Privacy Policy
Effective: July 31, 2026
My Treat LLC ("we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, and protect your personal information when you use the My Treat mobile application and website (the "Service").
1. Information We Collect
Information you provide
| Data | Purpose |
|---|
| Name, email address | Account creation, service messages, and (only if you opt in) promotional emails |
| Date of birth | Age verification (18+ requirement). We derive an age bracket (e.g., "20s") for display; your exact birth date is not shown to other users. |
| Home city and state | Showing relevant local content |
| Profile photos | Identity and profile display |
| Interests | Personalizing your feed and connections |
| Posts, messages | Core service functionality |
| Phone number (optional) | Emergency contact and verification |
Information from business and sponsor accounts
If you register a business as a sponsor or local partner (through our website), we collect business-verification information so we can confirm the business is legitimate before it appears in the Service:
| Data | Purpose |
|---|
| Business name, D-U-N-S number, Employer Identification Number (EIN) | Verifying the legitimacy of the business and the person submitting on its behalf |
| Business license or registration document (image upload) | Manual verification review by authorized My Treat personnel |
These documents are reviewed by authorized My Treat personnel, stored in access-restricted systems, and retained only as long as needed to maintain the business's verification status. This business-verification information is collected on our website, not in the mobile app, and is never shown to other users.
Information collected automatically
| Data | Purpose |
|---|
| Device tokens (FCM) | Sending push notifications you have opted into |
| Device type and OS version | App compatibility and debugging |
| Approximate location (when permitted) | City-level content filtering. We do not track or store precise GPS coordinates continuously. |
| Usage data (screens viewed, features used) | Improving the Service |
| App and website analytics events | Understanding how the Service is used in aggregate, so we can improve it. In the app this covers things like which screens are opened, whether a post was created, and whether a subscription was purchased. On our website it covers page views and which link brought you there. |
What our analytics does not do. We do not collect or use an advertising identifier (Android Advertising ID or Apple IDFA), we do not link analytics events to your account, and we do not track you across other companies' apps or websites. Analytics events never carry the contents of your posts, messages, photos, email address or name. We do not use analytics to build advertising profiles, and we do not sell analytics data.
2. How We Use Your Information
- Provide the Service: Display your profile, show relevant posts, facilitate connections and messaging
- Personalization: Rank content based on your interests, location, activity patterns, and the tags on public posts (both the tags you add and tags our systems generate from the public content of a post)
- Safety and moderation: Enforce Community Guidelines and detect policy violations
- Automated review of reports and content: When you submit a report about another user, or post content, we use automated systems (including AI provided by Google Cloud) to assess it for safety and policy violations. The resulting safety assessment may be recorded against the account it concerns and may result in moderation action on that account; flagged items are also available for review by authorized My Treat personnel. You can contact us to seek human review of an automated action that affects your account.
- Content review: Authorized My Treat personnel and automated systems may review content you submit through the Service. Your private messages — including direct messages between users and messages exchanged with sponsor venues — are reviewed only for safety, moderation, policy enforcement, abuse and fraud investigation, dispute resolution, and legal compliance. We do not use the contents of your private messages to build interest profiles, to personalize content or promotions, to target advertising, or to train AI models. Public content you choose to post (such as your posts, their photos, and their tags) may also be analyzed by automated systems, including AI provided by Google Cloud, to operate and improve the Service, generate tags, and personalize what you and others see, as described under “Personalization” and “Improvement.” We do not sell or share the substance of your private communications, except (a) with service providers solely to operate the Service, (b) as required by law or legal process, or (c) to protect the safety of users or the integrity of the Service.
- Notifications: Send push notifications about messages, connections, event reminders, and (for premium users) interest-based alerts
- Improvement: Analyze usage patterns to improve features and fix bugs
- Communication: Send service announcements, policy updates, and support responses
- Marketing (only if you opt in): If you turn on promotional emails in Settings, we send occasional emails about new local listings, events, and features. This is off by default. You can withdraw consent any time in Settings or via the unsubscribe link in any promotional email. We do not need your consent for the essential service messages above, and turning marketing emails off does not stop them.
3. Third-Party Services
We use the following third-party services to operate the Service:
| Service | Provider | Purpose |
|---|
| Firebase Authentication | Google LLC | Account sign-in (email/password, Google, Apple) |
| Cloud Firestore | Google LLC | Database storage for profiles, posts, messages |
| Firebase Cloud Storage | Google LLC | Photo storage |
| Firebase Cloud Messaging | Google LLC | Push notifications |
| Firebase Cloud Functions | Google LLC | Server-side logic (moderation, notifications, connections) |
| Google Cloud AI (Gemini) | Google LLC | Content moderation, tag generation, AI-assisted features |
| Google Analytics for Firebase | Google LLC | Aggregate app usage measurement (no advertising identifier, no cross-app tracking) |
| Google Analytics | Google LLC | Aggregate website traffic measurement on mytreat.club |
| Stripe | Stripe, Inc. | Processing sponsor and business payments, and paid-experience checkout on the host's behalf (web only; not used for in-app purchases). When you buy a paid experience, your payment is processed on the host's own Stripe account - the host is the merchant of record |
These services process data in accordance with Google's Data Processing Terms. Data may be processed in the United States.
4. Data Sharing
We do not sell your personal information. We share data only in these circumstances:
- With other users: Your profile name, photos, age bracket, city, interests, and membership date are visible to other users as part of the Service
- With hosts you buy from: When you purchase a paid experience, the host is the merchant of record - your payment is processed on their Stripe account. The host receives your email address and the transaction details (what you bought, how many seats, the amount, and refund status) so they can run the event and handle refunds. Hosts do not receive your payment card details, and this applies only to hosts whose experience you actually purchase
- With service providers: Third-party services listed above, solely to operate the Service
- For legal compliance: When required by law, legal process, or to protect the safety of users
- With your consent: In any other case, only with your explicit permission
5. Data Retention
- Active accounts: Data is retained as long as your account is active
- Deleted accounts: Account deletion is immediate and permanent. When you delete your account we remove your profile, posts, messages, and personal data right away, and this cannot be undone. Some data may be retained in anonymized form for analytics, or as required by law
- Messages: When your account is deleted, the chat rooms you took part in are removed along with the messages in them
- Reports and safety flags: Safety reports and the safety flags derived from them are retained for up to 2 years to support moderation and legal obligations, then automatically deleted. If an account involved in a report is deleted, that account's user identifiers are removed from the report; the report's written content is retained for the remainder of this period for safety review.
6. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update inaccurate information through your profile settings
- Deletion: Delete your account and personal data at any time directly in the app (Settings, then Delete Account); deletion is immediate. You may also request deletion by contacting support@mytreat.club
- Portability: Request your data in a machine-readable format
- Opt-out: Disable push notifications through your device settings. Turn promotional emails off any time in Settings, or use the unsubscribe link in any promotional email; this does not affect essential service messages.
To exercise any of these rights, contact us at support@mytreat.club. We will respond within 30 days.
7. Children's Privacy
The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will promptly terminate their account and delete their data.
8. Security
We implement industry-standard security measures to protect your data, including:
- Encrypted data transmission (TLS/HTTPS)
- Firebase Authentication with secure token management
- Firestore security rules restricting data access by user role
- AI-powered content moderation to detect unsafe content
- Server-side validation of all user actions
No system is perfectly secure. We cannot guarantee absolute security but will notify affected users of any data breach as required by law.
9. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact support@mytreat.club.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification. The "Effective" date at the top of this page indicates when the policy was last revised.
11. Contact
For privacy-related questions or requests, contact us at:
My Treat LLC
Email: support@mytreat.club