Privacy Policy

Last updated 13 November 2026

Hic finds you one plan worth doing. To do that well it needs to know a little about you. This page says what we collect, why, and how to switch it off. In short: we collect what makes the plans better, and we do not sell your data.

Hic is operated by Hic Exploration SA, Via Carlo Maderno 23, 6900 Lugano, Switzerland, which is responsible for your data. For any privacy question, write to legal@hic.studio.

What we collect

Your account

Email, username, password (stored hashed, never readable) or your Apple or Google sign-in, avatar, and language.

Your taste

What you tell us in the app: interests, the things you never want in a plan, and the answers you give when you refine a plan. Optional details such as birth date (we use it as an age bracket), city and where you live. If you choose to share three photos to describe your taste, an AI model reads them and we keep the tags it returns, not the photos.

What you ask Hic

The words you type or say to Hic to find a plan, change it, or ask about a place, an event or a community, with what Hic did with them. We keep them to see what people ask and to make the answers better. A rule about you, such as something you never eat, is kept only as the rule, not in your words.

When you speak, your phone turns your voice into text, on the phone where it can, otherwise through Apple's or Google's speech service. We keep the text, never the audio. To answer a sentence, an AI model reads it together with what is on your screen.

Location

With your permission, your device location while you use Hic. It decides what is near you, how you get there, and whether you have arrived at a stop. Without it, Hic still works from your city.

What you do in Hic

Plans shown, started, finished and skipped, check-ins, places you save, communities you follow, and what you share. This is how the next plan gets better.

Friends

The friends you add and the plans you send or join together. If you let Hic look at your contacts, each email and phone number is turned into a one-way code on your phone and only that code is sent, to find friends already on Hic. We never upload your address book.

Calendar

If you connect your calendar, Hic reads today's events on your phone to find your free time. Titles, people and times never leave your phone and are not stored. If you add a plan to your calendar, Hic writes that one event.

Bookings

What you booked, when, and the price. Card details are handled by Stripe. We never see or store your full card number.

Device and technical data

Device type, app version, a push notification token, crash and error reports, and IP address. These keep Hic working and secure.

Analytics and crash reports

Only if you say yes. Then PostHog records how the app is used and any crashes, linked to your account. You can change your answer in Settings at any time.

Who helps us run Hic

We use a small set of providers. Each one handles only its part, on our instructions, under its data protection terms:

• Supabase for accounts and the database, in Zurich.
• Amazon Web Services for our servers, in Milan.
• Anthropic and OpenAI for AI models that help build plans and read taste photos.
• Stripe for payments.
• Mapbox for maps.
• Google and Apple for sign-in and push notifications.
• PostHog for analytics and crash reports, in the EU, only with your consent.
• Ticket partners such as Tiqets, only for the bookings you make with them.

Some of these providers process data outside Switzerland and the EU. When they do, the transfer is covered by the European Commission's standard contractual clauses or an equivalent safeguard recognised under Swiss law.

Who else sees what

• Your friends see your name, avatar and the plans you share with them or go on together.
• Anyone with a shared plan link sees that plan, not your profile.
• A venue or ticket partner gets the details needed for a booking you make with them.
• Authorities, only when the law requires it.

Why we are allowed to

We process your data to provide the service you signed up for, with your consent where we ask for it (location, contacts, calendar, photos, analytics, notifications), and for our legitimate interest in keeping Hic secure and improving it. This follows the Swiss Federal Act on Data Protection and, where it applies, the GDPR.

How long we keep it

• Your account and everything in it: while you use Hic.
• When you delete your account, in the app or by email, it is deleted within 30 days, with your profile, plans, friends, check-ins and settings.
• Payment and booking records: 10 years, as Swiss accounting law requires. They are kept without your name or account.
• Analytics and crash reports: deleted with your account if you ask us. Write to legal@hic.studio.

Your controls

• Turn location, contacts, calendar, notifications and analytics on or off at any time, in Settings or on your phone.
• Delete your account in Settings or at hic.studio/delete-account.
• Ask us for a copy of your data, to correct it, to delete it, or to move it elsewhere.
• Complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or to your local data protection authority in the EU.

For any of these, write to legal@hic.studio. We answer within 30 days.

Cookies

This website uses only the cookies it needs to work. No advertising cookies.

Minimum age

Hic is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a minor has an account, write to legal@hic.studio and we will delete it.

Changes

If this policy changes in a way that matters, we will tell you in the app or by email before it applies. The date at the top always shows the current version. The Terms and Conditions cover the rest of how Hic works.