Privacy Policy

Who we are

Foodie Adventure Passport ("FAP", "we", "us") operates a subscription dining-deals service in the Raleigh-Durham-Cary Triangle area of North Carolina. This policy explains what personal information we collect, how we use it, and the choices you have. Questions? Email hello@foodieadventurepassport.com.

Information we collect

• Account data: name, email address, password (stored as a secure hash by our authentication provider, Supabase), and your home city preference.
• Payment data: handled entirely by Stripe. We never see or store your card number. We keep only your subscription status, plan, and Stripe customer reference.
• Redemption activity: which offers you redeem, when, and at which restaurant, plus your optional star ratings and survey comments.
• Location: only if you grant browser permission, and only to sort nearby restaurants. We do not track your location in the background or store a location history.
• Push subscriptions: if you enable notifications, we store the browser push endpoint needed to deliver them.

How we use your information

• To operate your Passport: authenticate you, process subscriptions, validate and log redemptions, and track quests, streaks, and rewards.
• To send transactional emails (receipts, renewal reminders, reward claims) via Resend.
• To send push notifications you have opted into — you can turn each category off in Account settings at any time.
• To give restaurant partners aggregate analytics about redemptions at their own venue.

Sharing with restaurant partners

If — and only if — you checked the marketing consent box at signup, we share your email address with a restaurant after you redeem a deal there, so they can send you their own offers. You can withdraw this consent in Account settings, and every partner email must include an unsubscribe link. If you never opted in, your email is never shared. We do not sell your personal information to anyone.

Leaderboard display

The city leaderboard shows only your first name, last initial, city, XP, and streak. You can change your display name in Account settings.

Service providers

We rely on: Supabase (database & authentication), Stripe (payments), Vercel (hosting), Upstash (redemption security), and Resend (email). Each receives only the data needed to perform its function.

Cookies

We use strictly necessary cookies to keep you signed in. We do not use third-party advertising cookies.

Your rights

• Access & correction: view and edit your profile in Account settings.
• Deletion: use "Delete my account" in Account settings to permanently erase your account, cancel billing, and remove your personal data. Or email us and we'll do it within 30 days.
• Notification opt-out: every category can be disabled in Account settings, effective immediately.

Data retention & security

We keep your data while your account exists. Anonymized, aggregate redemption statistics may be retained after deletion. All traffic is encrypted with HTTPS, database access is protected by row-level security, and redemption tokens expire after 5 minutes.

Children

Our service is not directed to children under 13, and we do not knowingly collect their data.

Changes to this policy

We'll post any changes here and update the date above. Material changes will be announced by email or in-app notice.