Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account or use our Services, we may collect:

• Account Information: First name, last name, username, email address, date of birth, and city of residence
• Profile Information: Profile photo, preferences, and any optional profile details you choose to provide
• Payment Information: Payment card details and billing information processed through Stripe (we do not store raw card numbers — see Section 5)
• Communications: Messages or inquiries you send to our support team
• Venue Submissions: Business name, address, contact information, and happy hour details submitted through our venue signup form

1.2 Information Collected Automatically

When you use the Golden Hours app, we automatically collect:

• Location Data: Precise GPS coordinates when you use the check-in feature, to verify physical presence at a venue. Location is only accessed when the app is in use and only when you initiate a check-in. We do not track your location in the background.
• Device Information: Device type, operating system version, app version, and unique device identifiers
• Usage Data: Screens viewed, venues clicked, features used, session duration, and interaction patterns within the app
• Push Notification Token: An Expo push notification token used to deliver flash deal alerts and app notifications. This token is stored in our database and associated with your account upon sign-in.
• Check-In Records: Venue name, neighborhood, timestamp, and your user ID when you check in at a venue

1.3 Information From Third Parties

We may receive information about you from:

• Stripe, our payment processor, regarding transaction status and customer IDs
• Expo, our mobile platform provider, in connection with push notification delivery
• Supabase, our backend infrastructure provider, which processes and stores data on our behalf

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and provide the Services
• Verify that you are physically present at a venue before awarding check-in rewards
• Send push notifications for flash deals, rewards milestones, and service updates
• Process bottle service reservations and payments through Stripe
• Provide venue owners with aggregated, anonymized analytics about app engagement
• Improve our Services, develop new features, and analyze usage trends
• Communicate with you about your account, transactions, and updates
• Enforce our Terms of Service and prevent fraud or misuse
• Comply with applicable legal obligations

3. Data Storage — Supabase

Golden Hours uses Supabase as our backend database and authentication provider. Your account data, saved venues, check-in records, push notification tokens, and profile information are stored on Supabase servers hosted in the United States. Supabase implements industry-standard security practices including encryption at rest and in transit, row-level security policies, and access controls.

By using our Services, you acknowledge that your data will be transferred to and processed on Supabase infrastructure. Supabase's privacy practices are governed by Supabase's own privacy policy, available at supabase.com.

4. Location Data

Golden Hours requests access to your device's location solely for the purpose of verifying that you are within 200 meters of a venue when you submit a check-in. We use iOS location services ("When In Use" permission only). We do not:

• Track your location in the background
• Store a continuous history of your movements
• Share your precise location with venue owners or third parties
• Use your location for targeted advertising

Location data used for check-in verification is processed in real time and is not retained beyond the check-in transaction. You can revoke location permissions at any time in your device Settings, though this will prevent you from using the check-in feature.

5. Payment Processing — Stripe

All payment transactions — including bottle service reservations — are processed by Stripe, Inc., a PCI-DSS compliant payment processor. Golden Hours does not store or have access to your full credit card number, CVV, or other sensitive payment credentials.

When you complete a payment, Stripe may store a Customer ID on our behalf that allows us to streamline future transactions. Your payment data is governed by Stripe's Privacy Policy, available at stripe.com/privacy.

Golden Hours charges a 12% service fee on all bottle service orders processed through the app. This fee is disclosed at checkout.

6. Push Notifications

If you grant notification permissions, Golden Hours will send you push notifications including:

• Flash deal alerts from venues you follow or venues near you
• Rewards and check-in milestones
• Important account and service updates

Your push notification token is stored in our database. If you are signed in, your token is associated with your user account. Anonymous tokens (from users who enabled notifications before signing in) are stored without a user ID. You can disable push notifications at any time in your device Settings. Disabling notifications does not delete your account.

7. How We Share Your Information

We do not sell your personal information to third parties. We may share information in the following circumstances:

• Service Providers: We share data with Supabase (database), Stripe (payments), Expo (notifications), and Apple (iOS platform) to operate the Services. These providers are contractually bound to protect your data.
• Venues (Aggregated Only): Venue owners on Featured and Premium plans receive aggregated, anonymized analytics — such as how many users clicked their profile or tapped for directions. We do not share individual user identities with venues.
• Legal Requirements: We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Golden Hours, our users, or the public.
• Business Transfers: If Golden Hours is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or fraud prevention purposes.

Check-in records and transaction history may be retained for up to 7 years for legal and accounting purposes.

9. Children's Privacy

Golden Hours is intended for users who are 21 years of age or older. We do not knowingly collect personal information from anyone under the age of 21. If we learn that we have collected information from a minor, we will delete that information immediately. If you believe a minor has submitted information to us, please contact us at support@goldenhours.app.

10. Your Rights and Choices

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information through your account settings or by contacting us
• Deletion: Request deletion of your account and associated personal data
• Portability: Request your data in a portable format
• Opt-Out: Disable push notifications in your device Settings; unsubscribe from marketing emails at any time

To exercise any of these rights, contact us at support@goldenhours.app. We will respond to all requests within 30 days.

11. Security

We implement reasonable technical and organizational security measures to protect your information, including encryption in transit (TLS/HTTPS), encryption at rest, row-level security on our database, and access controls limiting who can access user data. However, no security system is impenetrable, and we cannot guarantee the absolute security of your data.

12. Third-Party Links and Services

The Golden Hours app and website may contain links to third-party services including Resy, OpenTable, and Instagram. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email, and we will update the "Last Updated" date at the top of this page. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.

14. Governing Law

This Privacy Policy is governed by the laws of the State of Texas, without regard to its conflict of law provisions.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: