Privacy Policy

1. Information We Collect

We collect information in three primary categories: (i) information you provide directly, (ii) information collected automatically, and (iii) information obtained from third parties.

1.1 Information You Provide Directly

Account and Profile Information

When you create or update an account, we may collect:

• First and last name
• Username
• Email address
• Phone number (optional)
• Profile photo (avatar)
• School affiliation
• Organization affiliation
• Home location (latitude/longitude, if manually set)

Profile photos are stored via Cloudflare R2 object storage under paths associated with your user ID. Usernames and profile names may be subject to moderation and automated banned-term filtering.

User Content and Social Features

When using social features within the app, we collect:

• Bar chat messages
• Anonymous toggle state for chat
• "Tonight plans" (bar selections)
• Go-out invites (sender, receiver, bar, status)
• Invite responses (in, maybe, not tonight)

Bar presence is determined locally when within approximately 100 meters of a venue and stored only as a bar identifier (not coordinates).

Preferences and Personalization

We collect:

• Favorite bars
• Favorite events
• Per-bar notification preferences
• Personalization settings (e.g., going-out days, vibe selections)

Favorites may include contextual analytics metadata such as session ID, device ID, platform, app version, and experiment tags.

Forms, Requests, and Feedback

If you submit a form, we may collect:

• Bar onboarding requests
• Ambassador applications
• Beta feedback submissions
• Error reports (including device model, OS version, app version, and diagnostic context)

Purchases

When purchasing tickets or participating in paid events:

• Buyer name
• Buyer email
• Buyer phone number
• Order ID
• Payment intent ID

WTM does not store credit card numbers. Payment processing is handled exclusively by Stripe.

1.2 Information Collected Automatically

Device and Session Information

We automatically collect:

• Device token (for push notifications)
• Platform (e.g., iOS)
• App version
• Device model and operating system
• Session timestamps

Analytics Events

We collect engagement metrics such as:

• app_open
• login
• session_start
• session_end
• push_notification_open

These may be associated with a user ID (if logged in) or collected anonymously.

Location Information

We may access location data under the following conditions:

• Real-time location is used locally for map functionality, compass orientation, and bar presence detection.
• We do not store raw GPS coordinates from real-time location usage.
• If you manually set a home location, we store latitude and longitude in your user profile.
• Bar presence stores only a bar identifier.

1.3 Information from Third Parties

We receive information from:

• Google Sign-In: Email, name, profile photo (based on your Google settings)
• Sign in with Apple: Email (may be relay email), name (only at first sign-in)
• Supabase: Authentication tokens, user ID
• Stripe: Payment status, payment intent ID
• Apple Push Notification Service (APNs): Push delivery confirmation

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Create and manage user accounts
• Enable social features
• Display venue information by city or location
• Show bar presence to approved connections
• Send push notifications
• Process ticket purchases
• Generate Apple Wallet passes
• Conduct analytics and performance monitoring
• Moderate content and enforce policies
• Respond to support inquiries
• Comply with legal obligations

3. How We Share Your Information

We may share information in the following circumstances:

• With Other Users: Profile name, username, avatar, bar chat messages, tonight plans, bar presence (visible to friends only), go-out invites
• With Service Providers: Supabase (hosting and database), Cloudflare R2 (file storage), Stripe (payment processing), Apple (APNs, Sign in with Apple, Wallet), Google (authentication)
• With Administrators: Authorized administrators may access user data for moderation, analytics, and support
• Legal Requirements: We may disclose information if required by law or governmental request
• Business Transfers: Information may transfer in connection with a merger, acquisition, or asset sale

We do not sell personal information.

4. Permissions and Device Access

The Service may request:

• Location (When In Use)
• Camera (admin QR scanning)
• Photo Library (avatar uploads)
• Push Notifications
• Associated Domains (universal links)

Permissions can be revoked through device settings.

5. Data Retention and Account Deletion

We retain data as long as your account remains active.

Upon account deletion, the following are deleted:

• User favorites
• Favorite events
• Tonight plans
• Bar chat messages
• Orders and redemptions
• Friendships and requests
• User profile
• Avatar files

Authentication records may persist where required by underlying authentication providers. Analytics records may be retained in aggregated or anonymized form.

6. Security

We implement Row-Level Security (RLS), JWT-based authentication, presigned upload URLs, and secure payment processing via Stripe.

No method of transmission or storage is 100% secure.

7. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

8. Third-Party Services

We encourage review of:

• Supabase Privacy Policy
• Stripe Privacy Policy
• Cloudflare Privacy Policy
• Apple Privacy Policy
• Google Privacy Policy

9. Your Rights

Depending on jurisdiction, you may have the right to:

• Access personal data
• Correct inaccuracies
• Request deletion
• Withdraw consent
• Request data portability

Requests may be submitted to info@wtmbama.com.

10. Age Restriction for Alcohol-Related Use

The Service may facilitate access to information about venues that serve alcohol and may enable the purchase of tickets or passes redeemable at such establishments. If you use the Service in connection with purchasing, redeeming, or attempting to acquire alcoholic beverages or alcohol-related products or benefits, you must be at least twenty-one (21) years of age, or the legal drinking age in your jurisdiction, whichever is greater. By using the Service for such purposes, you represent and warrant that you meet this requirement.

11. Changes to This Policy

We may update this Privacy Policy periodically. Continued use of the Service constitutes acceptance of changes.

12. Contact Us

Email: info@wtmbama.com