Privacy comes before features. The HUXIP platform is built so that the default state of every member surface is private. Members opt in to visibility, never out of it.

No member surface — Passport, Ask HUXIP, Connect, or any other — surfaces personal information unless the member has explicitly chosen to share it.

Profile photos are optional. A member may participate fully without uploading any image at any time. The display name, country interests, and travel style are member-controlled and editable.

When uploaded, profile photos are stored privately and surfaced only where the member has opted in (for example, future request-based introductions in Connect).

Member visibility in Connect is opt-in. A member is invisible by default and may toggle visibility per country. Visibility may be turned off at any time.

Other members never see another member's profile, status, or country interests without that member's explicit consent.

Exact location is never shown by default. Connect uses country and broad metropolitan area only. No GPS resolution, no street-level data, no live location feed.

Future verification of country visits is opt-in only and does not surface exact location. Verification, when activated, may contribute to higher-tier eligibility but never reveals where a member is currently or has been precisely.

Country visits remain private unless shared. The Place Passport is a private record by default. A member may choose to surface a stamp inside a future request-based introduction or as part of profile activity, but no automatic disclosure occurs.

Visit history is never sold, syndicated, or made available to partners or other members without explicit member consent.

Future AI features may use member-provided context — saved places, countries of interest, trip plans, Ask HUXIP history — to surface relevance-based previews to that same member.

Member-provided context is used to inform that member's experience. It is not sold to partners. Partner-side AI features see anonymised intent signals only — never identity, never history, never exact location.

Future partner interactions through Ask HUXIP or partner Collaborations are subject to member consent. Member-intent signals shown to partners are anonymised — partners see country, region, intent type, trip style, and privacy level only.

No member name, profile photo, exact location, or visit history is shown to a partner without the member's explicit consent.

The Titanium Access Card carries no GPS, no telemetry, and no advertising identifier. Future NFC activation will be member-initiated and never push, never automatic, never sold.

When activation flows go live, partners scanning the Card receive only a HUXIP membership signal plus whatever the member has chosen to share. No name, location, or visit history is transmitted.

This privacy scaffold is pending legal review and will be replaced by the final Privacy Policy when the platform leaves preview. The principles described here are the privacy posture HUXIP intends to formalise.

Members and partners are encouraged to read the final Privacy Policy when issued. Any subsequent changes will be communicated through the channels available at that time.