Privacy Policy

Hi-Five is a check-in, rewards and notifications service operated by Hi5Social.com (“we”, “us”). It is used by businesses, schools and other organizations (each a “Business”) to welcome their customers.

This policy explains what personal information is collected when you visit our website, create an account on a Business's Hi-Five site, or contact us, and what we do with it. In most cases the Business decides why your information is collected and we process it on the Business's behalf. For website visitors and people who contact us directly, we are the one responsible for your information.

Customer accounts:

• Name, email address and mobile phone number.
• If your Business lets you add your children as students: their first and last name, birth date and instructor(s), entered by you. You can edit or delete them at any time under My profile. Instructors see only a student's first name and birthday (month and day), and other members see them only if you choose to share their birthday.
• Birth date, used for birthday greetings. Staff members only see your first name and birthday month and day.
• A password, which we store only in scrambled (hashed) form, so no one can read it.
• An optional profile photo.
• Your choice about receiving promotional messages.

Using the service:

• Visits: when you check in and out, and who recorded it if a team member did it for you.
• Rewards you earn, event sign-ups, and requests to speak with a specific team member (including any note you write).
• Reactions and comments you post on Messages & Shout-Outs.
• Notifications we send you.

Team members: contact details, role, alert preferences and clock-in and clock-out times.

Contact form: the name, email, phone, business name and message you send us.

Technical: your IP address, kept briefly to limit abuse such as repeated login attempts, and one sign-in cookie (see section 7).

• To run your account: check-ins, visit history, rewards, birthday greetings and events.
• To send service messages such as password resets, invitations and reward codes.
• To send promotions and announcements, but only if you opted in.
• To keep the service secure, prevent misuse and fix problems.
• To answer your questions and, for Businesses, to set up and support their site.
• To produce reports for the Business, such as visit counts and team hours.

We do not sell your personal information, and we do not use it for advertising by other companies.

If you give your mobile number and agree to receive messages, the Business may text you about rewards, events and announcements. Message and data rates may apply. You can opt out of promotional messages at any time in your profile, or by replying STOP to a text. Service messages, such as a password reset, may still be sent.

Your consent to marketing is not a condition of using the service.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with or sold to any third party. (Our text-message provider handles your number only to deliver our messages, as described in “Who can see your information” below.)

• We do not sell your personal information to third parties, and we never have. The only transfer of that kind would be if a Business or our company itself is sold or merges, as explained at the end of this list.
• The Business's administrators can see your full profile and visit history.
• The Business's staff see only your first name and birthday (month and day). They never see your phone number, email address or last name.
• Other members see nothing about you unless you turn on “Share my birthday” (it is off by default, and you can change it any time in My profile). If you do, they can see your first name, last initial and the day and month of your birthday when it is coming up in the next two weeks, never the year, and can send you a ready-made birthday wish.
• Other customers see only your first name next to comments you post.
• Our service providers handle data for us under contract: web hosting (Vercel), database (Neon), email delivery (such as Resend or SendGrid) and text messaging (such as Twilio). They may only use it to provide their service to us.
• Authorities and others where the law requires it, or to protect people's safety and our rights.
• If a Business or our company is sold or merges, your information may transfer to the new owner under this policy.

We keep your information while your account is active and the Business uses Hi-Five. When an administrator removes your account, your visits, rewards, notifications and event sign-ups are deleted. Backups clear on a regular cycle. We may keep limited records longer where the law requires it.

We use one essential cookie to keep you signed in. It is needed for the service to work and is not used for tracking or advertising. We do not use advertising cookies. Where a site uses Vercel Web Analytics to count page views, it does so without cookies and without following you across other websites.

We protect information with encrypted connections, hashed passwords, limits on repeated login attempts and role-based access, so people only see what they need. No system is perfectly secure, so please choose a strong password and keep it private.

Even with these protections, a hacker or other unauthorized person may try to break into our website or systems to steal personal information. If we learn that personal information has been accessed or taken without permission, we will notify the affected Businesses, and affected individuals where the law requires, as soon as we can and without unreasonable delay. We will tell you what happened and what you can do to protect yourself. To the extent the law allows, we are not responsible for any loss that results from a criminal attack of this kind.

• Update your details or your message preferences in your profile.
• Ask to see, correct or delete your information by contacting the Business or us at support@hi5social.com.
• Depending on where you live, you may have additional rights, such as to receive a copy of your data or to object to certain uses. Contact us and we will help.

Hi-Five is not directed to children under 13, and we do not knowingly collect their information without a parent or guardian's permission. A parent or guardian should create and manage the account for a child. Businesses that serve young people, such as schools and studios, are responsible for getting any consent the law requires. If you believe a child has given us information without permission, contact us and we will delete it.

We may update this policy. When we make an important change we will update the date at the top and, where appropriate, tell you.

Hi5Social.com
support@hi5social.com

You can also use our contact form. See also our Terms of Service.