9Yaps is a discount app and website for Tampa Bay locals, owned and operated by 9yaps LLC ("we," "our," or "us"). This Privacy Policy explains what personal information we collect through the 9Yaps mobile app (iOS and Android) and the website at 9yaps.com, how we use it, who we share it with, and the choices you have. By using the app or website, you agree to this policy.

1. Information We Collect

Students and app users

• Account information: your email address and name (entered by you, or provided by Google or Apple if you sign in with them), your school or university, and your password (stored securely by our authentication provider; we cannot read it).

• Guest use: you can use the app as a guest. We then identify your session with a random identifier instead of an email address.

• Activity in the app: deals you view, save, favorite, and redeem; the points, streaks, and rewards you earn; your search terms; and referral codes you share or use.

• Profile photo (optional): if you choose to add one, we receive the photo you take or select. The app only asks for camera or photo library access when you do this.

• Location: see Section 2.

• Device and usage information: device type, operating system, app version, and notification token, plus crash reports and usage statistics (see Section 5).

Business partners

• Business name, contact name, email, phone, address, hours, logo, photos, website, menu, and social media links; the deals you offer; and billing information needed for your subscription. Payments are processed by Stripe; we do not store full card numbers.

Website visitors

• Device and browser information (IP address, browser type, operating system, referring pages, pages visited) and cookies (see Section 6). If you contact us or submit a form, we collect the details you send.

2. Location

If you allow location access, we use your location to show nearby deals, display businesses on the map, and verify redemptions. Redemptions can record the location at the time you redeem.

We also save your general area once, together with your account: rounded to roughly 4 square kilometres around Tampa Bay, never your exact position. We use this only for aggregate analytics about where 9Yaps is used. We do not sell it, share it, or use it for advertising.

You can turn location off at any time in your phone's settings. The app still works without it, but nearby deals and the map will be limited.

3. How We Use Your Information

• To run the app and website: sign you in, show deals, process redemptions, and track points and rewards.

• To send notifications: deal alerts, reminders, and updates (see Section 4).

• To keep 9Yaps safe and working: prevent fraud and abuse, fix bugs, and improve features.

• To understand how 9Yaps is used, in aggregate.

• To work with our business partners: for example, to report to a business how many students redeemed its deals. We do not give businesses your name or email unless you tell us to.

• To contact you about your account or, for business partners, about your listing.

• To comply with legal obligations.

4. Notifications

If you allow notifications, we send push notifications through Firebase Cloud Messaging. This uses a token that identifies your device. You can turn notifications off at any time in your phone's settings. You can also unsubscribe from marketing emails using the link in the email or by contacting us.

5. Third-Party Services

We do not sell your personal information. We share it only with service providers who help us run 9Yaps, and only as needed for those services:

• Supabase: database, authentication, and file storage.

• Google and Firebase: sign-in, Google Maps, push notifications, crash reporting (Crashlytics), and analytics.

• Apple: Sign in with Apple and app distribution.

• Stripe: business subscription payments.

• Our website host and analytics provider (for example, Hostinger and PostHog).

These providers may only use your information to provide their service to us. We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a sale or reorganization of our business.

6. Cookies on Our Website

The website uses cookies and similar technologies to improve your experience and analyze traffic. You can control cookies in your browser settings, though turning them off may affect how the site works. The app does not use browser cookies.

7. Data Retention and Deleting Your Account

You can delete your account from within the app, or by emailing management@9yaps.com. When you delete your account, we remove your sign-in and your saved deals so you can no longer access the account. We keep redemption and points records connected to your account record, because businesses and we rely on them for reporting, fraud prevention, and legal reasons.

You can also ask us to delete your personal information, including the general area saved with your account, by emailing management@9yaps.com. We will act on valid requests within 45 days, except where we are required by law to keep certain information.

Business partner records are kept while the partnership is active and for as long afterward as needed for billing, tax, and legal reasons.

8. Children's Privacy

9Yaps is intended for people 13 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us at management@9yaps.com and we will delete it.

9. Data Security

We take reasonable steps to protect your information, including encrypted connections and restricted access to our systems. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. Data Breach Notification

If a data breach affects your personal information, we will notify you promptly by email, through the app, or through a notice on our website, and take appropriate steps to reduce the risk.

11. International Data Transfers

Our servers are in the United States. If you use 9Yaps from outside the United States, your information will be transferred to and stored in the United States, and we apply safeguards to protect it as required by applicable law.

12. Your Rights

Everyone: you can ask us to tell you what personal information we hold about you, correct it, or delete it by emailing management@9yaps.com. We will not treat you differently for exercising these rights.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, use, and disclose; to request deletion; to correct inaccurate information; and to opt out of the sale or sharing of your personal information. We do not sell or share personal information for cross-context behavioral advertising. We will respond to verifiable requests within 45 days.

Residents of the European Union and United Kingdom (GDPR): you have the rights of access, rectification, erasure, restriction, portability, and objection. Our legal bases for processing are your consent, performance of our agreement with you, our legitimate interests (which do not override your rights), and legal obligations. You can also contact your local data protection authority.

13. Your Responsibilities

You are responsible for keeping your account credentials confidential and for activity under your account. Please tell us immediately if you suspect unauthorized use.

14. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page and the "Last Updated" date will change. If we make a significant change, we will also notify you in the app or by email.

15. Contact Us

Questions about this policy, or want to use your rights?

Email: management@9yaps.com Mailing Address: 717 Pinewood Drive, Dunedin, FL, 34698