Hyperion Privacy policy

Hyperion · Last updated October 26, 2026

Who this is for

Hyperion is a private app for JROTC units. Only people with their unit’s signup code who are approved by an instructor can use it. Members must be at least 13 years old.

What we collect

Account: your name, sign-in email, and how you sign in (email, Google, or Apple).

ID photo: when you sign up, a photo of your student ID or other photo ID, so the instructor approving you knows it’s you. Only instructors can see it, and it’s deleted as soon as you’re approved or declined, or after 30 days if you’re still waiting.

Profile you choose to add: photo, platoon, grade, and student ID. Leadership sets your rank and billet.

What you send: messages, photos, videos, voice messages, files, reactions, polls, and notes.

Unit activity: event sign-ups, class period, ride offers, attendance marks and leaders’ notes on them, service hours (where and when, plus the service officer’s private notes), badges, Journey progress and standings, and Honor Platoon points.

App data: when you last had the app open, notification settings, a push notification token for each of your devices, and crash reports.

Reports: when you report a message or member, the report and the reported message. For an encrypted message, your phone sends the text you see so it can be reviewed.

Who can see it

Unit members see your name, photo, rank, billet, platoon, notes, and when you were last active.

Direct messages and group chats are end-to-end encrypted: they’re locked on your phone before they’re sent and stored in a form leadership, Hyperion, and Google can’t read. Phones trust the key list Hyperion’s servers provide and there’s no way yet to verify it, and anyone who signs in to your account on a new phone can receive your chats’ keys, so keep your password private. Channels and announcements aren’t encrypted, so leadership can moderate them; open channels and announcements are seen by the whole unit.

To open quickly, your phone keeps your recent direct messages and group chats in a locked file that only that phone can open. It’s removed when you sign out.

Your email and student ID are private: only you and instructors can see them.

Your attendance record is seen by you and leaders with the Attendance permission. Reports are seen only by instructors and the app’s developer.

Photos and files in direct messages and groups are encrypted too. Photos and files in channels are stored with a private link; anyone you share that link with outside the app could open it.

How it’s stored and used

Everything is stored with Google Firebase in the United States and used only to run the app for the unit.

We don’t sell your information, show ads, or track you across other apps or websites.

Photos are shrunk and stripped of location data before they’re uploaded.

When you send a link in a direct message or group, your phone loads the page to make its preview, so that website sees a visit from your phone. People who receive it don’t contact the website.

Deleting your account

You can delete your account any time in Profile → Edit profile → Delete account. Your profile, private details, notes, photo, saved messages, Journey progress, sign-ups, and ride offers are deleted, and you’re removed from group chats.

Messages you already sent stay in the chats they were sent to so other members’ conversations still make sense. Ask an instructor if you need any of them removed.

Questions

Ask your unit’s instructors, or use Profile → Send feedback in the app. If this policy changes, the app will show the new version here.