ezhangout
ezhangout Privacy Policy
Last updated: October 12, 2026
This Privacy Policy describes how ezhangout ("we", "our", or "the app") collects, uses, stores, and shares your information when you use our mobile application and website (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
ezhangout is a social planning application that helps friend groups coordinate hangouts. Users share availability, build shared itineraries, vote on activities, and communicate within the app to plan in-person meetups.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address — used for authentication and account communication
- Display name — visible to other users you interact with
- Profile picture URL — if you sign in with Google, we may use your Google profile image
- Authentication tokens — used to maintain your login session securely
1.2 Usage Data
We collect information about how you use the Service:
- Hangouts you create or join
- Availability you share with others
- Itinerary items and responses
- Votes you cast on activities
- Feature usage (to improve the product)
1.3 Device Information
- Device type and operating system version
- App version
- Language preference
1.4 Advertising Data
We use Google AdMob (in our mobile app) and Google AdSense (on our website) to display advertisements in the free tier of the Service. These advertising services may collect the following, which is governed by Google's Privacy Policy:
- Device identifiers (e.g., advertising ID)
- Coarse or precise location (only if you grant permission)
- Interaction data with ads (views, clicks)
- App usage data for ad targeting
Important: Advertising data is collected and processed entirely by Google's advertising services under their own policies. We do not combine advertising identifiers with your Google Sign-In authentication data (see Section 4.3 below). You can opt out of personalized advertising by resetting your advertising ID in your device settings, or by visiting Google Ads Settings.
1.5 Google Sign-In Data
If you choose to sign in with Google, we request and receive the following information from your Google Account:
- Email address — your Google account email address
- Google profile name — the display name associated with your Google account
- Google profile picture URL — a link to your profile image
- Unique Google identifier — a stable ID that identifies your Google account to our app
We use this information solely for authentication, account creation, and profile setup within ezhangout. We do not request or access any other data from your Google Account (such as your emails, contacts, calendar, files, or other Google services). We do not post to Google on your behalf, and we do not share your Google data with third parties.
2. How We Use Your Information
- To provide the Service — displaying your hangouts, matching availability, syncing data across devices, and facilitating group planning
- To authenticate you — verifying your identity and maintaining your session
- To set up your profile — using your email, name, and profile picture to display to hangout members
- To display advertisements — showing ads via Google AdMob and Google AdSense in the free tier (advertising identifiers only — see Section 4.3)
- To improve the Service — understanding which features are used most to prioritize development, using aggregated and anonymized data
- To communicate with you — sending service-related notifications (e.g., hangout invites)
3. How We Share Your Information
3.1 With Other Users
Your display name and profile picture are visible to users you share a hangout with. Your availability is visible to members of the same hangout. Your email address is never shown to other users.
3.2 With Service Providers
We use the following third-party services that may process your data. Each processes data only as necessary to provide their service to us:
- Supabase — database and authentication infrastructure (servers in the US/EU). Processes your account data, hangout data, and availability to store and sync the Service.
- Google OAuth — authentication. Processes your sign-in request and returns your email, name, profile picture, and Google identifier (see Section 4).
- Google AdMob — mobile advertising. Processes advertising identifiers and interaction data (see Sections 1.4 and 4.3).
- Google AdSense — web advertising. Processes advertising identifiers and interaction data (see Sections 1.4 and 4.3).
- RevenueCat — subscription management. Processes purchase information and subscription status.
3.3 Legal Requirements
We may disclose your information if required by law, subpoena, or governmental request, or to establish or exercise our legal rights, or to defend against legal claims.
3.4 Business Transfers
If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.
4. Google API Services User Data Policy & Limited Use Compliance
4.1 Compliance Statement
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including all Limited Use requirements. This section describes how we specifically comply with those requirements.
4.2 Limited Use Requirements
We commit to the following Limited Use requirements, which apply to all data obtained from Google API scopes (including Google Sign-In data), and to any data aggregated, anonymized, or derived from it:
Data Use Limitation:
- We limit our use of Google user data to providing and improving user-facing features that are prominent in the ezhangout application's user interface — specifically, authentication, profile setup, and displaying your name and picture to hangout members.
- We do not use Google user data for any purpose not disclosed in this Privacy Policy.
Transfer Restrictions:
- We do not transfer Google user data to any third party, except in the following limited circumstances:
- To provide or improve user-facing features that are visible and prominent in the app's user interface, and only with the user's consent (e.g., displaying your name to hangout members you explicitly invite);
- For security purposes (for example, investigating abuse);
- To comply with applicable laws; or
- As part of a merger, acquisition, or sale of assets, after obtaining explicit prior consent from the user.
Prohibited Uses:
- We do not transfer or sell Google user data to third parties, including advertising platforms, data brokers, or any information resellers.
- We do not transfer, sell, or use Google user data for serving ads, including retargeting, personalized advertising, or interest-based advertising.
- We do not transfer, sell, or use Google user data to determine credit-worthiness or for lending purposes.
- We do not use Google user data to train non-personalized AI or machine learning models.
Human Access Restrictions:
- We do not allow humans (including our employees, agents, or contractors) to read Google user data, except in the following limited circumstances:
- When we have obtained the user's affirmative agreement to view specific messages, files, or other data;
- When it is necessary for security purposes (for example, investigating a bug or abuse);
- When it is necessary to comply with applicable law; or
- When the data (including derivations) is aggregated and anonymized and used for internal operations in accordance with applicable privacy and jurisdictional legal requirements.
4.3 Data Separation: Authentication vs. Advertising
To be fully transparent about our data handling, we maintain strict technical and organizational separation between two categories of data:
- Google Sign-In authentication data (your email address, profile name, profile picture URL, and Google identifier) — this is obtained via the Google OAuth authentication flow and is used exclusively for account creation, authentication, and profile display within ezhangout. It is stored in our Supabase database and is never shared with any advertising service.
- Advertising identifiers and interaction data (device advertising ID, ad views, ad clicks, and app usage data collected by Google AdMob/AdSense SDKs) — this is collected and processed exclusively by Google's advertising services under Google's Privacy Policy and our advertising configuration. We do not combine this data with your Google Sign-In credentials, and we do not send your Google Sign-In data to any advertising service.
In short: your Google Sign-In email, name, and profile picture are never used for ad targeting, ad personalization, or any advertising purpose.
4.4 Changes to Google Data Use
If we change the way our application uses Google user data, we will notify you and prompt you to consent to an updated privacy policy before we make use of Google user data in a new way or for a different purpose than originally disclosed in this policy.
5. Data Storage and Security
Your data is stored on Supabase's infrastructure with encryption in transit (TLS) and at rest. We use Row Level Security (RLS) to ensure you can only access data you have permission to see. Authentication tokens are stored securely on your device.
We maintain the security of your data through the following measures:
- Encryption of data in transit using TLS/SSL
- Encryption of data at rest in our database
- Row Level Security policies that enforce per-user data isolation
- Secure storage of authentication tokens on client devices
- Access controls limiting employee access to user data on a need-to-know basis, for security and support purposes only
- Regular review of our data handling practices
6. Your Rights
6.1 Access and Deletion
You can request a copy of your data or deletion of your account by contacting us at the email listed in Section 11. Account deletion removes all your personal data, including Google Sign-In data, within 30 days. You can also revoke ezhangout's access to your Google account at any time by visiting your Google Account permissions page.
6.2 GDPR Rights (EU/EEA)
If you are in the EU/EEA, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
6.3 CCPA Rights (California)
If you are a California resident, you have the right to:
- Know what personal information is collected
- Request deletion of personal information
- Opt out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising these rights
7. Children's Privacy (COPPA)
The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. ezhangout is intended for general audiences (teenagers and adults) planning social activities with friends.
We do not serve behavioral advertising to any user we know to be under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information promptly. If you believe a child under 13 has provided us personal information, please contact us at the email listed in Section 11.
8. Cookies and Tracking
We use minimal cookies strictly necessary for the Service to function (such as maintaining your login session). We do not use cookies for analytics or personalization of our own.
Google AdSense may use cookies to serve ads on our website based on your prior visits. You can opt out of Google's use of advertising cookies at Google Ads Settings. For more information about how Google uses data when you use our partners' sites or apps, see Google's Privacy & Terms page.
9. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page, updating the "Last updated" date, and — where material — sending a notice through the app or to your account email address before the change takes effect.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, including Google user data, contact us:
← Back to ezhangout