Privacy Policy

HopeCon 2026 and this app are run by Hopeful Disasters, a Washington organization — the same people you see in the app as the HD Team. The app lives at hopecon.org and exists for a single event, HopeCon 2026.

This page is about the app. Things you gave us elsewhere — the registration form, an email, a conversation — are not governed by it.

Questions about anything on this page, or a request to change or delete something: email hopecon@hopefuldisasters.org, or speak to any HopeCon admin.

This came from your registration form, before the app existed.

• Your name, and a preferred name if you gave one
• Email address and phone number
• Up to two emergency contacts — name, phone number, and how they know you
• Medical notes, food allergies, and dietary needs
• T-shirt style, color and size
• Your Discord handle
• How you planned to get here, and what you were excited about

• Your password — Handled by Supabase Auth and stored hashed. Nobody at HopeCon can see it — not admins, not us. If you forget it, the only thing we can do is send you a link to set a new one.
• Your photo — Optional. Stored in a private bucket and shown only through short-lived links to signed-in people.
• Your travel details — Whether you are driving or flying, where you are meeting the group, your airline and flight numbers, dates and times, any connecting flights, which airport, whether you need collecting or dropping off, and any notes you add.

None of this is hidden from you — but read receipts in particular are the kind of thing people assume is not happening, so it is spelled out.

• Sign-in activity — When your account was created, when an invitation was sent, how many were sent, and whether you have signed in and set a password.
• Read receipts — Whether you have opened a message or notification, and when. Admins can see who has and has not read an update. This is how we know whether an important message actually landed.
• Push notifications — If you turn them on, your browser issues a subscription — a delivery address and two encryption keys. It is not your phone number or a device ID, and it cannot be used to recognize you anywhere else. Turning notifications off deletes it.
• At the event — Whether you have checked in, when, and which admin checked you in.
• Payment status — Whether your event fee is outstanding, self- reported, or settled — recorded by a super admin. No card or bank details ever touch this app; payment happens somewhere else entirely.

When you enter a flight number, the app asks a flight data service (AeroDataBox) about that flight so it can show delays and the right terminal. We send the flight number and the date. We do not send your name, and the service is not told that a person is attached to it.

What comes back is stored: status, scheduled, estimated and actual times, delay, terminal, gate, baggage belt, and the origin and destination airports.

• No analytics, no tracking pixels, no advertising, and no third-party cookies. The only cookie is the one that keeps you signed in.
• No card numbers, bank details, or payment credentials — those never reach this app.
• No location tracking. The app knows which airport your flight lands at, and nothing else about where you are.
• Nothing is sold, rented, or shared for marketing. Nobody outside the people and services named on this page sees any of it.
• The app asks search engines not to index it, and every page requires a sign-in.

• You — Everything the app holds about you.
• Admins — Your name, email, phone, emergency contacts, medical notes, allergies and dietary needs, travel and flight details, t-shirt size, photo, and whether you have signed in or read an update, and anything you write back to us when you reply to a message. Admins can read these; only super admins can change them.
• Super admins — All of the above, plus payment status. They are also the only people who can change someone's role or edit sensitive fields.
• Other attendees — Your name and photo, if you are sharing an airport run. Drivers see their riders' phone numbers and riders see their driver's, because that is what a missed connection needs. An admin's contact details appear on the "Need to reach us?" card only if that admin was deliberately added to it.
• Everyone else — Nothing. There is no public page.

These companies hold or handle data on our behalf. All are US-based.

• Supabase — The database, sign-in, and photo storage. This is where almost everything lives.
• Vercel — Hosts the app itself.
• Resend — Sends email. Sees your name, your email address, and the contents of what we send you.
• Apple and Google push services — Deliver push notifications to your device. The contents are encrypted before they leave our server, so the push service can see that a notification is going to you but not what it says.
• Sanity — Stores the text of posted updates. No personal information.
• AeroDataBox — Flight data. Receives flight numbers and dates, nothing about you.

This app is for people attending HopeCon. Once HopeCon 2026 is over you do not need it, so we do not leave it open and we do not leave the sensitive parts sitting in a database indefinitely.

• Your access ends — Accounts are switched off after the event. If you come to a future HopeCon you will register again and get a fresh invitation — there is no account quietly waiting for you in the meantime.
• The sensitive fields are deleted — Your medical notes, food allergies, dietary needs, emergency contacts and phone number are removed from the app after the event. They exist to keep you safe over four days in rural Missouri, and after that they are only a liability.
• HopeCon 2026 is archived — The rest — who came, how they travelled, t-shirt sizes, what was posted, how the airport runs went — is kept as an archive of this year's event, so the people planning the next one can look back at what actually happened instead of guessing. Only admins can open it.

You do not have to wait for the event to be over. Ask us at any time and we will delete your account from the app and everything attached to it — registration, travel, photo, messages, the lot. It is one action and it cascades.

• Push notifications can be turned off at any time on the Notifications page. Everything else in the app keeps working.
• The photo is optional. You can replace or remove it whenever you like.
• Anything that is wrong can be corrected — tell an admin, or fix travel details yourself.
• You can ask us to delete your account entirely, before or after the event.

Who can read what is enforced by the database itself, not just by the screens — so a page that forgets to check still cannot leak anything. Photos sit in a private bucket behind expiring links. Passwords are hashed and unreadable to us.

No system is perfect and this one was built by volunteers. If you ever see something you should not be able to see, please tell us rather than looking further — we will fix it and thank you.

Everyone attending HopeCon 2026 is an adult, so this app is not built or intended for children and we do not knowingly hold information about anyone under 18.

If what the app collects changes in a way that matters, we will post it as an update in the app rather than quietly editing this page and changing the date.