Privacy policy
Last updated 12 October 2026
The short version: your seshes live on your phone and the phones of the people in them. There's no account, no ads and no tracking, and we don't sell or share anything. What goes to your crew is locked on your phone first, and the postbox it passes through can't read it and clears itself within days. The only thing that leaves your phone unlocked is an address search, which we don't keep or link to you.
Who we are
This policy is from SPENCER AI (ABN 31 978 335 623), Victoria, Australia ("we", "us"). It covers the Hangxiety Society app and this website. Hangxiety Society is only for adults of legal drinking age where they live (18 and over, or 21 and over in the United States). It is not for children or anyone under that age, and we don't knowingly collect information about them.
What stays on your phone
Everything you put into Hangxiety Society is stored on your phone, not with us:
- your name, character and settings;
- your crew (the people you've linked with) and anyone you've blocked;
- your seshes: the plan and stops, who's in, home safe check-ins, bumps, how people are feeling, cups, gaps, funny moments, BOG votes, IOUs, messages and "We good?" stamps;
- Mems, your past seshes;
- the private key your phone uses to unlock updates meant for you. The app never sends it anywhere.
We don't have a copy, so we can't see it, back it up or get it back for you. If your iPhone backs up to iCloud or a computer, that backup includes the app's data, under your own Apple account.
What travels between phones
To reach the people in your sesh, every update is locked (encrypted) on your phone so only they can unlock it. It then passes through a small postbox service we run on Cloudflare.
- The postbox only holds locked data. We don't have the keys and can't read it. It can see only random addresses, when each update arrived and how big it is.
- Messages to your inbox are deleted as soon as your phone collects them. Anything left is wiped 7 days after the last message arrived.
- A sesh's shared updates are wiped 3 days after the sesh was last updated.
- Share codes (like HX-7KQ2-M9PD) are never stored as the code itself, only as a scrambled version, and are wiped after 48 hours.
- A link code or QR (the long kind that starts HX2:) goes wherever you send it. It carries your name, your character and its look, your phone's public key and a random inbox address. Only share it with people you want to link with.
Cloudflare handles technical information such as your IP address to deliver the traffic. We don't keep logs of it or use it to identify you. See cloudflare.com/privacypolicy.
Address search and maps
When you search for a stop under "On the move", your phone sends the words you type to our postbox, along with a point to search near: your rough area if you've allowed location (your phone rounds it to about 1 km before sending), otherwise the last stop with a pin, or a city from your time zone. The postbox asks Photon, a public OpenStreetMap search run by komoot, for places within about 40 km. Photon sees our postbox asking, not your phone or IP address. We don't save your searches. To spare the map service, Cloudflare may keep the map service's answer to a search for up to a day, not linked to you.
The small map on a stop is made from OpenStreetMap tiles, also fetched through the postbox (and cached for up to a week), so the map service doesn't see your phone. Tapping the map opens the stop in Apple Maps, which is covered by Apple's privacy policy. A stop you pick keeps its name, address and map point, and goes to the people in that sesh, locked like everything else.
Permissions the app asks for
- Notifications, for the reminders you choose: "Don't forget to register you're home", the safety net and "Don't forget to check in with the crew". These are scheduled on your phone. While the app is open, it also tells you when someone in your sesh posts an update.
- Camera, only while you're scanning a mate's QR code. Nothing is photographed or saved.
- Location, only if you allow it. When you tap Heading on a stop (and about once a minute while you're heading there), your phone works out how far away the stop is. Only the distance, the minutes and the "should be there" time go to your sesh, never where you are. If you've allowed location, it is also used to search near you, as explained above.
What we don't collect
No account, email address, phone number, contacts, photos, advertising identifiers, analytics or tracking. We don't sell or share data, and there are no ads.
Apple
Apple handles your download and any App Store review under its own privacy policy. If you've turned on "Share with App Developers" in your iPhone's settings, Apple may give us anonymous crash reports and usage statistics. We use them only to fix problems. The app also has a hidden health check that stays on your phone unless you choose to copy it and send it to us.
The website
This website doesn't use cookies, analytics or tracking. It remembers on your device that you've confirmed your age. It loads its fonts from Google Fonts, which receives your IP address to deliver them.
Information outside Australia
The postbox runs on Cloudflare's worldwide network, so locked updates may be handled or stored outside Australia, including in the United States. Address searches go to komoot's Photon service in Europe and map tiles come from OpenStreetMap's servers overseas. Nothing they handle is linked to your name.
Seeing, copying and deleting your information
- To see or copy everything the app holds about you: in Profile, open Settings, tap the version line five times to open the health check, then tap Copy all my data.
- To wipe it from inside the app: in the same health check, tap Reset the app twice. Or delete the app.
- Remove or block a mate from your Crew page at any time.
- Anything in the postbox clears itself as described above. Copies on your mates' phones are theirs to keep or delete.
Your rights and complaints
We handle personal information in line with the Australian Privacy Principles. Wherever you live, you can ask us what we hold about you, or to correct or delete it. Because we hold almost nothing, there is usually nothing for us to provide, but we'll always answer. If you have a concern, email us first and we'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992) or your local privacy regulator.
Changes and contact
If we change how Hangxiety Society handles information, we'll update this page and the date above, and tell you in the app for a big change. Questions: email welcome@myspencer.ai. SPENCER AI (ABN 31 978 335 623), Victoria, Australia.