Introduction
Honey Badger ("we," "us," or "our") operates the Honey Badger mobile application and the website at badgerbot.net (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy.
Information We Collect
We collect the following types of information:
- Account Information: Name, email address, phone number, and hashed password when you create an account.
- Gift Information: Recipient names, phone numbers, email addresses, gift types, gift values, personal messages, and challenge details that you provide when sending a gift.
- Challenge Submissions: Photos and text responses submitted by recipients to complete challenges.
- Usage Data: Server logs including IP addresses, request timestamps, and API usage for service operation and security.
How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Deliver gift notifications to recipients via SMS and email
- Send challenge reminders and completion confirmations
- Process challenge submissions (photos, text responses)
- Facilitate the gift sender's review and approval of challenge submissions
- Provide customer support
- Maintain and improve the Service
SMS and Mobile Information
No mobile information collected as part of the Honey Badger SMS opt-in will be shared with or sold to third parties or affiliates for marketing or promotional purposes.
Phone numbers provided for gift delivery are used solely to send transactional messages related to the gift and challenge lifecycle. These include:
- Initial gift notification
- Challenge reminders (based on sender settings)
- Submission confirmations
- Gift unlock notifications
For full details on our SMS practices, please see our SMS Consent Policy.
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties.
We may share information only in the following circumstances:
- Service Providers: We use third-party services to operate our platform, including Twilio (SMS delivery), SendGrid (email delivery), and cloud hosting providers. These providers only receive the minimum information necessary to perform their services and are bound by their own privacy policies.
- Gift Sender/Recipient: When a gift is sent, the sender and recipient can see limited information about each other as necessary for the gift exchange (e.g., sender's name, challenge details, submission photos).
- Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
Data Security
We implement appropriate security measures to protect your information:
- Passwords are hashed using bcrypt with industry-standard salt rounds
- Authentication uses JSON Web Tokens (JWT) with expiration
- HTTPS encryption for all data in transit
- Security headers via Helmet middleware
- Input validation and sanitization on all user inputs
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Gift and challenge data is retained for the duration of the gift lifecycle and a reasonable period afterward for record-keeping. You may request deletion of your account and associated data by contacting us.
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and data
- Opt out of SMS messages by replying
STOP
- Opt out of email notifications through your account settings
Children's Privacy
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
