Privacy Policy
Effective 7 October 2026
Shiggy Trails (the "app", on the web and on Android) is operated by Bubble Barrel Commerce Limited. It is a home for Hash House Harriers kennels: find kennels, join runs, share trail reports, and keep a Hash Passport. This policy explains what we collect and what we do with it.
1. What we collect
You give us:
- Account details: email address and a password (stored only as a salted hash).
- Your profile: name, date of birth, gender, phone number, nationality, country, state or province, city, and optionally a street address, occupation and languages.
- Safety details, which you choose to give: an emergency contact (name, phone, relationship) and optional medical notes.
- Your hash name, handle, username, bio, profile and banner pictures.
- What you post: posts, comments, photos, reels (video with sound), trail reports and run capsules.
- Your kennel memberships, run attendance, follows, likes, bookmarks and notification settings.
- Your location, only when you ask the app to drop a pin where your kennel hashes. We do not track your location in the background.
Collected automatically:
- A push-notification token for your device, if you allow notifications.
- Security records such as sign-in times and an audit trail of account changes.
We do not run advertising or third-party analytics in the app, and we do not sell your personal data.
2. How we use it
- To run your account, kennel memberships and runs, and to send notifications you have asked for.
- To keep runs safe: emergency contact and medical notes are shown only to the kennel officers who need them for a run you join.
- To show your public identity. Your public name is your hash handle, or "Just <first name>" if you have not been named. Your biodata is private and is never shown publicly.
- To prevent abuse, moderate reported content and meet legal obligations.
- To draft a trail report if a scribe asks the optional AI assistant to. AI output is a suggestion a human reviews; the text for that request is sent to our AI provider, Anthropic, for that request only.
3. Who sees what
You control who sees your posts, photos and reels: everyone, followers only, or only you. Individual posts and reels can be narrowed further. Kennels and runs have their own privacy settings, set by the kennel. We do not offer direct one-to-one messaging.
4. Who we share it with
We use service providers who process data on our behalf and may not use it for their own purposes:
- Cloudflare R2 for photo, video and audio storage.
- Resend for email (verification, password reset and notification emails).
- Expo for push notifications.
- Anthropic, for the optional trail-report drafting described above.
- Our hosting and database providers.
We may also disclose information where the law requires it, or to protect people from harm.
5. Where it is kept
Hashers are worldwide, so your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for international transfers. Data is encrypted in transit.
6. How long we keep it
We keep your data while your account is open. When you delete your account we remove your sign-in, profile biodata, emergency and medical details, uploaded pictures and media files, follows, bookmarks, notifications and devices, and we take down your posts, reels and comments. What stays is what other people's history is made of: runs you attended and the trail reports and capsules that name you, which then read "Deleted hasher". How to delete your account is at shiggytrails.com/delete-account.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your data, object to or restrict processing, and complain to your data-protection authority. You can edit your profile and privacy settings in the app, and delete your account in the app or on the web. For anything else, email [email protected] and we will answer within 30 days.
8. Age
Shiggy Trails is for adults. You must be 18 or older to create an account. If we learn that someone younger has signed up, we will delete the account.
9. Security
Passwords are hashed, sessions use short-lived tokens, and trail secrets are enforced on the server. No system is perfectly secure; if a breach affects you we will tell you as the law requires.
10. Changes
If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top shows the latest version.
11. Contact
Bubble Barrel Commerce Limited - [email protected]