1. Information We Collect

Information You Provide

• Account Information: Name, email address, password, and profile photo when you create an account
• Profile Information: Username, bio, dietary preferences, and favorite cuisines
• Payment Information: When you make purchases, our payment processor (Stripe) collects billing details. We do not store your full credit card number.
• User Content: Reviews, ratings, photos, and verifications you submit
• Communications: Messages you send to us or other users

Information Collected Automatically

• Location Data: With your permission, we collect precise location to show nearby specials. You can disable this in your device settings.
• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Usage Data: Pages visited, features used, time spent, clicks, and interactions
• Log Data: IP address, browser type, access times, and referring URLs

Information from Third Parties

• Social Login: If you sign in with Google, Facebook, or Apple, we receive your name, email, and profile photo from those services
• Restaurant Data: We obtain restaurant information from public sources and data partners

2. How We Use Your Information

• Provide, maintain, and improve the Service
• Show you relevant restaurant specials based on your location and preferences
• Process transactions and send related information
• Send notifications about specials, achievements, and account activity
• Manage your account and provide customer support
• Track points, streaks, achievements, and leaderboard rankings
• Detect, prevent, and address fraud and abuse
• Analyze usage patterns to improve the Service
• Communicate about promotions, updates, and news (you can opt out)
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share information in these circumstances:

• With Restaurants: When you verify a special, the restaurant may see anonymized verification data
• Service Providers: Third parties who perform services on our behalf (see Section 4)
• Public Profile: Your username, profile photo, points, and achievements are visible to other users
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information

4. Third-Party Services

We use trusted third-party services to operate TasteDrop:

• Supabase: Database and authentication (Privacy Policy)
• Stripe: Payment processing (Privacy Policy)
• Resend: Email delivery (Privacy Policy)
• Vercel: Hosting (Privacy Policy)
• Sentry: Error monitoring (Privacy Policy)
• Google, Facebook, Apple: Social login (subject to their respective privacy policies)

5. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Understand how you use the Service
• Improve performance and security

You can control cookies through your browser settings. Disabling cookies may affect functionality.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Until you delete your account
• Transaction Records: 7 years for legal and tax purposes
• Usage Logs: 90 days
• Deleted Account Data: Removed within 30 days, except as required by law

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails
• Location: Disable location services in your device settings
• Notifications: Manage push notification preferences

To exercise these rights, visit Settings → Privacy or contact us at privacy@taste-drop.com.

8. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information we collect and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights

9. International Users (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland:

• We process data based on consent, contract performance, or legitimate interests
• You have rights to access, rectify, erase, restrict, and port your data
• You may object to processing and withdraw consent at any time
• You may lodge a complaint with your local data protection authority
• Data may be transferred to the United States with appropriate safeguards

10. Children's Privacy

TasteDrop is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

11. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest, secure authentication, regular security audits, and access controls. However, no method of transmission over the internet is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: