Privacy Policy

01What we collect

We collect information you give us, information created when you use Bogo Hub, and a little from the services you sign in with.

• Your account: your name, email address and US phone number, and your password, which our sign-in provider stores in a form no one can read back. If you sign in with Google or Apple, we receive your name, your email address and an account identifier from them.
• Your membership: your plan, when it started and renews, and your billing history. Card payments go straight to Stripe; we only receive what it takes to show you which card you use, like its brand and last four digits, never the full number. If you start a free trial, we also keep Stripe's fingerprint of that card, a hash that can't be turned back into card data, so a card can't start a second trial.
• Your visits: the restaurant, the date and time, the code used, what your table ordered as the restaurant recorded it, and the BOGO applied, so you and the restaurant both have a record and we can see what you've saved.
• Your location: an approximate area, when you pick a city or let a page find places near you, and your precise location when you redeem, to check you're at the restaurant. The apps ask for permission first. A visit can't be redeemed from a simulated location. We don't use your location to follow where you go.
• What you tell us you like: favorites, the answers you give when you join (what you crave, when you go out, who you go with, how far you'll travel), reminders you set and the reviews you write.
• Your device and the apps: the device model and system, the app version, a push notification token, and crash reports and error details when something breaks.
• Messages: what you send our support team, and whether the emails we send you were delivered.

If you work at a partner business, we also hold your business account: your name, email, role and permissions, the business's details, menu, hours and offers, and the visits your team confirms.

On some web forms (signing up, asking for a code, applying as a partner), Cloudflare Turnstile checks that a person, not a bot, is sending the form. It looks at signals from your browser and doesn't use them for advertising.

02How we use it

• To run your membership: your account, your plan, your payments, and the deals you can use.
• To make each BOGO work: issuing your code, checking your membership and the deal's rules, letting the restaurant confirm the visit, and keeping a record.
• To keep Bogo Hub fair and safe: spotting shared codes, simulated locations, fake accounts and payment fraud, and limiting how often a form can be sent.
• To send what the law or your membership requires: receipts, renewal reminders before an Annual plan renews, the yearly membership notice, and account and security messages.
• To show you places you'll like: ordering deals by what you told us and by where you are, when you let us.
• To answer you and fix things: support, crash reports and error details.
• To comply with the law and enforce our Terms of Service.

We don't sell your personal information, we don't share it for cross-context behavioral advertising, and we don't make decisions about you with legal or similarly significant effects by automated means alone.

03Who we share it with

Partner restaurants. When you redeem, the restaurant sees your first name and last initial, the visit and what your table ordered. They don't get your email, phone number or payment details.

Companies that run parts of Bogo Hub for us, only for that work and bound by contracts:

Others, when we have to: if the law or a valid legal process requires it, to protect the rights, property or safety of our members, partners or the public, or as part of a merger, sale or financing of our business, under this policy's promises.

04Cookies and similar technologies

Our websites use only what they need to work. We don't use advertising, analytics or social media cookies or pixels.

Do Not Track and Global Privacy Control: because we don't sell or share personal information for targeted advertising, there is nothing for these signals to switch off today. If that ever changes, we'll treat a Global Privacy Control signal as your request to opt out, and update this policy first.

05How long we keep it

We keep your information while your account is open. When you delete your account, we delete or anonymize your personal information within 30 days, except what we must keep:

• billing and tax records, for as long as tax law requires (usually 7 years);
• records of the renewal notices we sent, for 3 years, as California law requires;
• visit records a partner relies on, with your name removed;
• if you started a free trial, your user id and Stripe's card fingerprint (a hash, never card data), to keep the trial to one per person;
• what we need to resolve a dispute, prevent fraud or meet a legal obligation, for as long as that takes.

06Your choices and rights

Wherever you live, you can:

• see the personal information we hold about you, and get a copy of it;
• correct anything that's wrong;
• delete your account and its data: in the app, go to Profile → Delete account;
• stop marketing emails with the unsubscribe link in any of them, and push notifications and location in your device's settings.

To ask for a copy, a correction or anything else about your data, write to support@bogohub.app from the email on your account. We check it's you before we act, confirm your request within 10 business days and answer within 45 days. An authorized agent can ask for you with your written permission.

If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon or another state with a consumer privacy law, these are your rights under it too, including the right to know what we collect and why, and to not be treated differently for using them. If we turn down a request, you can appeal by replying to our answer.

07How we protect it

Everything travels encrypted. Access to personal information is limited to the people who need it, and our team's tools require a second sign-in step. No card numbers reach our systems. No system is perfectly secure, so if something happens that affects you, we'll tell you as the law requires.

08Children

Bogo Hub is for adults: you must be at least 18 to create an account. We don't knowingly collect personal information from children under 13. If you think a child has given us theirs, write to us and we'll delete it.

09Where your information is stored

We store and process your information in the United States, and the companies listed above may also process it where they operate, under the protections this policy describes.

10Changes to this policy

When we change this policy, we'll update the date at the top. If a change matters, we'll tell you by email or in the app before it applies.

11Contact us

Questions or requests: support@bogohub.app.