hoopr
Legal
Privacy Policy
Effective September 24, 2026
This Privacy Policy explains what information Hoopr collects, how we use it, who we share it with, and the choices you have. It applies to the Hoopr app and hoopr.pro. Hoopr is currently rolling out to University of Michigan students and community members first; nothing here should be read as limiting Hoopr to Michigan or to college campuses permanently — as Hoopr expands to new schools, cities, or communities, this Policy applies there too, with updates posted here as needed.
Minimum age: 16+
Hoopr is intended only for users age 16 or older. We do not knowingly allow anyone under 16 to create an account, and we do not knowingly collect personal information from anyone under 16. Age is checked against a date of birth collected at signup; see "Children and Minors" below for more on how this works and what to do if you believe an underage user has an account.
1. Information you provide to us
Account information: your school email address, password, real name, display name, and username. Profile information: bio, position, dominant hand, play styles, height, home gym, and any avatar or header photo you upload. Onboarding information: date of birth (used only to verify you meet the minimum age and never shown to other users or exposed anywhere in the app) and academic status/expected graduation (kept private, used for internal eligibility and product purposes, not shown on your public profile). Content you create: messages you send, ratings and reports you submit about other users, and any other content you choose to add to your profile. If you join a waitlist — on hoopr.pro before signing up, through an in-app beta waitlist, or for a tournament/campus-bracket notification — we collect the email address (and, if applicable, your account) associated with that signup, plus anything you tell us about how you heard about Hoopr.
2. Information collected automatically
Gameplay and activity data: skill ratings submitted about you by other users, your Overall score and attribute grades computed from those ratings, badges and milestones, your check-in history, and records of verified shared run/session overlap with other users. Usage and diagnostic data: which screens and features you use, app-open and session events, and basic device/app information (platform, app version) sent alongside these events. Push notification data: if you enable notifications, we store a device push token so we can deliver them, along with your notification preferences. Crash and error data: if the app crashes or hits an unexpected error, a report is sent that includes technical details (stack trace, device/OS info) tied to an internal account identifier — not your name, email, username, or message content, which are filtered out before a report is sent.
3. Location information
Hoopr uses location to show nearby gyms and verify your presence when you tap Check In. If Hoopr's location access is set to "While Using the App", Hoopr only accesses location while you're actively using the app. Smart Check-In is optional and must be enabled for this account on this device, with notifications and Hoopr's location access set to "Always". It monitors supported gym regions in the background, including between runs, and sends a local notification when you arrive. A reminder does not check you in or start a run: you must tap Check In, which verifies your location and the gym's opening hours. Auto Check-Out turns on by default once you set Hoopr's location access to "Always", including for existing accounts. You can turn it off in Runs & Location, and that choice is remembered. During an active run, it uses background location to confirm you have been away for five minutes and check you out; this monitoring stops when you check out or the check-in expires. You can turn Smart Check-In and Auto Check-Out on or off independently in Runs & Location. Signing out or revoking location permission stops background monitoring. Smart Check-In is unavailable while notifications are disabled. Background delivery depends on your device and can be delayed or interrupted, including after force-quitting the app. We don't sell location data or share it with advertisers, and it is not shown to other users as raw coordinates — only as check-in/gym activity, described below.
4. Check-ins and shared-run verification
When you check in at a gym, Hoopr records your location to confirm you're actually there. When two users are checked in at the same gym at the same time, Hoopr may establish a "verified overlap" between them. This verified overlap is what Hoopr uses to gate rating eligibility — the intent is that ratings come from people who were legitimately at the same run, not from anyone who wants to rate anyone. Check-in and overlap records are kept as part of your gameplay history and contribute to the trust/confidence signals behind your Overall score.
5. Your public profile and user-generated content
Your profile, basketball stats and gym activity are visible to other Hoopr users. Your date of birth, academic status, email address and password are not public profile fields. We request photo-library or camera access only when you choose to add a profile or header image, or attach an image to a message. Uploaded profile and header images become visible immediately. New group-photo uploads and changes are unavailable in this release; existing group images remain visible and can be removed by founders. Kyle or Daniel can review reported images and remove inappropriate content promptly; approval is not required to publish an image. Profile image files use public storage URLs, so anyone with an image link may access it. Profile text and group names are checked against objectionable-language rules. You can report a profile, including its images, or a specific message, and block another user. No filter is perfect; reports and founder review provide additional safeguards.
6. Ratings
Other users you've shared a verified run with can submit skill ratings about you, which are combined into your Overall score and attribute grades. Ratings are tied to the rater's account internally (so we can detect abuse and enforce integrity rules), but individual ratings and who gave them are not shown to the person being rated — only the resulting aggregated score and grades are.
7. Messages
We store the messages you send so they can be delivered to the people you message. You can send photos and GIFs in private conversations. Message attachments are stored privately and can be viewed by conversation participants. You can report an attachment or delete your own message for everyone. “Delete for you” hides a received message only from your account. Message content is not used for advertising. Private one-to-one and group messages are not scanned against a word list or automatically rejected because of the words they contain. Private text is not sent to an AI moderation service. Public profile text and group names have stricter language rules. Blocking, reporting, anti-spam limits and abuse enforcement still apply. Messages are not end-to-end encrypted. Authorized founders may review a specifically reported message and its images; this does not give them routine access to the rest of your conversation.
8. How we use your information
We use your information to: operate core features (profiles, ratings, check-ins, connections, messaging, badges); verify your eligibility (school affiliation, minimum age); compute your Overall score and attribute grades; show your public profile and gameplay stats to other users as designed into the app; send you notifications you've opted into; monitor and improve app stability (crash/error reporting); understand product usage in aggregate (analytics); and keep the community safe — reviewing reports, enforcing blocks, and investigating abuse or rating manipulation.
10. Service providers we use
Supabase hosts our database, authentication, file storage, and backend infrastructure — most of what Hoopr collects passes through or is stored in Supabase. Sentry provides crash and error monitoring for the app; crash reports are tied to an internal account identifier, not your name, email, username, or message content. Expo/EAS provides app build and push-notification delivery infrastructure. Each of these providers processes data on our behalf under its own data processing terms and is not permitted to use your data for its own purposes.
11. Staff and administrative access
A small number of authorized Hoopr staff can access certain account, profile, waitlist, and platform data through internal tools, strictly for moderation (reviewing reports and blocks), support (helping with account issues), safety (investigating abuse or rating manipulation), and general platform administration. Staff access is role-gated in our systems, not available to ordinary users. Admin tools do not provide routine browsing of private conversations. Authorized founders can review a specifically reported message and its images through an audited report-review tool. Privileged infrastructure access remains technically possible and is limited to authorized operations or the safety and legal circumstances described below.
12. Safety, abuse prevention, and legal compliance
We use account, activity, and content data to detect and prevent abuse of the platform — including fake accounts, harassment, and attempts to manipulate ratings or check-ins. We may preserve and disclose information where we believe in good faith it's required by law, subpoena, or other legal process, or necessary to protect the safety of a user or the public.
13. Data retention
We retain account and activity data while your account is active. Account deletion removes your profile, settings, connections, check-ins, badges, ratings you submitted, sent messages, and your uploaded profile, header, group and message images. Scores affected by your deleted ratings are recalculated. Other participants keep their own messages, attachments and shared conversations; a conversation you created is not deleted merely because you leave Hoopr. Historical product counts may remain without a direct account link. Limited security and founder-action audit records may be retained for safety, accountability or legal obligations. A hashed deletion receipt and account identifier are normally cleaned up after 30 days to reconcile retries; an incomplete deletion remains recorded until resolved.
14. Account deletion
You can permanently delete your account from Settings after approval, or from the access/waitlist screen while waiting for approval. Confirm your username or account email and re-enter your password. We remove your uploaded profile and message media before deleting your Auth account and associated data. If cleanup is interrupted, some files may already be gone: the app explains that deletion is incomplete and lets you retry safely. A successful deletion ends your account's access. Deletion cannot be undone. For help, contact Kyle Velasco at kyle@hoopr.pro; Daniel Okoye at daniel@hoopr.pro is the backup contact.
15. Your choices and controls
You can edit most of your profile information at any time from Settings. You can control push notification permissions from your device settings and in-app preferences, and manage Smart Check-In and Auto Check-Out separately in Runs & Location. You can block or report another user, and manage or remove blocks from Settings → Blocked Accounts. You can deactivate your account (hides your profile, keeps your data, reversible) or permanently delete your account and data from Settings or the access/waitlist screen (see above).
16. Your privacy rights
Depending on where you live, you may have rights under applicable privacy law to access, correct, delete, or receive a copy of your personal information, or to opt out of certain uses of it. Many of these choices are already available directly in the app (editing your profile, deleting your account); for anything not available in-app, or to make a formal request under a law that applies to you, contact us at kyle@hoopr.pro or daniel@hoopr.pro and we'll respond consistent with our obligations under applicable law. We do not currently operate a state-specific automated rights-request portal, and we don't sell personal information or use it for cross-context behavioral advertising, which are the activities most state privacy laws are primarily concerned with letting you opt out of.
17. Children and minors
Hoopr is intended for users 16 and older and is not directed at children under 16. We do not knowingly allow anyone under 16 to create an account or knowingly collect personal information from anyone under 16. If we learn that a user is under 16, we will delete that account and associated data. If you believe a user under 16 has created a Hoopr account, please contact us at kyle@hoopr.pro or daniel@hoopr.pro so we can investigate. Because Hoopr does permit 16- and 17-year-old users, we've tried to be specific throughout this Policy — particularly around location, profile visibility, and messaging — about exactly what's collected and shown, rather than relying on a general "minors have fewer features" statement; today, 16- and 17-year-olds use the same core features as any other user.
18. Security
We use industry-standard measures, including row-level access controls on our database and encrypted connections, to protect your information. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.
19. International users
Hoopr's infrastructure and service providers currently operate in and process data in the United States. If you access Hoopr from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your location.
20. Changes to this policy
We may update this Privacy Policy as Hoopr evolves. Material changes will be reflected here with an updated effective date, and we'll do our best to let you know in the app when a change is significant.
21. Contact
Kyle Velasco is Hoopr's primary privacy, support and moderation contact: kyle@hoopr.pro. Daniel Okoye is the backup contact and a moderation owner: daniel@hoopr.pro. Urgent safety reports are reviewed as soon as practicable and within 24 hours; other reports within 48 hours. For immediate danger, contact local emergency services; Hoopr is not an emergency service.