Privacy Policy
Effective: June 10, 2026
My Treat ("we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, and protect your personal information when you use the My Treat mobile application and website (the "Service").
1. Information We Collect
Information you provide
| Data | Purpose |
|---|
| Name, email address | Account creation and communication |
| Date of birth | Age verification (18+ requirement). We derive an age bracket (e.g., "20s") for display; your exact birth date is not shown to other users. |
| Home city and state | Showing relevant local content |
| Profile photos | Identity and profile display |
| Interests | Personalizing your feed and matching |
| Posts, messages, reviews | Core service functionality |
| Phone number (optional) | Emergency contact and verification |
Information from business and sponsor accounts
If you register a business as a sponsor or local partner (through our website), we collect business-verification information so we can confirm the business is legitimate before it appears in the Service:
| Data | Purpose |
|---|
| Business name, D-U-N-S number, Employer Identification Number (EIN) | Verifying the legitimacy of the business and the person submitting on its behalf |
| Business license or registration document (image upload) | Manual verification review by authorized My Treat personnel |
These documents are reviewed by authorized My Treat personnel, stored in access-restricted systems, and retained only as long as needed to maintain the business's verification status. This business-verification information is collected on our website, not in the mobile app, and is never shown to other users.
Information collected automatically
| Data | Purpose |
|---|
| Device tokens (FCM) | Sending push notifications you have opted into |
| Device type and OS version | App compatibility and debugging |
| Approximate location (when permitted) | City-level content filtering. We do not track or store precise GPS coordinates continuously. |
| Usage data (screens viewed, features used) | Improving the Service |
2. How We Use Your Information
- Provide the Service: Display your profile, show relevant posts, facilitate connections and messaging
- Personalization: Rank content based on your interests, location, and activity patterns
- Safety and moderation: Enforce Community Guidelines, detect policy violations, maintain trust scores
- Automated review of reports and content: When you submit a report about another user, or post content, we use automated systems (including AI provided by Google Cloud) to assess it for safety and policy violations. The resulting safety assessment may be recorded against the account it concerns and may automatically affect that account's trust score; flagged items are also available for review by authorized My Treat personnel. You can contact us to seek human review of an automated action that affects your account.
- Content review: Authorized My Treat personnel and automated systems may review messages, posts, photos, and other content you submit through the Service (including direct messages between users and messages exchanged with sponsor venues) for safety, moderation, policy enforcement, abuse and fraud investigation, dispute resolution, legal compliance, and service improvement. We do not sell or share the substance of these communications, except (a) with service providers solely to operate the Service, (b) as required by law or legal process, or (c) to protect the safety of users or the integrity of the Service.
- Notifications: Send push notifications about messages, matches, event reminders, and (for premium users) interest-based alerts
- Improvement: Analyze usage patterns to improve features and fix bugs
- Communication: Send service announcements, policy updates, and support responses
3. Third-Party Services
We use the following third-party services to operate the Service:
| Service | Provider | Purpose |
|---|
| Firebase Authentication | Google LLC | Account sign-in (email/password, Google, Apple) |
| Cloud Firestore | Google LLC | Database storage for profiles, posts, messages |
| Firebase Cloud Storage | Google LLC | Photo storage |
| Firebase Cloud Messaging | Google LLC | Push notifications |
| Firebase Cloud Functions | Google LLC | Server-side logic (moderation, notifications, matching) |
| Google Cloud AI (Gemini) | Google LLC | Content moderation, tag generation, AI-assisted features |
| Stripe | Stripe, Inc. | Processing sponsor and business payments (web only; not used for in-app purchases) |
These services process data in accordance with Google's Data Processing Terms. Data may be processed in the United States.
4. Data Sharing
We do not sell your personal information. We share data only in these circumstances:
- With other users: Your profile name, photos, age bracket, city, interests, trust score, and reviews are visible to other users as part of the Service
- With service providers: Third-party services listed above, solely to operate the Service
- For legal compliance: When required by law, legal process, or to protect the safety of users
- With your consent: In any other case, only with your explicit permission
5. Data Retention
- Active accounts: Data is retained as long as your account is active
- Deleted accounts: Account deletion is immediate and permanent. When you delete your account we remove your profile, posts, messages, and personal data right away, and this cannot be undone. Some data may be retained in anonymized form for analytics, or as required by law
- Messages: When your account is deleted, the chat rooms you took part in are removed along with the messages in them
- Reports and safety flags: Safety reports and the safety flags derived from them are retained for up to 2 years to support moderation and legal obligations, then automatically deleted. If an account involved in a report is deleted, that account's user identifiers are removed from the report; the report's written content is retained for the remainder of this period for safety review.
6. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update inaccurate information through your profile settings
- Deletion: Delete your account and personal data at any time directly in the app (Settings, then Delete Account); deletion is immediate. You may also request deletion by contacting support@mytreat.club
- Portability: Request your data in a machine-readable format
- Opt-out: Disable push notifications through your device settings
To exercise any of these rights, contact us at support@mytreat.club. We will respond within 30 days.
7. Children's Privacy
The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will promptly terminate their account and delete their data.
8. Security
We implement industry-standard security measures to protect your data, including:
- Encrypted data transmission (TLS/HTTPS)
- Firebase Authentication with secure token management
- Firestore security rules restricting data access by user role
- AI-powered content moderation to detect unsafe content
- Server-side validation of all user actions
No system is perfectly secure. We cannot guarantee absolute security but will notify affected users of any data breach as required by law.
9. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact support@mytreat.club.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification. The "Effective" date at the top of this page indicates when the policy was last revised.
11. Contact
For privacy-related questions or requests, contact us at:
My Treat
Email: support@mytreat.club