Privacy policy

Last updated 10 November 2026

Who we are

This policy is from Driftwood Labs Pty Ltd (ACN 703 905 293, ABN 27 703 905 293), Victoria, Australia ("we", "us"). It covers the Hangxiety Society app and this website. Hangxiety Society is only for adults of legal drinking age where they live (18 and over, or 21 and over in the United States). It is not for children or anyone under that age, and we don't knowingly collect information about them.

What stays on your phone

Everything you put into Hangxiety Society is stored on your phone, not with us:

• your name, character and settings;
• your crew (the people you've linked with) and anyone you've blocked;
• your seshes: the plan and stops, who's in, home safe check-ins, bumps, how people are feeling, cups, gaps, funny moments, BOG votes, IOUs, messages and "We good?" stamps;
• Mems, your past seshes;
• the private key your phone uses to unlock updates meant for you. The app never sends it anywhere.

We don't have a copy, so we can't see it, back it up or get it back for you. If your iPhone backs up to iCloud or a computer, that backup includes the app's data, under your own Apple account.

What travels between phones

To reach the people in your sesh, every update is locked (encrypted) on your phone so only they can unlock it. It then passes through a small postbox service we run on Cloudflare.

• The postbox only holds locked data. We don't have the keys and can't read it. It can see only random addresses, when each update arrived and how big it is.
• Messages to your inbox are deleted as soon as your phone collects them. Anything left is wiped 7 days after the last message arrived.
• A sesh's shared updates are wiped 3 days after the sesh was last updated.
• Share codes (like HX-7KQ2-M9PD) are never stored as the code itself, only as a scrambled version, and are wiped after 48 hours.
• A link code or QR (the long kind that starts HX2:) goes wherever you send it. It carries your name, your character and its look, your phone's public key and a random inbox address. Only share it with people you want to link with.

Cloudflare handles technical information such as your IP address to deliver the traffic. We don't keep logs of it or use it to identify you. See cloudflare.com/privacypolicy.

Let people find me (optional: on at the start, off whenever you like)

"Let people find me" lets mates who search your name find you and ask to connect. It starts switched on: the welcome screen shows the switch, and nothing is listed until you tap Let's go with it still on. You can turn it off there, or any time in Settings. While it's on, our postbox lists your name card, which anyone who searches your name can see:

• your name, your character and its look, and a random 4-digit tag (like Sam Jones #4821) made once on your phone so people with the same name can be told apart. The tag says nothing about you;
• the month you turned it on (for example "Joined Oct 2026");
• your area (the suburb or town you type, never your street or location) and your usual spot (in your own words), but only if you switch each one on. Both are off until you do;
• your phone's public key and a random inbox address, so a request to connect can reach you locked.

Search matches names only, never your area or usual spot, and shows at most 10 people. Nobody can list everyone. Asking to connect sends your card, locked, to that person's phone; nothing is shared until they say yes, and then you swap cards the same way as linking by QR. Saying no sends nothing. You can report or block anyone you find or who asks. The postbox limits how many searches a phone can make each minute, using its IP address in memory only; it isn't stored.

Turn an extra off and it's deleted from your listing straight away. Turn "Let people find me" off (or reset the app) and your whole listing is deleted. A listing that hasn't been refreshed by your phone for 30 days drops out by itself.

Address search and maps

When you search for a place (a stop under "On the move", or a sesh's Where), the app uses Apple's place search on your iPhone, the same search as Apple Maps. The words you type go from your phone to Apple, along with your rough area if you've allowed location (your phone rounds it to about 1 km), so places near you come first. Places anywhere can still be found. Apple's privacy policy covers that search. Your searches don't come to us and we don't keep them.

The small map on a stop is made from OpenStreetMap tiles, also fetched through the postbox (and cached for up to a week), so the map service doesn't see your phone. Tapping the map opens the stop in Apple Maps, which is covered by Apple's privacy policy. A stop you pick keeps its name, address and map point, and goes to the people in that sesh, locked like everything else.

Permissions the app asks for

• Notifications, for the reminders you choose: "Don't forget to register you're home", the safety net and "Don't forget to check in with the crew". These are scheduled on your phone. While the app is open, it also tells you when someone in your sesh posts an update.
• Camera, only while you're scanning a mate's QR code. Nothing is photographed or saved.
• Location, only if you allow it. When you tap Heading on a stop (and about once a minute while you're heading there), your phone works out how far away the stop is. Only the distance, the minutes and the "should be there" time go to your sesh, never where you are. If you've allowed location, it is also used to search near you, as explained above.

What we don't collect

No account, email address, phone number, contacts, photos, advertising identifiers, analytics or tracking. We don't sell or share data, and there are no ads.

Apple

Apple handles your download and any App Store review under its own privacy policy. If you've turned on "Share with App Developers" in your iPhone's settings, Apple may give us anonymous crash reports and usage statistics. We use them only to fix problems.

Diagnostics

The app has a Help & diagnostics screen (the last row in Settings) for when something has gone wrong. Nothing leaves your phone unless you tap Send and confirm. A report contains the app version and build, your iPhone model and iOS version, language, time zone and free storage, the results of the app's health checks (storage, backup copy, reminders, postbox connection, locking and sync), the app's recent technical log (screens opened, errors, timings), how many mates, seshes and blocked people you have (counts only), your reminder settings, and whether the last sync worked. It never contains your chat, plans, IOUs or quotes, addresses, your contacts, your exact location or passwords. You see exactly what will be sent first. It goes by email from your own email app to welcome@myspencer.ai, so we also see the email address you send it from, as with any email. Nothing goes to the postbox. We use it only to find and fix the problem, and delete it within 90 days.

Founders feedback

Founders feedback, in the app at Settings › Founders feedback (six short questions, all optional), is sent only when you tap Send feedback. It goes to feedback.hangxietysociety.com, a separate inbox from the postbox, and carries your answers and the app version and build. It carries no name, no email address, no device identifier and nothing from your seshes. The server notes the country your connection comes from, and turns your internet address into a one-way code salted with the day, used only to keep sends to 10 a day. If your phone is offline, your answers wait on your phone and are sent the next time it can reach us; nothing is sent any other way. The form at hangxietysociety.com/founders works the same way: the same six questions go to the same inbox, marked as sent from the website, with no app details, and if your browser is offline they wait in that browser until it is back online.

The website

This website doesn't use cookies, analytics or tracking. It remembers on your device that you've confirmed your age. It loads its fonts from Google Fonts, which receives your IP address to deliver them.

Information outside Australia

The postbox runs on Cloudflare's worldwide network, so locked updates may be handled or stored outside Australia, including in the United States. Place searches go to Apple (see Address search and maps) and map tiles come from OpenStreetMap's servers overseas. Nothing they handle is linked to your name.

Seeing, copying and deleting your information

• To see or copy everything the app holds about you: in Profile, open Settings, then under Your data tap Copy all my data.
• To wipe it from inside the app: in the same place, tap Reset the app twice. Or delete the app.
• Remove or block a mate from your Crew page at any time.
• To come out of people search: in Settings, turn off Let people find me. Your listing is deleted from the postbox straight away.
• Anything in the postbox clears itself as described above. Copies on your mates' phones are theirs to keep or delete.

Your rights and complaints

We handle personal information in line with the Australian Privacy Principles. Wherever you live, you can ask us what we hold about you, or to correct or delete it. Because we hold almost nothing, there is usually nothing for us to provide, but we'll always answer. If you have a concern, email us first and we'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or your local privacy regulator.

Changes and contact

If we change how Hangxiety Society handles information, we'll update this page and the date above, and tell you in the app for a big change. Questions: email welcome@myspencer.ai. Driftwood Labs Pty Ltd (ACN 703 905 293, ABN 27 703 905 293), Victoria, Australia.