Privacy Policy

Last updated: to be set on publication

This Privacy Policy explains how Irish Arvin Garcia, a sole trader based in Victoria, Australia (ABN 93 312 629 856), trading as Hi 1987 (“Hi 1987”, “we”, “us”, “our”), collects, uses, discloses and protects personal information when you use the Hi 1987 mobile app, website and related services (together, the “Service”).

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and, where they apply to you, the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended (CCPA/CPRA). See the region-specific sections below.

By using the Service you agree to this Policy. If you do not agree, please do not use the Service.

---

1. The short version

This summary is for convenience only; the full Policy below governs.

2. Who this Policy covers

• Hosts — people who create a tape and (optionally) create an account.
• Contributors/guests — people who film or submit clips, whether or not they have an account.
• Viewers — people the host shares a film with.
• Website visitors.

3. Information we collect

a. Information you give us

• Account information (hosts). If you create an account, you sign in with Sign in with Apple or Google Sign-In. We receive a basic identifier and the email address associated with that sign-in. We do not receive your Apple or Google password.
• Content. The photos, video clips, audio and any captions you record or submit, and the films, reels, stills and albums generated from them (“Content”).
• Tape details. Event name, the filming window you set, and settings such as who can view the film.
• Communications. If you email or contact us (for example for support), we keep those messages.

b. Information we collect automatically

• Device and technical information — device type, operating system, app version, language, and similar technical data.
• Usage information — basic information about how the Service is used (for example, that a clip was submitted or a film was viewed), and diagnostic/crash information to keep the app working.
• Approximate identifiers — such as an IP address, used for security and to operate the Service.

We do not collect precise GPS location, and the app does not request location permissions.

c. Purchase information

• If you buy a tape (see Section 3 of the Terms), the purchase is processed by Apple or Google through in-app purchase. We receive confirmation that a purchase was made and the tier purchased. We do not receive or store your full payment-card details.

d. Analytics and crash tools

• We use Apple App Analytics (via App Store Connect), Google Analytics, and Vercel (which hosts our website and processes basic request logs and analytics) to understand usage and keep the Service reliable. These tools collect the technical and usage information described above. We keep this list current as our tools change.

4. How we use information

We use personal information to:

• create accounts and authenticate hosts;
• run the core Service — collect clips, assemble films, reels and stills, and deliver them to the host and the viewers the host chooses;
• process and confirm purchases;
• provide support and respond to your requests;
• keep the Service secure, prevent abuse, and enforce our Terms;
• send service messages (for example, that a film is ready, or that Content is about to be deleted);
• meet legal, tax and regulatory obligations; and
• fix bugs and improve reliability using diagnostic information.

We do not use your Content for advertising, marketing, product demonstrations, or to train artificial-intelligence or machine-learning models. If this ever changes, we will update this Policy and obtain any consent required by law.

5. Legal bases (EU/UK/GDPR users)

Where the GDPR applies, we rely on these legal bases:

• Contract — to provide the Service you (or the host) have asked for.
• Legitimate interests — to secure, maintain and improve the Service, and to prevent abuse, balanced against your rights.
• Consent — where required (for example, certain analytics or communications). You may withdraw consent at any time.
• Legal obligation — to comply with laws that apply to us.

6. How we share information

We share personal information only as described here:

• Other participants. By design, the host and the contributors/viewers the host allows can see the assembled film and, depending on the host’s settings, individual clips. Please only film and share what you’re comfortable being seen by others in the tape.
• Service providers (processors) who help us run the Service under contract, including:
  • Supabase — database, storage and backend infrastructure (Supabase runs on cloud infrastructure such as AWS). Content and account data are stored here.
  • Apple and Google — sign-in and in-app purchases.
  • Vercel — website hosting and basic request logs.
  • Google Analytics and Apple App Analytics — usage analytics (see Section 3d).
• Legal and safety. Where we reasonably believe it is required to comply with the law, respond to lawful requests, or protect the rights, safety or property of any person.
• Business transfer. If the Service is ever sold or transferred, information may transfer as part of that transaction; we will require the recipient to honour this Policy or notify you of any material change.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

7. Video content and people in your recordings

Hi 1987 records real people at events. This creates responsibilities for whoever is filming:

• You must have the right and, where required, the consent of the people you film to record them and to share those recordings within the tape. This includes obtaining consent from a parent or guardian for anyone under the age required in your location.
• Do not film where filming is prohibited or unlawful, and do not record people covertly where that is illegal.
• If you appear in a film and want it removed, contact the host, or contact us at support@hi1987.com and we will act on valid requests (see your rights in Section 10).

These responsibilities are set out in more detail in our Terms of Service.

8. How long we keep information (retention)

We keep personal information only as long as needed for the purposes above, and Content is deleted on a schedule so it is not stored indefinitely:

• Raw contributor clips: retained to assemble the film, then deleted approximately 30 days after the tape’s filming window closes.
• Finished film, reels, stills and album:
  • Free tapes (up to five contributors): available to view and download for approximately 30 days after the film is ready, then deleted.
  • Paid tapes: available for approximately 12 months after the film is ready, or until the host deletes them, so the host has time to download local copies.
• Reminders: we aim to email the host before Content is deleted, but you are responsible for downloading and keeping your own copies. We do not guarantee indefinite storage.
• Account data: kept while your account is active and deleted within approximately 30 days of an account-deletion request; residual copies in backups are purged within approximately 90 days.
• Records we must keep by law (for example, tax and transaction records) are retained for the period the law requires.

9. Where your information is stored and international transfers

We store data using Supabase, currently in Supabase’s Seoul, South Korea region. This means your information may be stored or processed outside your country, including in South Korea, whose data-protection laws differ from your own.

Where we transfer personal information internationally, we take steps to ensure it remains protected, including using providers that offer appropriate safeguards (such as standard contractual clauses where required). For Australian users, we take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs.

10. Your rights and choices

Subject to the laws that apply to you, you may:

• access the personal information we hold about you and request a copy;
• correct inaccurate information;
• delete your information (hosts can also delete their account and tapes in-app);
• object to or restrict certain processing, and withdraw consent where processing is based on consent; and
• request a portable copy of certain information.

To exercise any of these, email support@hi1987.com. We will verify your request and respond within the timeframe required by law. We won’t discriminate against you for exercising your rights.

EU/UK (GDPR). You also have the right to lodge a complaint with your local supervisory authority (in the UK, the ICO).

California (CCPA/CPRA). California residents have the rights to know, delete, correct, and to opt out of “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information for purposes requiring an opt-out. You may exercise your rights via the email above, and may use an authorised agent.

Australia (Privacy Act/APPs). You may access and correct your personal information as above. If you believe we have breached the APPs, you can complain to us first; if unsatisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Security

We use reasonable technical and organisational measures to protect personal information, including encryption in transit and access controls at our infrastructure provider. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the relevant regulator(s) as required by law (including the Notifiable Data Breaches scheme in Australia).

12. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Some regions require a higher minimum age (for example, 16 in parts of the EU) — where that applies, that higher age governs. If you believe a child has provided us personal information, contact us at support@hi1987.com and we will delete it. Anyone under 18 should only use the Service with the involvement of a parent or guardian.

13. Third-party services and links

The Service relies on third parties (such as Apple, Google and Supabase) that have their own privacy policies. This Policy does not cover their practices; please review their policies separately.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app or by email. Your continued use of the Service after changes take effect means you accept the updated Policy.

15. Contact us

Questions, requests or complaints about privacy:

Hi 1987 — Irish Arvin Garcia
Email: support@hi1987.com
Website: hi1987.com
Victoria 3177, Australia