Huna.

How Huna handles your data

Huna is about where you are and who you know, so this page explains exactly what we hold, why we hold it, and how long we keep it.

Last updated 31 August 2026

Who we are

Huna is operated out of the United Kingdom, and we are the data controller for the personal data described here.

If you have a question about any of it, or want to exercise one of the rights below, contact privacy@joinhuna.com.

What the app does

Huna lets you check in at a place, see who else is there, and message people you connect with. Because that is the whole product, the app necessarily handles where you are, who you know, and what you post.

What we collect

When you create an account. Your email address, a password, and your date of birth. You must be 18 or over to use Huna.

Your profile. Display name, username, an optional bio, and an optional profile photo. These are visible to other users.

When you check in. The place, the time, and any note or photos you attach. A check-in records a venue, not a street address or precise coordinates.

As you use the app. Messages you send, friend requests, friendships, blocks, and any reports you make.

From your device. A push notification token if you allow notifications, and your device language so the app can display in English or Arabic.

What we deliberately do not collect

We do not track your location in the background. The app asks for location permission "while using the app" only. It never asks for "always" and cannot read your location when it is closed.

Browsing nearby places does not tell us where you are. When you look for a venue in the composer, that search happens on your device and the results are cached there. Your location reaches our servers only at the moment you actually post a check-in.

We do not use your data for advertising, and we do not track you across other apps or websites.

Why we are allowed to hold it

Most of it is because you asked us to run the service. We cannot show you who is at a venue without knowing you checked in there. In data protection terms, that is performance of our contract with you.

Some of it is for safety, which is our legitimate interest and in some cases a legal duty: blocks, reports, moderation records, and the results of scanning uploaded photographs.

Your date of birth is held because we are required to keep under-18s off the service. Push notifications rely on the permission you give at the system prompt, and you can withdraw it any time in your device settings.

Who else sees your data

A small number of service providers. We do not sell your data to anyone, and none of these providers may use it for their own purposes.

Supabase
Hosts the application and stores your data, in the United Kingdom.
Google Places
Provides venue search. Receives coordinates and what you type into the search box, never your identity. We store the place identifier and coordinates, and we do not cache venue names.
Sightengine
Scans photographs you upload to detect content that is not allowed. A French company running EU infrastructure.
Apple
Delivers push notifications to your device.

How long we keep it

If you delete your account, you have 30 days to change your mind. After that it is destroyed and cannot be recovered. Your username stays reserved during those 30 days so nobody can take it while you decide.

Photos you upload but never post are deleted after 7 days. Accounts that never complete verification are deleted after 30 days.

Moderation records, including reports, decisions, and the reasons for them, are kept for 12 months after the action. They outlive the account they concern, because they are the evidence base if a decision is appealed or a regulator asks how we reached it. Records relating to illegal content may be kept longer where we are required to retain them.

Changes to your display name and bio are logged and kept for 12 months, so that someone cannot change their name to escape a report.

Your rights

Photographs and moderation

Every photograph uploaded to Huna is scanned automatically before it is posted. If it is clearly not allowed, it is blocked and you are told immediately. If it is borderline, the check-in posts and a human moderator reviews it, and you are told only if they decide to remove it.

You can report content or another user from within the app. We will confirm we received the report and tell you when it has been dealt with. We will not tell you what action we took against another person, because that is their private information. The community rules set out what breaks the rules and what happens next.

Google Maps

Huna uses the Google Places API for venue search. Your use of those features is also covered by Google's Terms of Service and Google's Privacy Policy.

Children

Huna is for adults. You must be 18 or over. If we find out an account belongs to someone under 18, we will remove it.

Changes to this policy

If we change anything significant, we will tell you in the app rather than quietly updating this page.