HiveMind — Privacy Policy

Last updated: August 2026

HiveMind is a mobile app for planning gaming sessions in private groups. This policy explains what data the app processes, why, and what your rights are. Short version: we only process what the app needs to work, we do not run ads, we do not sell data, and we use no advertising or tracking SDKs.

1. Controller

Balthasar Höfinger, Austria
Contact: balth.hivemind@gmail.com

2. Data we process

Account: email address and a password (stored only as a cryptographic hash by our backend provider).
Profile: username, optional profile picture, avatar color, optional weekly availability, your game library with optional rank text and self-rated skill.
Group content: groups you create or join, events and team slots, ready status, time polls and votes, match results and MVP votes, and chat messages you send. This content is visible to the members of the respective group.
Attendance counters: aggregated counts of attended/missed sessions, shown as a "show rate" to your friends and group members.
Push tokens: a device token used to deliver notifications you opted into at the operating-system level.
Steam link (optional): if you connect Steam, we store your SteamID and periodically fetch your public Steam presence (display name, online state, current game) so your friends in the app can see it.
Discord link (optional): if you connect Discord, we store your Discord ID and username. On Discord servers that have invited our bot, the bot records your presence (online state, current game, and the name of the voice channel and server you are in) so your friends in the app can see it.
Presence alerts (optional): which friends you want to be notified about when they come online or start a game.
Moderation data: users you block, and reports you submit (including a snapshot of the reported message).
Crash reports: in release builds, crashes are reported to Sentry (stack trace, device model, OS version). No advertising identifiers are collected.

3. Purposes and legal bases (GDPR)

Providing the app's features — Art. 6(1)(b) GDPR (performance of contract).
Optional integrations you actively connect (Steam, Discord, presence alerts) — Art. 6(1)(a)/(b) GDPR; you can disconnect them at any time in the app.
Moderation, abuse prevention and crash reporting — Art. 6(1)(f) GDPR (legitimate interest in a safe, working service).

4. Service providers

Supabase — database, authentication and file storage. Our project is hosted in the European Union.
Expo / Google Firebase Cloud Messaging / Apple Push Notification service — delivery of push notifications.
Sentry — crash reporting in release builds.
Valve (Steam Web API) and Discord — only if you connect the respective account.
IGDB (Twitch) — game search: your search text is forwarded to look up game names and cover images; it is not stored with your identity.

Some providers process data in the United States; transfers rely on the EU standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

5. Retention and deletion

Your data is kept while your account exists. You can delete your account directly in the app (Profile → Delete account); this permanently removes your profile, linked accounts, presence data and push tokens.
Group content (events, chat, results) belongs to the group and can be deleted by its members with the respective permissions.
Aggregated attendance counters contain no event details and are removed with the account.

6. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact us at the address above. You also have the right to lodge a complaint with a supervisory authority — in Austria the Datenschutzbehörde (dsb.gv.at).

7. Children

HiveMind is not directed at children. You must be at least 14 years old to use the app.

8. Changes

We may update this policy as the app evolves. Material changes will be announced in the app. The current version is always available at this address.