Privacy policy
Last updated: 25 September 2026
haaaang. is a service run by the haaaang. team in New Delhi, India ("we", "us"). This policy explains what personal data we collect when you use haaaang.com, why we collect it, and the choices you have. We process your data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act). For this purpose we are the Data Fiduciary and you are the Data Principal.
Who can use haaaang.
haaaang. is only for people aged 18 or over. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we delete it.
What we collect
- When you sign in: your email address, and the one-time codes we email you (we keep only a scrambled copy, for 24 hours at most). If you choose Google sign-in instead, we receive your name, email address and Google account ID. We do not receive your Google password or access your Gmail, contacts or files.
- Your profile: the first name you choose, age, gender (only if you choose to give it), area of the city, Instagram handle (only if you add one), interests, profile colour and your prompt answers.
- Your activity: hangs you post, requests to join, whether you were accepted, group chat messages, ratings, whether you showed up to a hang, and any reports you file or that are filed about you.
- A session cookie: one cookie that keeps you signed in. We do not use advertising or tracking cookies.
- Technical logs: our hosting provider records basic request data such as IP address, browser type and time, to keep the service running and secure.
Why we use it
- To create your account and keep you signed in.
- To show your profile to hosts when you ask to join, and to show hosts' profiles to you.
- To run hangs: requests, acceptances, group chats and ratings.
- To keep people safe: the ghosting score, women-only hangs, reports, and removing people who break our Terms.
- To contact you about your account or a safety issue.
We rely on your consent, given when you sign up, and on the legitimate uses allowed by the DPDP Act, such as responding to safety reports and meeting legal obligations. You can withdraw consent at any time by deleting your account. Withdrawing does not affect processing that already happened.
Who can see what
- Other members see your first name, age, area, Instagram handle, interests, prompt, ratings and ghosting score. They never see your email address.
- Group chats are visible only to the host and the guests the host accepted.
- Women-only hangs are shown only to members whose profile says they are a woman.
Who we share it with
We do not sell your personal data, and we do not share it with advertisers. We use a small number of service providers who process data for us:
- Cloudflare, Inc. hosts the website, the app and its database. Data may be stored or processed on Cloudflare's servers outside India.
- Resend delivers our sign-in code emails, so it receives your email address.
- Google LLC handles sign-in if you choose Google sign-in.
We may disclose data if the law requires it, or to protect someone's safety when there is a credible risk of harm.
How long we keep it
- Your profile, hangs and messages are kept while your account is open.
- When you delete your account, we delete your profile and messages within 30 days. We may keep a limited record of reports and bans for up to 1 year to stop banned people from coming back, and anything else the law requires us to keep.
- Sign-in sessions expire after 30 days.
Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how we use it;
- correct or update your data (most of it you can edit in your profile);
- ask us to delete your account and data;
- nominate another person to exercise your rights if you die or become unable to;
- raise a grievance with us, and if you are not satisfied, complain to the Data Protection Board of India.
To use any of these rights, or to delete your account, email haaaang11@gmail.com from the email address you signed up with. We reply within 30 days.
Security
Data is sent over encrypted connections (HTTPS). Session tokens are stored only in hashed form. No system is perfectly secure; if a breach affects your data, we will tell you and the Data Protection Board as the law requires.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect.
Contact and grievances
The haaaang. team, New Delhi, India
Email: haaaang11@gmail.com