Privacy Policy

1. Information We Collect

• Account info: email address, password (hashed), and optional display name, avatar, and home zip code.
• Content you submit: events, places, posts, tips, reviews, ratings, reports, and saved items.
• Usage data: basic interaction data such as pages viewed, searches, and device/browser info.
• Cookies & local storage: used for session management, preferences, and (if enabled) analytics.
• Communications: messages you send us and email engagement (opens/clicks).

2. How We Use Information

• Operate, maintain, and improve the Service;
• Personalize event/place recommendations (e.g., using your home zip);
• Send transactional emails (account, security, submissions);
• Send the weekly "best events in your area" newsletter, if you opt in;
• Detect, prevent, and respond to fraud, abuse, or violations of our Terms;
• Comply with legal obligations.

3. Legal Bases (EEA/UK)

Where applicable, we process personal data based on your consent (e.g., marketing emails), to perform a contract (providing the Service), to comply with legal obligations, or for our legitimate interests (security, product improvement).

4. Sharing of Information

We do not sell your personal information. We share data only with:

• Service providers that host our infrastructure, send email, process auth, and provide analytics, bound by confidentiality;
• Legal/safety recipients when required by law or to protect rights, property, or safety;
• Successors in a merger, acquisition, or asset sale (with notice).

Public content you post (events, places, posts, reviews, display name, avatar) is visible to other users and search engines.

5. Subprocessors

We use third-party providers for hosting, database, authentication, and email delivery. These providers process data on our behalf under contracts that require appropriate safeguards.

6. Data Retention

We retain account data while your account is active and for a reasonable period after to meet legal and operational needs. You may request deletion at any time (see Your Rights).

7. Security

We use industry-standard safeguards including HTTPS in transit, encrypted storage, hashed passwords, and row-level access controls. No system is 100% secure; we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to:

• Access, correct, or delete your personal data;
• Withdraw consent for marketing emails (unsubscribe link in every email);
• Object to or restrict certain processing;
• Request a copy of your data (portability);
• Lodge a complaint with your local data protection authority.

To exercise these rights, email wheretogotodayapp@gmail.com.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information.

10. International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for international data transfers.

11. Cookies

We use cookies and similar technologies for essential functionality (authentication, preferences) and may use them for analytics. You can control cookies through your browser settings.

12. California Privacy (CCPA/CPRA)

California residents have specific rights to know, delete, correct, and limit the use of personal information. We do not sell personal information or share it for cross-context behavioral advertising.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by email.

14. Contact