Privacy Policy for Haunt
Last updated: July 17, 2026
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
When You use the Service, We process information as described in this Privacy Policy. Some features are optional and process information only when You choose to use them.
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
Account means a unique account created for You to access our Service or parts of our Service.
Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
Application refers to Haunt, the software program provided by the Company.
Business, for the purpose of CCPA/CPRA, refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of the processing of Consumers' personal information, or on behalf of which such information is collected and that alone, or jointly with others, determines the purposes and means of the processing of consumers' personal information, that does business in the State of California.
CCPA and/or CPRA refers to the California Consumer Privacy Act (the "CCPA") as amended by the California Privacy Rights Act of 2020 (the "CPRA").
Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to Commershill, LLC, 2108 N St, Ste N, Sacramento, CA 95816.
For the purposes of the GDPR, the Company is the Data Controller.
Consumer, for the purpose of the CCPA/CPRA, means a natural person who is a California resident. A resident, as defined in the law, includes (1) every individual who is in the USA for other than a temporary or transitory purpose, and (2) every individual who is domiciled in the USA who is outside the USA for a temporary or transitory purpose.
Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
Country refers to: California, United States
Data Controller, for the purposes of the GDPR (General Data Protection Regulation), refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
GDPR refers to EU General Data Protection Regulation.
Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual.
For the purposes of GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
For the purposes of the CCPA/CPRA, Personal Data means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be linked, directly or indirectly, with You.
We use "Personal Data" and "Personal Information" interchangeably unless a law uses a specific term.
Service refers to the Application or the Website or both.
Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used. For the purposes of the GDPR, Service Providers are considered Data Processors.
Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Website refers to Haunt, accessible from https://www.gethauntapp.com.
You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Under GDPR, You can be referred to as the Data Subject or as the User as you are the individual using the Service.
Depending on the features You choose, We may process the following information:
Account information. If You create an account or sign in, Firebase Authentication may process Your email address, display name if provided, Firebase user identifier, the identifier supplied by Apple or Google for that sign-in, account creation and sign-in timestamps, and authentication state. Guest use does not require a Haunt account.
Subscription and purchase information. The Application and audio service process Your Haunt Pass entitlement, product identifier, transaction identifier, subscription status, expiration or renewal information, and App Store environment to unlock paid narration. Apple handles payment-card, billing-address, and refund information; Haunt does not receive those payment details.
Precise location. With iOS While Using permission, the Application processes precise location on Your Device to select the nearest supported city, determine arrival at a stop, support map and directions features, and select Current Location for a stop-pin correction. Haunt's own servers do not receive or store continuous location, route history, or a record of where You walked. Apple's iOS location and map services, and Google Maps if You choose that handoff, may process location or directions information under their own privacy policies. The only precise point Haunt's own service receives is one You explicitly submit in a stop-pin correction, as described below.
Tour progress and private iCloud data. Tour progress is stored on Your Device. Saved, completed, and explored Tour or city identifiers, the timestamp of the latest saved-Tour change, earned badge identifiers, miles walked, and narration hours may also be mirrored through Apple's private iCloud key-value service for devices using the same iCloud account. App-generated synchronization and reset metadata, including random generation identifiers, sequence numbers, and timestamps, may also be stored to keep devices consistent and prevent cleared progress from returning; it is not a Haunt account identifier. The Tour-progress snapshot does not contain downloads, subscription entitlement, name, email address, Firebase user ID, Apple user ID, feedback identifiers, Ghost/Skull reactions, or stop-pin suggestions. Haunt does not transmit Tour progress to Firebase for cross-device synchronization.
Account-unlinked feedback identifiers. The Application creates two separate random installation-scoped identifiers: one for Ghost/Skull Tour reactions and one for stop-pin suggestions. They are not IDFA, IDFV, a Firebase user ID, an Apple or Google account identifier, or a Haunt account identifier. They are not joined to Your account or to each other. The service receives the applicable identifier with a feedback request and stores only a domain-separated one-way SHA-256 digest in the feedback database; it does not store the raw identifier there.
Tour reactions. If You choose Ghost or Skull after a Tour, Haunt receives the choice, Tour identifier, catalog revision, and production or beta channel. One current reaction is retained per reaction identifier and Tour; choosing again replaces the prior choice. Individual choices are not displayed publicly. After at least five accepted reactions, Haunt may publish an aggregate star score and aggregate Ghost percentage shown as the percentage who loved the Tour. A truthful count label appears only after at least fifty.
Stop-pin corrections. If You explicitly submit a correction, Haunt receives the Tour and stop identifiers, existing catalog point, Your selected proposed point, submission source, selected reason, optional note of up to 280 characters, and catalog channel and revision. The service calculates and stores the distance between the existing and proposed points. If You choose Current Location, the submission also includes horizontal GPS accuracy and the age of the location fix. A manually selected map point includes no GPS-fix metadata. Haunt records submission, update, and review status information so an operator can review the suggestion. A suggestion never changes a published Tour automatically.
Network and security metadata. Service infrastructure necessarily observes an IP address, request time, requested path, response status, and related request metadata to deliver content, authorize paid narration, protect the Service, and enforce abuse limits. For feedback requests, Haunt derives a keyed rate-limit value from the network address; that value is not stored with the feedback row.
Support communications. If You contact Us, We receive the information You choose to include, such as Your email address, message, and attachments.
The Application does not contain an analytics or advertising SDK and does not automatically collect in-app usage statistics, browsing history, advertising identifiers, or diagnostic data for Haunt analytics. Apple may provide Haunt with crash or usage diagnostics only if You enable Apple's Share With App Developers setting.
Network providers necessarily process the request metadata described above to operate and secure the Service. The public Website loads Google Fonts, and TermsFeed hosts the legal documents linked from the Application; those providers receive ordinary HTTP request metadata under their own privacy policies. Haunt does not use that activity for advertising, cross-context behavioral advertising, or user tracking.
With Your iOS permission, precise location is processed on Your Device for nearest-city selection and Tour navigation. Haunt does not send that location to Haunt's servers for those purposes. Apple's Core Location, MapKit, and Maps services may process location or directions information to provide the platform features You use. If You choose Google Maps, Haunt opens a Google Maps directions link containing Tour destination or waypoint coordinates, and Google Maps may use Your current location according to Your Google Maps and Device settings. The only coordinate Haunt's own service receives is one You explicitly submit in a stop-pin correction. You can change location permission at any time in iOS Settings and can use narration manually without arrival-based playback.
Ghost/Skull reactions and stop-pin corrections are optional. The Application does not passively submit either category.
The Application does not use cookies, advertising pixels, web beacons, IDFA, App Tracking Transparency, or cross-app tracking. Haunt does not sell personal information or share it for cross-context behavioral advertising.
The public Website uses Google Fonts and Cloudflare hosting or security infrastructure. The Website source inspected on July 17, 2026 contained no Google Analytics, advertising script, preference cookie, account-login cookie, or Haunt-operated cookie-consent tool. Infrastructure providers may still receive ordinary HTTP request metadata and may use strictly necessary security mechanisms under their own privacy policies. The hosted TermsFeed legal pages are operated by TermsFeed and may process request metadata under TermsFeed's privacy policy.
We use Personal Data only as reasonably necessary to:
provide accounts, optional sign-in, subscriptions, narration, downloads, Tour navigation, private iCloud progress, and support;
verify App Store entitlement and protect paid narration;
receive optional Tour reactions, publish thresholded aggregate ratings, and privately review optional stop-pin suggestions;
honor Reset Everything, account deletion, feedback deletion, access, correction, and other privacy requests;
secure the Service, prevent abuse, diagnose operational failures, and enforce legal agreements; and
comply with law, respond to valid legal process, or complete a business transfer subject to appropriate notice and safeguards.
We do not use Personal Data for third-party advertising, developer advertising, campaign analytics, remarketing, data-broker activity, or product personalization, and We do not send SMS or push marketing.
We disclose information only to the Service Providers named below for the stated operational purpose, to Apple or Google when You choose their services, in a business transfer, when required by law or necessary to protect rights and safety, or with Your direction or consent. Individual reactions and stop-pin suggestions are not distributed to other users.
We retain information only for the purpose for which it was collected, subject to legal, security, accounting, dispute-resolution, and provider backup requirements. The principal retention rules are:
Account data: Firebase Authentication account data is retained while the account exists and is deleted when Haunt confirms an in-app account-deletion request, subject to limited provider or legal residuals.
Tour progress: local progress remains until You reset it, delete the Application, or the operating system removes it. The private iCloud snapshot remains under Your iCloud account until the reset request propagates through Apple's service. App-generated reset metadata may remain as needed to prevent a stale Device from restoring cleared progress.
Production reactions: retained while the associated Tour remains active so its aggregate rating remains stable, then deleted within 90 days after the Tour is retired.
Beta feedback: rehearsal reactions and stop-pin suggestions are deleted immediately after rehearsal and no later than seven days.
Production stop-pin suggestions: open suggestions are retained no more than 120 days after their most recent submission; reviewed suggestions are retained no more than 60 days after review.
Deletion tombstones: after confirmed feedback deletion, Haunt permanently retains a one-way hash-only tombstone for the life of the feedback service. It contains no account, Tour, stop, timestamp, coordinate, reaction, reason, or note and exists only to prevent a delayed offline request from recreating deleted data.
Cloudflare D1 recovery history: residual database history may remain in D1 Time Travel for up to seven days under Haunt's current Workers Free plan. Recovery procedures preserve deletion tombstones and do not intentionally restore deleted feedback.
Support and legal records: retained only as long as reasonably necessary to respond, resolve the matter, meet legal or accounting duties, or establish, exercise, or defend legal claims.
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those from Your jurisdiction.
Where required by applicable law, We will ensure that international transfers of Your Personal Data are subject to appropriate safeguards and supplementary measures where appropriate. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.
You may use Profile > Privacy & Data > Reset Everything to clear local Tour activity and schedule deletion of this installation's account-unlinked Ghost/Skull reactions and stop-pin suggestions. Reset Everything does not delete Your Haunt account or Haunt Pass.
You may use Profile > Account > Delete Account to request deletion of the Firebase Authentication account and schedule deletion of both feedback categories. If the Device is offline or a request fails, the Application stores the deletion request and retries when connectivity returns. After confirmed feedback deletion, the old identifier is permanently retired; only a later explicit feedback action can create a new random identifier.
Private iCloud Tour progress is cleared locally and reset through Apple's iCloud service when the source iCloud account can be safely identified. iCloud delivery is eventual. App-generated reset metadata may remain to prevent a stale Device from restoring cleared progress. Apple and Google retain records controlled by their own services, including App Store purchase records, subject to their privacy policies and legal obligations.
You may also contact Us to exercise applicable access, correction, deletion, restriction, objection, or portability rights. Because account-unlinked feedback is not joined to Your name, email address, or account, the in-app installation identifier is the reliable method for deleting that feedback.
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.
Where the GDPR applies, We rely on the following legal bases:
Performance of a contract: to provide accounts, subscriptions, narration, downloads, and requested Service functionality.
Consent: for optional location permission, optional Apple or Google sign-in choices, and information You explicitly submit in reactions or stop-pin corrections where consent is the appropriate basis. You may withdraw consent for future processing without affecting prior lawful processing.
Legitimate interests: to secure and operate the Service, prevent abuse, answer support requests, maintain truthful aggregate ratings, and improve location accuracy through privately reviewed suggestions, balanced against Your rights.
Legal obligation: when processing is necessary to comply with applicable law or valid legal process.
Contact Us if You want the legal basis for a particular processing activity.
We may transfer, store, and process Personal Data in countries other than the country in which You are located, including countries outside the European Economic Area ("EEA") and the United Kingdom ("UK"), where data protection laws may differ.
Where we transfer Personal Data outside the EEA/UK to a country that has not been recognized as providing an adequate level of protection, We rely on appropriate safeguards, such as:
The European Commission's Standard Contractual Clauses ("SCCs") and/or the UK International Data Transfer Agreement ("IDTA") or the UK Addendum to the SCCs (as applicable)
Supplementary measures where appropriate, such as encryption in transit and at rest, access controls, data minimisation, and vendor security reviews.
We transfer Personal Data internationally only as needed to provide the Service and to work with the Service Providers named in this Policy, including authentication, infrastructure, payment, private iCloud, mapping, font-delivery, and legal-document hosting providers. You may contact Us using the details in the "Contact Us" section to request further information about the safeguards We use for international transfers, including copies of relevant contractual protections (redacted where necessary).
The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights.
You have the right under this Privacy Policy, and by law if You are within the EU, to:
Request access to Your Personal Data. The right to access, update or delete the information We have on You. Whenever made possible, you can access, update or request deletion of Your Personal Data directly within Your Account settings section. If you are unable to perform these actions yourself, please contact Us to assist You. This also enables You to receive a copy of the Personal Data We hold about You.
Request restriction of processing. You have the right to ask Us to restrict processing of Your Personal Data in certain circumstances (for example, while We verify accuracy or consider an objection).
Request correction of the Personal Data that We hold about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.
Object to processing of Your Personal Data. This right exists where We are relying on a legitimate interest as the legal basis for Our processing and there is something about Your particular situation, which makes You want to object to our processing of Your Personal Data on this ground. You also have the right to object where We are processing Your Personal Data for direct marketing purposes.
Request erasure of Your Personal Data. You have the right to ask Us to delete or remove Personal Data when there is no good reason for Us to continue processing it.
Request the transfer of Your Personal Data. We will provide to You, or to a third-party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which You initially provided consent for Us to use or where We used the information to perform a contract with You.
Withdraw Your consent. You have the right to withdraw Your consent on using your Personal Data. If You withdraw Your consent, We may not be able to provide You with access to certain specific functionalities of the Service.
You may exercise Your rights of access, rectification, cancellation and opposition by contacting Us. Please note that we may ask You to verify Your identity before responding to such requests. If You make a request, We will try our best to respond to You as soon as possible. We generally respond within one month, and may extend by two further months where necessary, in accordance with applicable law.
You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA.
This privacy notice section for California residents supplements the information contained in Our Privacy Policy and it applies solely to all visitors, users, and others who reside in the State of California.
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or Device. The following is a list of categories of personal information which We may collect or may have been collected from California residents within the last twelve (12) months.
Please note that the categories and examples provided in the list below are those defined in the CCPA/CPRA. This does not mean that all examples of that category of personal information were in fact collected by Us, but reflects our good faith belief to the best of Our knowledge that some of that information from the applicable category may be and may have been collected. For example, certain categories of Personal Information would only be collected if You provided such personal information directly to Us.
Category A: Identifiers.
Examples: A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver's license number, passport number, or other similar identifiers.
Collected: Yes.
Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
Examples: A name, signature, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Some personal information included in this category may overlap with other categories.
Collected: Yes.
Category C: Protected classification characteristics under California or federal law.
Examples: Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Collected: No.
Category D: Commercial information.
Examples: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Collected: Yes.
Category E: Biometric information.
Examples: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
Collected: No.
Category F: Internet or other similar network activity.
Examples: Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
Collected: Yes.
Category G: Geolocation data.
Examples: Approximate physical location, physical location or movements.
Collected: Yes.
Category H: Sensory data.
Examples: Audio, electronic, visual, thermal, olfactory, or similar information.
Collected: No.
Category I: Professional or employment-related information.
Examples: Current or past job history or performance evaluations.
Collected: No.
Category J: Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
Examples: education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
Collected: No.
Category K: Inferences drawn from other personal information.
Examples: Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Collected: No.
Category L: Sensitive personal information.
Examples: Government-issued identifying numbers, financial account details, genetic data, precise geolocation, race or ethnicity, religious or philosophical beliefs, union membership, mail, email, text messages, biometric data, health data, and sexual orientation or sex life.
Collected: Yes.
Under CCPA/CPRA, Personal Information does not include:
Publicly available information from government records
Deidentified or aggregated consumer information
Information excluded from the CCPA/CPRA's scope, such as:
Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data
Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994
We obtain Personal Information:
Directly from You, including account details, support messages, Ghost/Skull choices, and stop-pin corrections You choose to submit.
From Your Device or Service requests, including installation-scoped feedback identifiers, the catalog context needed to validate feedback, subscription evidence, and network metadata needed to deliver and secure the Service.
From Service Providers You choose or use, including Apple, Google, Firebase Authentication, Apple StoreKit, and private iCloud.
We do not obtain Personal Information from data brokers, advertising networks, or cross-context behavioral advertising cookies.
We use California Personal Information for the operational purposes described in the "Use of Your Personal Data" section: Service delivery, account and subscription functionality, optional feedback, support, security and abuse prevention, privacy rights, legal compliance, and a properly noticed business transfer. We do not use it for third-party advertising, cross-context behavioral advertising, or sale.
For the business purposes described in this Policy, We may disclose these CCPA/CPRA categories to the named Service Providers that need them: Category A (Identifiers), Category B (California customer-record contact information), Category D (Commercial information), Category F (Internet or network activity), Category G (Geolocation), and Category L (Sensitive Personal Information).
Not every example in a statutory category is collected or disclosed. For example, Haunt does not receive payment-card details, government identifiers, health information, browsing history, advertising identifiers, or continuous route history.
We have not shared Personal Information for cross-context behavioral advertising in the preceding twelve months and do not do so. Operational disclosure to a contracted Service Provider is described above and is not advertising sharing.
We have not sold Personal Information in the preceding twelve months and do not sell it. We also do not exchange Personal Information for monetary or other valuable consideration with data brokers, advertisers, or business partners.
The category-specific periods and criteria in the "Retention of Your Personal Data" section apply to California Personal Information. We do not retain a category longer than reasonably necessary for the disclosed purpose, subject to legal and provider backup residuals.
The Service is intended for adults aged 18 and over. We do not knowingly collect Personal Information from a person under 18 and do not sell or share Personal Information of minors.
The CCPA/CPRA provides California residents with specific rights regarding their personal information. If You are a resident of California, You have the following rights:
The right to notice. You have the right to be notified which categories of Personal Information are being collected and the purposes for which the Personal Information is being used.
The right to know/access. Under CCPA/CPRA, You have the right to request that We disclose information to You about Our collection, use, sale, disclosure for business purposes and share of personal information. Once We receive and confirm Your request, We will disclose to You:
The categories of personal information We collected about You
The categories of sources for the personal information We collected about You
Our business or commercial purposes for collecting or selling that personal information
The categories of third parties with whom We share that personal information
The specific pieces of personal information We collected about You
If we sold Your personal information or disclosed Your personal information for a business purpose, We will disclose to You:
The categories of personal information categories sold
The categories of personal information categories disclosed
The right to say no to the sale or sharing of Personal Information (opt-out). You have the right to direct Us to not sell Your personal information. To submit an opt-out request, please see the "Do Not Sell or Share My Personal Information" section or contact Us.
The right to correct Personal Information. You have the right to correct or rectify any inaccurate personal information about You that We collected. Once We receive and confirm Your request, We will use commercially reasonable efforts to correct (and direct our Service Providers to correct) Your personal information, unless an exception applies.
The right to limit use and disclosure of sensitive Personal Information. You have the right to request to limit the use or disclosure of certain sensitive personal information We collected about You, unless an exception applies. To submit, please see the "Limit the Use or Disclosure of My Sensitive Personal Information" section or contact Us.
The right to delete Personal Information. You have the right to request the deletion of Your Personal Information under certain circumstances, subject to certain exceptions. Once We receive and confirm Your request, We will delete (and direct Our Service Providers to delete) Your personal information from our records, unless an exception applies. We may deny Your deletion request if retaining the information is necessary for Us or Our Service Providers to:
Complete the transaction for which We collected the personal information, provide a good or service that You requested, take actions reasonably anticipated within the context of our ongoing business relationship with You, or otherwise perform our contract with You.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if You previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on Your relationship with Us.
Comply with a legal obligation.
Make other internal and lawful uses of that information that are compatible with the context in which You provided it.
The right not to be discriminated against. You have the right not to be discriminated against for exercising any of Your consumer's rights, including by:
Denying goods or services to You
Charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties
Providing a different level or quality of goods or services to You
Suggesting that You will receive a different price or rate for goods or services or a different level or quality of goods or services
Please see the "Do Not Sell or Share My Personal Information" section and "Limit the Use or Disclosure of My Sensitive Personal Information" section for more information on how to opt out and limit the use of sensitive information collected.
Additionally, in order to exercise any of Your rights under the CCPA/CPRA, and if You are a California resident, You can contact Us:
Only You, or a person registered with the California Secretary of State that You authorize to act on Your behalf, may make a verifiable request related to Your personal information.
Your request to Us must:
Provide sufficient information that allows Us to reasonably verify You are the person about whom We collected Personal Information or an authorized representative
Describe Your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it
We cannot respond to Your request or provide You with the required information if We cannot:
Verify Your identity or authority to make the request
And confirm that the personal information relates to You
We will disclose and deliver the required information free of charge within 45 days of receiving Your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.
Any disclosures We provide will only cover the 12-month period preceding the verifiable request's receipt.
For data portability requests, We will select a format to provide Your personal information that is readily usable and should allow You to transmit the information from one entity to another entity without hindrance.
For account-unlinked reactions and stop-pin suggestions, Haunt cannot locate a row from Your name, email address, or account. The in-app Reset Everything and Delete Account controls use the applicable installation identifier to request deletion without joining the feedback to identity.
Haunt does not sell Personal Information or share it for cross-context behavioral advertising. No opt-out is required for a practice We do not conduct. You may contact Us with any question or exercise another applicable privacy right using the methods below.
Haunt uses precise geolocation only for the Service purposes reasonably expected by a user: on-device nearest-city selection and Tour navigation, plus a stop-pin correction only when You explicitly submit one. We do not use sensitive Personal Information to infer characteristics about You, for advertising, or for tracking. You may disable iOS location permission at any time and may contact Us regarding any applicable right to limit use.
The Service is intended for adults aged 18 and over and is not directed to children. We do not knowingly collect Personal Data from anyone under 18. If You believe a person under 18 provided Personal Data, contact Us and We will take appropriate steps to delete it.
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
We use these providers for the limited purposes below:
Google LLC - Firebase Authentication. Optional email/password, Apple, or Google sign-in and session management. Depending on Your sign-in choice, Firebase processes email address, display name if provided, Firebase UID, provider identity token, and authentication metadata. Haunt does not use Firebase App Check, Firebase Analytics, Firebase Crashlytics, or Google advertising services.
Google LLC - Google Sign-In. If selected, Google supplies the account identifier and basic profile information You authorize. Haunt never receives Your Google password.
Apple Inc. - Sign in with Apple. If selected, Apple supplies an Apple-issued identifier and, on first sign-in, optional name and email or private relay address.
Apple Inc. - StoreKit and the App Store. Apple processes subscriptions, payment, refunds, and App Store transaction records. Haunt receives entitlement and transaction evidence needed to unlock Haunt Pass.
Apple Inc. - private iCloud key-value storage. Apple may mirror the limited Tour-progress fields described above between devices using the same iCloud account. Feedback and Haunt account data are excluded.
Apple Inc. - Core Location, MapKit, and Apple Maps. Apple's platform services provide permissioned Device location, map display, and optional directions handoff. Apple may process location and directions information under Apple's privacy policy when You use those services.
Apple Inc. - opt-in developer diagnostics. Apple may share crash or usage diagnostics if You enable Share With App Developers in iOS Settings. Haunt does not bundle a third-party crash-reporting SDK.
Cloudflare, Inc. Cloudflare Workers, R2, D1, hosting, and rate limiting deliver catalogs and narration, evaluate access requests, and host the account-unlinked feedback service. Depending on the request, Cloudflare processes network metadata, authorization or subscription evidence, hashed random feedback identifiers, Ghost/Skull choices, and explicitly submitted stop-pin suggestions. Feedback rows are not joined to Haunt account records.
Google LLC - Google Fonts (Website only). The public Website loads fonts from Google's content-delivery network, which receives the IP address and ordinary HTTP request metadata needed to return the font.
Google LLC - Google Maps (optional). If You choose Google Maps for directions, Haunt opens a Google Maps link containing the Tour destination or waypoint coordinates. Google Maps may process the request and Your current location according to Your Google Maps and Device settings.
TermsFeed. TermsFeed hosts the public legal documents linked from the Application and Website and may process ordinary request metadata under its privacy policy.
These providers operate under their own privacy terms and, where applicable, contractual restrictions on processing for Haunt. Haunt does not request App Tracking Transparency permission, access IDFA or IDFV, or use Personal Data for tracking.
Apple, Google, Cloudflare, and TermsFeed may process information in the United States and other locations where they operate. Where required for transfers from the EEA, UK, or Switzerland, We and Our providers rely on recognized safeguards such as adequacy decisions, Standard Contractual Clauses, or other lawful transfer mechanisms. Contact Us for more information about applicable safeguards.
Haunt supports optional Apple, Google, and email/password accounts, plus Guest mode:
Apple or Google sign-in: the selected provider handles its authentication flow and supplies only the limited information described above.
Email and password: Firebase Authentication stores the email address and a protected password credential. Haunt does not receive a cleartext password.
Guest mode: Haunt does not collect Your email address, name, or a Haunt account identifier. Tour progress may still sync through Your private Apple iCloud data when iCloud is available, but it is not associated with a Haunt or Firebase account. Creating an account does not automatically link prior Guest activity to that account.
Profile > Account > Delete Account requests deletion of the Firebase Authentication account and schedules deletion of both account-unlinked feedback categories. It also clears disposable local state. Apple and Google retain records controlled by their services, including App Store purchase records, under their own policies and legal obligations. The separate Reset Everything control and the feedback tombstone behavior are described in "Delete Your Personal Data" above.
We may update this Privacy Policy as the Service or legal requirements change. We will post the revised Policy at this same URL and update the "Last updated" date. If a change materially affects how We use Personal Data, We will provide additional notice when required by law. The revised Policy is effective when posted unless a later effective date is stated.
If you have any questions about this Privacy Policy, You can contact us: