Privacy Policy

Happy Crawl is operated by Teamdb LLC ("Teamdb," "we," "us," "our"), a Texas limited liability company. We can be reached at mdr@teamdb.us. This Privacy Policy describes how we collect, use, share, and protect personal information when you use the Happy Crawl mobile application, the website happycrawl.com, the venue partner portal, and the advertiser portal (collectively, the "Service").

Account information you provide: name, username, email, phone number (if you sign up via phone), date of birth, profile photo, city, and bio.

Information collected automatically: device type, operating system, app version, IP address, approximate or precise location (with your permission), user agent, referrer, and analytics events that record your interactions with features (deal views, check-ins, RSVPs, ad impressions, etc.).

Contact information you choose to share: when you invite a friend from your phone contacts, we receive the phone number and display name you select. Phone numbers are stored as SHA-256 hashes; only the last four digits and contact name are stored in plaintext for display.

Receipt-scan content: when you opt into receipt scanning, we extract the venue name, line items, subtotal, tax, tip, and total from a photo of your receipt. The image is deleted from our storage within seconds of parsing; only the parsed JSON is retained.

Payment information: handled by our payment processors (Apple, Google, Stripe). We do not see or store full card numbers.

To operate the Service: authenticate you, fulfill your reservations and RSVPs, deliver invites, generate Crawl Points, and surface relevant deals.

To improve the Service: aggregate analytics, A/B testing, bug fixes, and product development.

To comply with law: including state alcohol regulations that require us to filter age-restricted content for users under 21.

To prevent fraud and abuse: rate-limiting, anti-spam, anti-fraud, and security monitoring.

To send transactional and operational messages: confirmations, invites, and account notices. Promotional messages are opt-in only and you can opt out at any time.

With venue partners: when you check in, redeem a reward, or RSVP at a partner venue, we share your username, display name, and party size with that venue so they can fulfill the visit.

With reservation partners: when you tap "Reserve at venue," we hand off your party size and start time to OpenTable, Resy, or Yelp via their public deep-link URLs. The reservation itself is governed by that partner's privacy policy.

With advertisers in aggregate: we share aggregate, anonymized analytics with advertisers about their campaigns (impressions, clicks, demographic mix). We do NOT share your individual profile or identifying information with advertisers.

With service providers: Google Cloud (hosting + storage + analytics), Firebase (authentication), Anthropic (deal-text extraction and receipt parsing), Stripe (payments). Each is bound by data-processing agreements.

For legal reasons: if we are required by law, court order, or government request, or to protect rights, property, or safety.

We do NOT sell your personal information to third parties.

Account deletion: you may delete your account at any time from the app settings. We will delete or anonymize your personal information within 30 days, except as required for tax, audit, or legal hold.

Location: you may revoke location permission at any time in your device settings. The Service degrades gracefully when location is unavailable.

Contacts: contact-list access is requested only when you tap "Invite from contacts." We do not bulk-upload your address book in the background.

Notifications: you may turn off push notifications and promotional emails in app settings.

Marketing emails: every promotional email contains an unsubscribe link.

California residents (CCPA / CPRA), Virginia (VCDPA), Colorado (CPA), and other states with comprehensive privacy laws have the right to access, delete, correct, and port their personal information, and to opt out of sale, sharing, or targeted advertising. Submit requests to mdr@teamdb.us. We will respond within 45 days.

The Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. We restrict alcohol-adjacent content for users under 21 via our age-gate at signup. If you believe a child has provided us with personal information, contact mdr@teamdb.us and we will delete it.

We use industry-standard security practices: TLS encryption in transit, encryption at rest in Google Cloud, secrets management for API keys, role-based access controls, and security monitoring. No system is perfectly secure; we will notify affected users in the event of a breach in accordance with applicable law.

The Service is operated from the United States. By using the Service, you consent to processing of your information in the United States.

We may update this policy. When we make material changes, we will notify you in-app and post the new effective date below.

Privacy questions, data requests, and complaints: mdr@teamdb.us. For postal mail, contact us via that address and we will provide a current mailing address.