Privacy Policy

This Privacy Policy explains how conec.io (HuaHinApp) collects, uses, stores, and shares personal data. We operate in Hua Hin, Thailand and follow the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and other Thai law that applies.

By creating an account and ticking that you accept this policy, you acknowledge this notice. Contact the data controller at hello@conec.io.

1. What we collect

We collect the data you give us and data created when you use the Service:

• Account: name, email, WhatsApp / mobile number, password (stored as a hash), optional sex, age, nationality, bio, interests, profile photos.
• Google, Apple, and LINE Login: if you tap Continue with Google, Apple, or LINE we receive only what that app shares after you agree on their screen. That is usually your name, an email address (LINE only if you allow email), a profile photo, and a stable account id from that provider (Google sub, Apple user id, or LINE user id). We do not receive your Google, Apple, or LINE password, friend list, chats, or phone number from those logins. Phone, sex, age, nationality, and the rest of your conec.io profile are typed by you afterwards.
• Family: if you mark yourself as a parent, children’s names, sex, and age that you enter so parent events can show which child a meetup suits.
• Business: listing name, address, map pin, phone, photos, logo, hours, social links, deals, loyalty rules, staff scan codes, owner accounts.
• Activity: events you create or RSVP to, reviews, saved vouchers, loyalty stamps, meet requests and chat, referral codes, and Out Now location as described below.
• Enquiries: property search preferences and service callback requests, using the phone and email on your profile.
• Devices and notifications: if you allow notifications, a push subscription for that phone (endpoint and keys) so we can deliver messages.
• QR stickers and t-shirts: when someone scans a printed code we record that the code was scanned, whether a link was tapped, and whether a signup finished from that scan. We store a visitor cookie so unique people can be counted.
• Technical: session cookies, referral cookies, sticker cookies, and basic request logs needed to run and secure the site.
• Location, only if you turn Out Now on: the phone or browser asks for location permission at that moment. If you refuse, we do not read GPS and Out Now cannot use live location. While Out Now stays on, the website reads location in that open session, and the iOS and Android apps may also ask to refresh it in the background so the area name stays current. Android shows a notification that Out Now is on. We do not read GPS when Out Now is off.

The GPS reading is a latitude and longitude. We keep it on our servers only for that Out Now session, which lasts about two hours or until you turn Out Now off, and then we delete that live location. We use it to check you are in Hua Hin, to label the nearest public area (for example “Near Soi 94”), and to decide who is nearby. Other members see that area name. They do not receive your coordinates, a metre distance, or a pin on a map. Map pins on business and property pages are addresses those businesses supplied, not a member’s GPS.

2. Why we use it

We use personal data to:

• create and secure your account (including Sign in with Google, Apple, or LINE), and send verify links by email or WhatsApp;
• show your public profile, listings, events, and reviews to other members;
• match parent events to the ages you saved for your children;
• run loyalty stamps, vouchers, referrals, and business dashboards;
• send notifications you allowed, including meet alerts and community messages;
• keep Out now and event chat so conversations work, and so platform admins can review a member’s chat history for safety, abuse, and support;
• when you allow location and turn Out Now on, place you in a Hua Hin area and show nearby members that area name rather than your exact position;
• count QR scans, clicks, and signups for table stickers and t-shirt codes;
• handle property and service enquiries you submit;
• detect abuse, spam, and fraud, and to keep the Service working.

Under the PDPA, this is for performance of the contract (the account), our legitimate interests in running a community app, consent where you tick a box, allow notifications, or allow location on the phone, and legal duties where Thai law requires a record. You can withdraw location permission in the phone or browser settings, and you can turn Out Now off at any time.

3. Who we share with

We do not sell your personal data. We share it only as needed to run the Service:

• other members see the public parts of your profile, events, and reviews, and, if you are Out Now, your area name — not your GPS coordinates;
• platform admins can open a member’s chat history (Out now DMs and event chat) from the Members page;
• a business sees stamp and voucher redemptions at their venue;
• our property desk and partner developers see an enquiry you submit about homes;
• processors who host or send for us — website hosting (including Vercel), live data stored via GitHub, email (Namecheap mailbox hello@conec.io), WhatsApp / SMS (Twilio) when those are connected, and the login providers you choose (Google, Apple, LY Corporation / LINE);

Some processors are outside Thailand. Where we transfer data abroad we do so to operate the Service and we take steps that are reasonable for a small operator, including using reputable providers and access controls. You acknowledge that hosting and backups may sit on servers outside Thailand.

We may disclose data if Thai law or a lawful order requires it, or to protect people from serious harm.

4. Cookies and similar tech

We use a session cookie so you stay signed in, referral cookies so friend invites can be credited, sticker cookies so a QR scan can be tied to a later signup, and a language cookie. Push subscriptions live on your account record so a notification can reach that phone. Analytics (including Vercel Speed Insights and Google Analytics when connected) and advertising cookies for Google Ads, Facebook / Meta, and similar partners stay off until you allow them on the CookieYes banner. See the Cookie Policy to change that choice. You can also block cookies in the browser; some features will then stop working.

5. How long we keep it

We keep account data while the account is open. If you ask us to delete it, we remove the live profile and move the record to a deleted list so it does not come back on restore, unless we must keep a copy for legal, security, or accounting reasons. Chat messages stay in the live events store while needed to deliver the conversation and for safety or support review; they are not a public page. QR scan stats are kept as counts and event logs so businesses and admin can see how codes perform.

6. Your PDPA rights

Subject to the PDPA, you may request access, a copy, correction, or deletion of your personal data, object to or restrict certain uses, and withdraw consent (for example notifications) without affecting processing we already completed. Email hello@conec.io. You may also complain to the Personal Data Protection Committee in Thailand.

You can edit much of your data yourself in Profile. Turning off notifications stops new push messages; it does not delete the rest of your account.

7. Children

The Service is for adults. We do not knowingly create accounts for anyone under 18. Child details on a parent profile are only what you type, for event suitability. Do not upload a child’s photo unless you are happy for members who can see your profile to see it.

8. Security

We use hashed passwords, session cookies, and access limits for admin tools. No internet service is perfectly secure. Tell us at hello@conec.io if you think your account was misused.

9. LINE Login (LY Corporation)

If you use Continue with LINE, LY Corporation (LINE) is a separate controller for your LINE account. On their consent screen they may share with us, under your consent:

• your LINE user id (an internal identifier, not your LINE password);
• display name;
• profile picture;
• email address, only if LINE has approved email access for our channel and you allow it.

We use that LINE User Information only to create or sign you in to your conec.io account, show your name and photo on the Service, and (if an email is shared) to contact you about that account. We store the LINE user id on your member record for more than 24 hours so you can sign in again without repeating the whole signup. We do not sell LINE User Information, do not ask for your LINE password, and do not pull your LINE friends or groups. We do not use a LINE email to send marketing unless you separately allow notifications or another contact option on conec.io.

You can disconnect LINE from Profile while keeping your conec.io account, or ask us to delete the account at hello@conec.io. After unlink or deletion we stop using the LINE user id except where Thai law requires a short record. LINE’s own app stays governed by LY Corporation’s terms and LY Corporation Privacy Policy. A short notice written for LINE’s review is also at /line-login.

10. Changes

We may update this policy. The date at the top is the current version. Material changes will appear on this page. Continued use after an update means you accept the new policy.

11. Contact

Data controller: conec.io, Hua Hin, Thailand. Email hello@conec.io. This notice is governed by Thai law, including the PDPA.