Privacy

Privacy Policy

Last updated: August 18, 2026

The short version

We collect what the app needs to work: your account, your self-reported challenge progress, and the messages and photos you choose to post to your challenge group.
We never sell your personal data.
Group chat is not end-to-end encrypted. We can access reported content to keep the community safe.
We do use install-attribution and analytics tools. You can decline app tracking on iOS and we will not track you across other apps.
You can delete your account and all of your content from inside the app, at any time.

Who we are

75hotter (the "App", "we", "our", or "us") is operated by Daniel Hangan, an individual sole operator based in New York, United States. We are the data controller for the personal information described in this policy.

This Privacy Policy explains what information the 75hotter mobile application collects, why we collect it, who we share it with, and the choices you have. It applies to the App and to 75hotter.com. By using the App you confirm you have read this policy.

Questions, requests, or complaints: dan@dansugcmodels.com. We aim to reply within five business days.

Age requirement

You must be at least 13 years old to create a 75hotter account — or at least 16 if you are in the European Economic Area or the United Kingdom, where 16 is the minimum age for consent to information-society services in several member states.

If you are under 18, you may use 75hotter only with the knowledge and permission of a parent or legal guardian, and you should talk to a parent, guardian, and a doctor before starting any physical challenge. We designed 75hotter to be appropriate for teenage members: the App contains no sexual, violent, or otherwise mature content, and posting such content is grounds for immediate removal.

We do not knowingly collect personal information from anyone under 13. See Children's privacy below.

Information we collect

We collect only what the App needs in order to function. Nothing in this section is bought from data brokers — it either comes from you, or is generated by your use of the App.

a. Account information

When you sign up we collect your email address, a display name, and an internal user ID. If you choose Sign in with Apple or Sign in with Google, we receive the identifier and email address that service returns — including Apple's private relay address if you choose to hide your email. You may optionally add a profile photo and a short bio. Passwords, if you use one, are stored only as a salted hash by our authentication provider; we never see your password.

b. Challenge progress (self-reported)

75hotter tracks a 75-day challenge. The progress you record is created by you, by hand, in the App — for example daily task completion, workouts logged, water intake, pages read, diet adherence, your current day number and streak, notes you write, and any progress photos you choose to save.

75hotter does not read from or write to Apple HealthKit, Google Fit, or any other health platform, and does not connect to wearables. All fitness and wellness information in the App is information you typed or tapped yourself. Some of it may still be sensitive to you — we treat it accordingly, and we never use it for advertising.

c. Community content

75hotter includes a live group chat shared with other members doing the same challenge. When you post, we collect and store the message text, any photos you attach, timestamps, and which group the post belongs to. Reactions and reports you submit are stored the same way.

d. Subscription information

If you buy a subscription, the purchase is processed by Apple's In-App Purchase (or Google Play on Android). We receive a purchase receipt, the product you bought, the subscription status, and renewal or cancellation events through our subscription-management provider, RevenueCat. We never receive or store your card number, CVV, or billing address.

e. Device, diagnostic, and usage data

To keep the App stable we collect device model, operating system version, app version, language and region, crash reports and error logs, and product-analytics events describing which screens and features you used and when. This data is linked to your user ID so we can debug problems on your account.

f. Install-attribution and advertising measurement

We advertise the App, so we measure which campaign an install came from. This may involve a device or advertising identifier, an install timestamp, IP address, and the campaign parameters of the ad you tapped. See Tracking & advertising for the permission this requires and how to say no.

g. Push notification tokens

If you allow notifications, we store the push token your device issues so we can send challenge reminders and chat alerts. You can revoke this at any time in your device settings.

h. Support correspondence

If you email us, we keep the message and our reply so we have a record of the issue and its resolution.

How we use your information

To create and maintain your account and sign you in across devices.
To save, sync, and display your challenge progress and streak.
To deliver group chat in real time and show your posts to the other members of your challenge group.
To store and serve the photos you upload.
To screen content for safety, review reports, and enforce our community rules.
To unlock, renew, restore, and manage paid subscriptions.
To send push notifications you have opted into, and transactional email such as password resets.
To diagnose crashes, fix bugs, and improve performance and features.
To measure the performance of our advertising in aggregate.
To respond to your support requests.
To comply with law, enforce our Terms, and protect the rights and safety of our members.

We do not use your challenge progress, your chat messages, or your photos to train artificial-intelligence models, and we do not use them for advertising or marketing.

Legal bases (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

Performance of a contract: Account creation and sign-in, storing and syncing your challenge data, delivering group chat, hosting your photos, and providing subscription features. Without this processing the App cannot work.
Consent: Push notifications, app-tracking for advertising measurement where consent is required, and any optional analytics. You may withdraw consent at any time without affecting anything we did while it was in force.
Legitimate interests: Keeping the App secure and stable, preventing abuse and fraud, moderating community content, and understanding aggregate product usage. We have balanced these interests against your rights and use the least intrusive means available.
Legal obligation: Retaining records we are required to keep, responding to lawful requests, and reporting child sexual abuse material to the appropriate authorities.

Where self-reported wellness entries amount to health data under Article 9, we process them on the basis of your explicit consent, given when you choose to record them. You can delete them at any time.

Chat, photos & moderation

This is the most important section to read, because it is the part of 75hotter where your information becomes visible to other people.

Who can see what you post

Messages and photos you post in a challenge group are visible to every other member of that group, along with your display name and profile photo. Other members can see them, screenshot them, and remember them. Treat anything you post as public to your group. Do not post your home address, phone number, school, workplace, financial details, or anyone else's personal information.

Group chat is not end-to-end encrypted

Chat content is encrypted in transit and at rest, but it is not end-to-end encrypted. That is a deliberate trade-off: it is what allows us to screen for unsafe content and act on reports. It also means that we, and our hosting provider Supabase, are technically capable of accessing message and photo content. We access it only to investigate a report, respond to a safety or security incident, comply with a lawful request, or debug a specific failure you have asked us to fix.

Automated screening

Photos and messages posted to 75hotter pass through automated screening designed to detect nudity, sexual content, graphic violence, and abusive language. This is automated processing of your content. Content flagged by screening may be blocked from posting or removed, and may be queued for human review by us.

Reporting

You can report any message or member from inside the App. Reports include the reported content, who reported it, and when. We review reports and act within 24 hours, and we keep a record of the report and the content even if it has been removed from the chat, so we have evidence of what happened and can prevent repeat offenders returning. Full rules and consequences are in our Terms of Service.

No sexual content, ever

75hotter is a fitness challenge community that includes teenage members. Sexual or nude content is prohibited without exception. Progress photos are welcome but must show you appropriately clothed. Any content that sexualises a minor is reported to the National Center for Missing & Exploited Children and to law enforcement, and results in a permanent ban.

Tracking & advertising

We want to be straightforward here rather than claim more privacy than we deliver.

We do not show you ads inside the App. There is no ad network in 75hotter.
We do advertise the App elsewhere, and we measure whether that advertising works. To do that we use install-attribution and conversion-measurement tools provided by Meta and AppsFlyer.
We do not sell your personal data, and we never have.

On iOS, this measurement counts as tracking under Apple's App Tracking Transparency framework. The App will ask for your permission before accessing your device's advertising identifier. If you decline, we do not access that identifier and do not track you across other companies' apps or websites. You can change your answer at any time in Settings → Privacy & Security → Tracking, or turn it off everywhere with "Allow Apps to Request to Track". On Android, use Settings → Privacy → Ads → Delete advertising ID.

Where we hash an email address before sending it to a measurement partner, we do so precisely so the partner cannot read the underlying address.

International transfers

We operate from the United States and our providers store data on servers located primarily in the United States. If you use 75hotter from outside the US, your information will be transferred to and processed in the US, which may have different data-protection laws than your country.

Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, together with the safeguards our providers offer. You can ask us for details.

How long we keep data

Account and profile: Until you delete your account, then removed from live systems within 30 days.
Challenge progress and notes: Until you delete the entry or your account. Deleting your account deletes all of it within 30 days.
Progress photos: Until you delete them or your account, then removed from storage within 30 days.
Chat messages and photos posted to a group: Deleting your account removes your identity and your posted content from the group. Because chat is a shared conversation, other members may retain their own copies and screenshots outside our control.
Reported content and moderation records: Up to 12 months after the report is resolved, so we have a safety record and can enforce bans. Content we are legally required to preserve or report is kept as long as the law requires.
Analytics and crash data: Up to 24 months, after which it is deleted or aggregated so it no longer identifies you.
Purchase and subscription records: Retained as long as tax and accounting law requires, typically seven years.
Support email: Up to 24 months after the conversation ends.
Backups: Encrypted backups may retain deleted data for up to 90 days before they rotate out. They are never restored to reinstate data you asked us to delete.

Security

We protect your information with measures appropriate to its sensitivity, including:

encryption in transit (TLS) and encryption at rest;
row-level access rules so one member's data cannot be read by another;
hashed passwords and support for Sign in with Apple and Google;
least-privilege access — only the operator can access production data, and only when needed;
logging of administrative access to member content.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data and creates a risk to you, we will notify you and the relevant regulator within the timeframes the law requires. Use a strong, unique password and tell us immediately at dan@dansugcmodels.com if you think your account has been accessed by someone else.

Your rights & choices

Wherever you live, you can ask us to:

Access — give you a copy of the personal data we hold about you.
Correct — fix data that is wrong or incomplete.
Delete — erase your account and content.
Port — export your data in a machine-readable format.
Restrict or object — pause or stop certain processing, including processing based on legitimate interests.
Withdraw consent — for notifications, tracking, or optional analytics.

To exercise any of these, use the controls in the App or email dan@dansugcmodels.com. We will verify your request against your account and respond within 30 days (45 days for California requests, extendable once with notice). Exercising a right will never cost you anything or degrade your service.

If you are in the EEA or UK

You have the right to lodge a complaint with your local supervisory authority — for example the Irish Data Protection Commission or the UK Information Commissioner's Office. We would appreciate the chance to address your concern first.

If you are in California

Under the CCPA as amended by the CPRA you have the rights to know, delete, and correct, the right to opt out of sale or sharing, and the right to limit use of sensitive personal information. We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information for any purpose other than providing the App. We do not discriminate against anyone who exercises their rights, and we do not offer financial incentives for data. An authorised agent may submit a request on your behalf with proof of authorisation.

Other US state privacy laws

Residents of states including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana have comparable rights to access, correct, delete, and port their data, and to opt out of targeted advertising and profiling. Use the same contact address above. If we deny your request, we will explain why and how to appeal.

Deleting your account

You can delete your 75hotter account and all of its content from inside the App: Profile → Settings → Delete account. Deletion is permanent — your challenge history, streak, photos, and posts cannot be recovered afterwards, and there is no way to reverse it.

Your data is removed from live systems within 30 days and rotates out of encrypted backups within 90 days. We keep only what the law or a live safety investigation requires, as set out in How long we keep data.

Deleting your account does not cancel your subscription — subscriptions are billed by Apple or Google and must be cancelled in your Apple ID or Google Play account settings. If you prefer, email dan@dansugcmodels.com and we will delete your account for you.

Children's privacy

75hotter is not directed to children under 13, is not listed in the Kids Category, and we do not knowingly collect personal information from anyone under 13. We do not use the App to build advertising profiles of minors, and we do not serve behavioural advertising to anyone in the App.

If we learn that a user is under 13, we will disable the account and delete the associated personal information promptly. Parents and guardians who believe a child under 13 has given us information can email dan@dansugcmodels.com and we will delete it. Parents of members aged 13 to 17 may also request access to, correction of, or deletion of their child's information at the same address.

Members between 13 and 17 have access to group chat with other members. We keep that space appropriate through the automated screening, reporting, and enforcement described in Chat, photos & moderation, but no moderation system is perfect. We encourage parents to talk with their teenager about not sharing identifying details with people they do not know.

Changes to this policy

We may update this policy as the App changes or the law changes. The "last updated" date at the top always reflects the current version. If a change materially affects how we use your personal information, we will notify you in the App or by email before it takes effect, and where the law requires it we will ask for your consent. Continuing to use 75hotter after a change takes effect means you accept the updated policy.

Contact us

75hotter, operated by Daniel Hangan
447 Broadway, 2nd Floor, #3326
New York, NY 10013, United States
Email: dan@dansugcmodels.com

See also our Terms of Service, which govern your use of the App and set out the community rules.