Privacy Policy

Last updated: November 4, 2026

This policy explains what personal data Heya Hop collects, why we use it, and the choices you have.

1. Who we are

Heya Hop is run by Bypass Inc., based in Tokyo, Japan. We are responsible for the personal data described in this policy. Contact: [email protected].

2. What we collect

Account details: your email address if you add one, a guest ID if you play as a guest, and how you sign in (email, Apple or Google).
Profile and game data: your display name, HOP code, room layouts, avatar, inventory, wallet, friends, notes, gifts, likes and votes.
Purchase receipts: confirmation of what you bought through the App Store or Google Play, processed through RevenueCat. We never see your card details.
Push tokens: a device token so we can send the notifications you allow.
Crash and usage data: device model, app version, crash reports and how features are used.

3. How we use it

To run the game and keep your rooms, items and friends in sync.
To process purchases and restore them on a new device.
To send the notifications and emails you asked for.
To keep players safe, through moderation, fraud prevention and rate limits.
To fix bugs and improve the game.

4. Service providers

We do not sell your personal data. We share it only with providers that help us run Heya Hop, under contracts that limit how they use it:

Cloudflare (hosting, database and storage)
RevenueCat (purchase validation)
Apple and Google (sign-in, payments and app distribution)
Our email provider (account and service emails)
Firebase Cloud Messaging (push notifications)

5. Children

Heya Hop is for players aged 12 and up. Players under the age of majority need a parent or guardian's permission. If you believe a child under 12 has given us personal data, contact [email protected] and we will delete it.

6. How long we keep it

We keep your data while your account is active. When you delete your account, we delete your profile, rooms, avatar, inventory and wallet. We keep anonymized ledger and purchase records only as long as the law requires.

7. Your rights

You can export your data and delete your account from Settings > Account in the app. You can also ask us to access, correct or delete your data by emailing [email protected].

Depending on where you live, you may have more rights, including the right to complain to a data protection authority.

8. International transfers

Our providers run services around the world, so your data may be processed outside your country, including in Japan and the United States. We use contractual and technical safeguards to protect it wherever it is processed.

9. Contact

Questions about privacy: [email protected].