Privacy policy

We collect the minimum we need to run Hackyard, we use it only for that, and you can delete everything from inside the app. We follow India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

• · Account: your email or OAuth identity (Google, GitHub), name and handle.
• · Profile you choose to add: city, college, roles, skills, bio, links, avatar.
• · Phone number, only to verify you are a real person. It is never shown publicly; we display it masked.
• · What you post: ships, proofs, feedback, kudos and challenge entries.
• · Public work you connect: GitHub, Figma, URLs and domains — public data only, read to detect ships and verify ownership.
• · Basic product analytics (pages viewed, key actions) to improve the app. No ad tracking.

Liveness and human checks run through a third-party provider. We never receive or store ID images, ID numbers or face data. The provider tells us one thing: yes or no. That result becomes a public badge; your trust score is never shown to anyone.

You consent when you create an account and when you connect each service. Each connection has one purpose — importing your public work or verifying ownership. You can withdraw consent any time by disconnecting it in Settings.

Your profile, ships, badges and ranks are public. Your email and phone are not.

Founders can request an intro through Discover. Your email is shared with them only if you accept. You can turn discoverability off in Settings.

We don’t sell personal data. Processors (hosting, auth, email/SMS, analytics) act only on our instructions.

Access, correct or erase your data. Edit everything in Settings; delete your account there too — it removes your profile, ships, feedback and connections.

Grievances: write to hello@hackyard.org. We respond as quickly as we can, within the timelines the DPDP Act sets.

We keep data while your account is active. Phone verification codes expire in minutes. Data is encrypted in transit, and access is limited to the people who run Hackyard.