1. Who we are
Hoyst is operated by Wave Link, LLC, at 24 Knowles Rd, Cataula, Georgia 31804-3908, United States, referred to as “Hoyst,” “we,” or “us.” Wave Link, LLC is based in Georgia. This policy covers the Hoyst app, hoyst.app, and related support services. Hoyst is offered to users in the United States.
For privacy questions or requests, email support@hoyst.app.
2. Information we collect
Account and profile information
When you create or use an account, we process your account identifier, chosen sign-in method, display name, username, timezone, and preferences. Depending on your sign-in method, we also receive an email address, phone number, or information provided by Apple or Google. You can choose to add a profile photo or bio. We also record your confirmation that you are 18 or older, the Terms and Privacy Policy versions presented, and the time of your Terms acknowledgment. This does not involve collecting your date of birth or independently verifying your age.
Email-and-password credentials are handled through Firebase Authentication. If you use phone sign-in, your number is sent to Google for authentication and its spam and abuse prevention across Google services. Verification texts and carrier charges may apply.
Commitments, Circles, and activity
We store the commitments and Circles you create or join, their titles and descriptions, goals and quantities, schedules, timezone settings, visibility choices, membership and invitation records, and join requests. We also process Tap In results and dates, notes and photos you choose to add, Circle messages and attachments, nudges, notification activity, and progress such as streaks, momentum, XP, achievements, and rewards.
Commitments and notes can reveal sensitive information, including information about health or personal routines. Share only information you are comfortable providing and that you have permission to share.
Device, connection, and operational information
Our hosting, authentication, notification, and other service providers process information needed to run and protect the service. This can include IP addresses, app and operating-system versions, device and subscription identifiers, language, timezone, request timestamps, delivery or interaction events, session information, and error or security logs. Some processing can occur when you browse without signing in.
Optional purchases and support
If purchase features are available, we process product identifiers, transaction and verification records, purchase status, and associated reward balances. The app store handles payment details; Hoyst does not receive your full payment-card number through its in-app purchase flow.
If you contact us, we receive your message, contact details, attachments, and any information you choose to provide.
Local storage and permissions
The app stores preferences, setup drafts, and cached information on your device. Authentication credentials or tokens are also stored using the relevant platform and provider mechanisms. You can grant or decline notifications and choose whether to provide photos through the device’s photo tools. Declining an optional permission may limit that feature.
The current Hoyst website does not include advertising or analytics scripts. Hosting providers still process connection and request information when you visit.
3. How we use information
- Provide sign-in, profiles, commitments, Circles, Tap Ins, messages, and progress features.
- Apply your schedules and timezone, calculate progress, and maintain an accurate activity and reward history.
- Deliver reminders, invitations, nudges, Circle updates, and other communications according to available preferences and device permissions.
- Personalize the experience, including short AI-generated Home greetings where enabled.
- Verify purchases, prevent duplicate rewards or fraud, provide support, troubleshoot problems, and protect the service.
- Respond to privacy requests and comply with applicable legal requirements.
Where applicable law requires a legal basis, we rely on providing the service you request, legitimate interests such as service security and reliability, consent where required, and compliance with legal obligations.
4. What others can see
Your chosen basic profile is public. Your display name, username, profile photo, and bio can be visible to other people, including people browsing public Circles. Keep sensitive information out of these fields. Timezone, sign-in provider details, and internal account fields remain private to your account and the services needed to operate Hoyst.
Public Circles can be discovered without signing in. Their descriptions and public activity summaries may identify participants, their profile information, and that they have Tapped In. Choosing a public Circle can make participation visible beyond its members.
Circle members can see shared activity. Depending on the feature, this includes Tap In results, dates, quantities, notes, photos, membership details, and messages. Private and link-only Circles have different discovery and access controls. A link-only invitation can be forwarded; it is not a guarantee that only the original recipient will find the Circle.
Some uploaded images use shareable download links. People who receive content or its link may save, copy, or forward it. We cannot recall screenshots, exported share cards, or copies other people keep.
5. Service providers and other sharing
We use outside services to operate Hoyst. They receive information relevant to the features they provide:
- Google Firebase and Google Cloud: authentication, database and file storage, server functions, website hosting, and operational or security processing. See Firebase privacy information.
- Apple and Google sign-in: account authentication if you choose their sign-in options. Their handling of your account with them is governed by their own policies.
- OneSignal and platform push services: notification subscriptions, delivery, device and session information, and notification interactions. We link your Hoyst account identifier to your notification subscription after sign-in. OneSignal can collect SDK information before you sign in or enable notification delivery. See OneSignal’s SDK data information.
- Google Gemini, where enabled: generation of short Home greetings using your first name, the relevant Circle or commitment title, summary counts, and action context such as a due Tap In. These prompts do not intentionally include your photos or full message history. Hoyst uses the API through a project with active billing. Under Google’s paid service terms, prompts and responses are not used to improve Google’s products, but may be logged temporarily for safety, abuse prevention, or required disclosures. See Gemini API terms.
- RevenueCat and the app stores, where configured: purchase processing and verification using your Hoyst account identifier, product and transaction records, and associated service or device information. See RevenueCat’s privacy policy.
When you use a share sheet, email app, browser, or another external service, information you choose to send is handled by that service and the recipient.
We may also disclose information when reasonably necessary to comply with law, protect people or the service, investigate abuse or fraud, or complete a business transaction such as a merger, subject to applicable protections.
We do not sell your personal information or share it for targeted advertising. We do not use members’ posts or photos in Hoyst marketing. Information is shared with service providers for the purposes described above, subject to applicable agreements and law.
6. Your choices and privacy rights
You can edit available profile details, choose Circle visibility when supported, manage notification preferences after sign-in, and change device permissions in your operating-system settings. Turning off notification delivery does not by itself erase an existing provider subscription record or stop all operational SDK processing.
To delete your Hoyst account, open Profile → Settings → Delete account and follow the confirmation steps. If you cannot sign in, contact support for help.
Depending on where you live and the laws that apply, you may have rights to access, correct, obtain a copy of, delete, restrict, or object to certain uses of your information; withdraw consent; or appeal a request decision. You may also have a right to contact your local privacy regulator.
Email support@hoyst.app to make a request. We may need to verify your identity and authority to protect your account. We will handle requests as required by applicable law and will not penalize you for exercising applicable privacy rights.
7. Retention and deletion
We retain your account information and personal activity history while your account is active and the information is needed to provide Hoyst. Leaving or archiving a Circle does not erase your personal history. That history is retained until you delete your account or remove the relevant information through a supported deletion option, subject to the limited exceptions below.
The in-app account deletion process removes your Hoyst profile, private account records, memberships and related account activity, uploaded account files, and authentication account. It also deletes Circles you own, including their shared content, which can affect other members.
Limited records may remain where needed for security, fraud prevention, purchase verification, legal obligations, or backups. The reward system keeps hashed transaction-claim records to prevent purchase replay. Hashing does not necessarily make a record anonymous.
We request deletion of account-linked notification records and, where configured, RevenueCat customer records during account deletion. Providers may process these requests asynchronously. Copies shared with other people, store transaction records, and provider security or legal records may remain subject to their own retention rules. Anonymous device records can also be created when you continue using the signed-out app. Deletion from an active service and expiry from logs or backups may occur at different times.
We remove greeting caches linked to your account during deletion and use scheduled cleanup for older temporary greeting caches and generation counters. A minimal server-only deletion marker remains to prevent delayed requests from recreating account data. It contains an account identifier and deletion timestamp, rather than your profile or activity history.
8. Security and processing locations
We use access controls and other technical measures designed to protect account data. No system can guarantee complete security. Keep your credentials private and tell us promptly if you suspect unauthorized access.
Hoyst and its providers may process information in the United States and other countries where they operate. Privacy laws can differ between countries. Where required, appropriate transfer safeguards must apply.
9. Age eligibility
Hoyst is intended for adults aged 18 or older in the United States. People under 18 may not use Hoyst. We do not knowingly seek personal information from people under 18. If you believe a minor has provided information, contact support@hoyst.app so we can investigate and take appropriate action, including deletion where required.
10. Changes and contact
We may update this policy as Hoyst and applicable requirements change. We will identify the effective date and provide any notice or choices required by law before material changes take effect.
Questions or requests: support@hoyst.app.
Business contact address: 24 Knowles Rd, Cataula, Georgia 31804-3908, United States.