anything, and there are no advertising trackers.
Who is responsible
Hampi is run by Krzysztof Szczepańczyk (Kraków, Poland) — the controller of your data under the GDPR. Contact: hello@hampi.app, or the “Send feedback” form in the app.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| A random ID created in your browser, plus a session ID | To tell sessions apart and see whether people come back | Legitimate interest (Art. 6(1)(f) GDPR) in improving the app |
| What you do in the app — places shown, skipped, saved and chosen; the mood, distance, budget and filters you picked; time of day, weather, whether GPS was on; the link you came from (e.g. a hostel or student group) | To make the next recommendation better and to find out which recommendations people actually act on | Legitimate interest (Art. 6(1)(f)) |
| Messages you send us — feedback, “something off?” reports, survey answers, places you suggest, and a contact handle if you choose to leave one | To fix wrong information and reply to you | Legitimate interest (Art. 6(1)(f)); your contact handle only if you give it |
| Your e-mail — only if you create an account | To send you a sign-in link and keep your saved places across devices | Performing the service you asked for (Art. 6(1)(b)) |
What we never collect
- Your coordinates. Your phone's location is used inside your browser to work out distances. Only the distance to a place is ever sent, never where you are.
- Your name, photos or contacts.
- Anything for advertising. We don't sell or share data for marketing.
What stays on your phone
Your saved places, level, swipe history and settings are kept in your browser's local storage, together with messages waiting to be sent. Nothing there is readable by other websites. Hampi doesn't use cookies. “Erase everything from this device” on the “What we collect” screen deletes all of it and gives you a fresh random ID.
Who helps us run Hampi
- Netlify (hosting and the feedback form) — servers may be outside the EU; transfers are covered by the EU Standard Contractual Clauses.
- Supabase (database for usage events and accounts) — hosted in the EU (Ireland).
- Google Maps Platform — your browser loads place photos directly from Google, so Google receives your IP address, as with any website loading Google content. See Google's privacy policy.
- Open-Meteo — weather for the centre of Kraków. Your location is not sent.
- jsDelivr — delivers the database library to your browser if you sign in.
How long we keep it
- Usage events: up to 24 months, then deleted or aggregated.
- Messages and reports: until handled, at most 12 months.
- Account: until you delete it or ask us to.
Your rights
You can ask us to access, correct, delete, restrict or export your data, and you can object to processing based on legitimate interest. Write to us using the contact above; if you used the app without an account, include the ID shown on the “What we collect” screen so we can find your data. You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
Age
Hampi is meant for people aged 16 and over.
Changes
If this policy changes, we'll update the date at the top. If it's a significant change, the app will tell you.