01Who we are
Hunt is run by Rispit, a company registered in Sri Lanka at 84/4, Postoffice Lane, Vannarpannai, Sri Lanka. In this policy, “Hunt”, “we” and “us” mean that company.
This policy covers the Hunt app for explorers, the Hunt Business app and our website. We handle personal data under Sri Lanka's Personal Data Protection Act, No. 9 of 2022.
For any privacy question or request, email info@rispit.com or write to the address above. Our data protection officer is [name or role].
02What we collect
We collect only what we need to run Hunt. Some of it you give us, and some is created when you use the app.
| Data | What it includes | Why we need it |
|---|---|---|
| Account details | Name, email, phone number, profile photo, sign-in ID if you use Google sign-in | Create your account, sign you in, contact you about your account |
| Precise location | GPS position while you check in or browse the map | Show places near you and confirm you are at a place before a visit counts |
| Photos and videos | What you capture in Hunt, with the time and place it was taken | Verify your visit, award points, and show your posts if you choose to share them |
| Points and rewards | Points earned, visits, offers saved, rewards redeemed | Keep your wallet balance and history correct |
| Activity in the app | Places viewed, searches, follows, likes | Improve suggestions and fix problems |
| Device data | Device model, operating system, app version, language, crash logs, IP address | Keep the app working, secure and free of fraud |
| Messages to us | Support emails and reports | Answer you and resolve issues |
We do not collect your contacts, call logs, SMS, health data or financial data beyond payout details.
03Location
Hunt needs your precise location to confirm you are really at a place. Each place has a check-in circle, for example 100 m around a café. A photo or video earns points only when it is taken inside that circle.
- While using the app: we read your location when you open the map, look for places nearby or capture a visit.
- In the background: only if you turn on nearby alerts. We then check your location now and then to tell you about offers close by. You can turn this off at any time.
- What we store: the location attached to each visit, so we can show your history and check for fraud. We do not keep a continuous track of where you go.
You can turn location off in your phone's settings. Hunt will still work for browsing, but visits cannot be confirmed and will not earn points.
04Photos and videos
Hunt uses your camera only when you open it to capture a visit. We do not access the rest of your gallery unless you choose a file to upload.
- The business sees your visit. The place you visited can see the photo or video, your display name and the time, so it can confirm your visit and reward you.
- Posting is your choice. If you share a capture to the feed, other Hunt users can see it, along with your display name and the place.
- Location data in files. We remove precise location data from shared photos and videos. Only the place name is shown.
- Please be respectful. Avoid capturing people who have not agreed to it, and don't post anything illegal or harmful. We may remove content that breaks our Terms.
- Deleting. You can delete a post at any time. Points already earned from that visit may be reversed.
05How we use your data
We use your data for these purposes, and for each one we rely on a lawful reason allowed under Sri Lankan law.
| Purpose | Lawful reason |
|---|---|
| Run your account, confirm visits, award and redeem points | Needed to provide the service you signed up for |
| Use your location and camera | Your consent, given through your phone's permission prompts |
| Send offers and nearby alerts | Your consent, which you can withdraw in Settings |
| Detect fake check-ins, fraud and abuse | Our legitimate interest in keeping rewards fair |
| Improve the app and fix crashes | Our legitimate interest, using data that is grouped or de-identified where possible |
| Keep records for tax, accounting or legal requests | Legal obligation |
We do not use your data for automated decisions with legal effects on you. Our fraud checks may hold points for review. If that happens, a person reviews it and you can ask us to look again.
We do not sell your personal data, and we do not show third-party advertising based on your personal data.
07For businesses
If you list a place on Hunt Business, we collect the owner's or staff member's name, email and phone number, plus the business name, address, map position, check-in radius, photos, offers and point rules.
- Business details and offers are public in the Hunt app.
- Guests' visits and captures are shared with you only to confirm visits and run rewards. You may not use guest data for anything else, such as adding guests to marketing lists, without their separate consent.
- We show you visit counts and summary statistics. These are grouped, so individual guests cannot be identified from them.
- If you add staff accounts, you are responsible for giving them access only to what they need.
08Keeping and protecting data
We keep data only as long as we need it.
| Data | How long we keep it |
|---|---|
| Account details | While your account is open, then deleted within 30 days of closing it |
| Visits, captures and points history | While your account is open; public posts are removed when you delete them or your account |
| Payout and transaction records | 7 years, as required for tax and accounting |
| Device data and crash logs | Up to 12 months |
| Fraud and abuse records | Up to 2 years after the event |
Security. Data is encrypted in transit (HTTPS) and at rest. Staff access is limited and logged, and we review our security regularly. No system is completely secure, so if a breach affects you, we will tell you and the authorities as the law requires.
Storage outside Sri Lanka. Our servers may be located outside Sri Lanka, for example in [Singapore or India]. When data leaves Sri Lanka, we use providers with protections that meet the standard required by Sri Lankan law.
09Your rights and choices
Under Sri Lanka's Personal Data Protection Act you can:
- See the personal data we hold about you and get a copy.
- Correct data that is wrong or out of date.
- Delete your data, unless we must keep it by law.
- Withdraw consent for location, camera or notifications at any time.
- Object to uses based on our legitimate interest.
- Complain to the Data Protection Authority of Sri Lanka if you are not happy with our response.
How to do it:
- Most settings are in the app under Profile → Settings: edit your profile, turn off notifications, or download your data.
- For anything else, email info@rispit.com. We reply within 21 working days and may ask you to confirm your identity first.
You can also turn off location or camera access in your phone's settings.
10Children
Hunt is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has signed up, email us and we will delete the account.
11Changes to this policy
We may update this policy as Hunt grows. The date at the top shows the latest version. For important changes, we will notify you in the app or by email before they take effect.