Privacy Policy

Our Privacy Commitment

HeHe (和合) is built with privacy as a core principle. We believe you should be able to organize events with friends without surrendering your personal data. This policy explains how we achieve that.

Data We Do NOT Collect

Unlike most apps, HeHe does not collect or store:

• Your name or identity
• Your email address
• Your phone number
• Your location data
• Your contacts
• Event details or content
• RSVP information
• Any account information (we don't have accounts)

How HeHe Works

Local-First Storage

All your event data is stored locally in your browser's storage (localStorage). Your events, RSVPs, and preferences never leave your device unless you explicitly share them.

End-to-End Encryption

When you create an event, HeHe generates a unique encryption key using AES-256-GCM (military-grade encryption). This key is stored only in the URL fragment (the part after the # symbol), which is never sent to any server by design of how web browsers work.

Only people with the complete link (including the encryption key) can view your event details.

Peer-to-Peer Sync

To enable sharing events across devices, HeHe uses a relay server that forwards encrypted messages between users. The relay server:

• Cannot read your event content (it's encrypted)
• Does not store messages permanently
• Only forwards data between connected peers
• Does not log user activity

Information We May Process

Technical Data

Our hosting provider may collect standard web server logs including:

• IP addresses (for security and abuse prevention)
• Browser type and version
• Pages visited (but not URL fragments containing encryption keys)
• Timestamps of requests

This data is used solely for security monitoring and is automatically deleted after a short retention period.

Advertising

HeHe displays ads through Google AdSense to support free operation. Google may use cookies to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising by visiting Google Ads Settings.

Your Data Rights

Because your data is stored locally on your device, you have complete control:

• Access: Your data is in your browser - you can view it anytime
• Delete: Clear your browser data or use the "Remove" button on events
• Portability: Your events exist as shareable links you control
• No account needed: There's nothing to delete on our servers

Children's Privacy

HeHe does not knowingly collect any personal information from children under 13. Since we don't collect personal information from anyone, this applies equally to all users.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this policy.

Contact Us

If you have questions about this privacy policy or HeHe's privacy practices, please contact us at: [email protected]