Privacy Policy

1. Who we are

Untabbed LLC ("Untabbed", "we", "us") provides a mobile payment platform that lets adults age 21 and over open and pay tabs at participating bars and venues. This Privacy Policy explains what information we collect when you use the Untabbed mobile app, how we use it, and the choices you have.

2. Information you give us at signup

• First and last name
• Email address
• Username — a public handle so friends can find you
• Date of birth — so we can refuse the app to anyone who tells us they are under 21. We do not run third-party ID verification. The licensed venue's bartender verifies your government-issued ID at point of service.

3. Information you choose to add later

• Home address — optional. Used only to power "Get me home" deep links to Uber or Lyft.
• Display name shown to friends.
• Notification preferences — which alerts you opt into.

4. Information collected automatically when you use the app

• Approximate device location while the app is open, used only to show nearby venues. We do not track your location in the background.
• Device push-notification token, so we can send you order and tab updates.
• Order, tab, and payment history within Untabbed.
• Friendship records — who you have added, who has added you.
• Crash and basic diagnostic data from Apple and Google's standard developer tools (anonymized; not linked to your account).

5. Payment information

Card numbers and bank details are handled exclusively by Stripe, our payment processor (PCI-DSS Level 1 certified). Untabbed never receives, stores, or transmits your full card number. We store only Stripe-issued tokens (a customer ID and a card-brand + last-4 reference) needed to charge tabs you open.

6. How we use your information

• To create and operate your account.
• To open, update, and close your tabs at venues.
• To process payments via Stripe.
• To send you the push notifications and emails you have opted into (order ready, last call, friend requests, receipts).
• To prevent fraud, abuse, and underage use.
• To comply with law (financial record-keeping, subpoena response, age and alcohol regulations).

7. Information we share

We do not sell your personal information. We share specific data only as needed for the purposes shown:

• Stripe — payment processing.
• Amazon Web Services — infrastructure (data is stored encrypted at rest and in transit, in the United States).
• Apple Push Notification Service / Google FCM — to deliver push notifications.
• The venue you are visiting — your name, your tab, and your order, so the bartender can prepare it.
• Friends you add — your display name, your username, and (if you opt in) your "going out" status and current venue.
• Law enforcement and regulators — when required by valid legal process or to protect the safety of users or the public.

8. Tracking and advertising

Untabbed does not use third-party advertising trackers. Untabbed does not share your data with advertising networks. The App Tracking Transparency prompt is not shown because we do not track you across other apps or websites.

9. Data retention

• Active account data is retained while your account exists.
• Transaction records are retained for at least 7 years to comply with U.S. financial record-keeping laws. After your account is deleted these records are kept in a non-personalized form (your name and payment method reference are removed; only the venue, amount, and date remain).
• When you delete your account under Settings → Delete Account, deletion is immediate. Your profile, friends list, push tokens, and stored Stripe payment tokens are removed within 24 hours (typically within minutes). If you signed in with Apple, your sign-in token is revoked with Apple as part of the same request. To revoke the Google grant, visit myaccount.google.com → Security → Third-party access. Any data we are legally required to retain is held under the rule above.

10. Your rights

You can:

• View and edit your profile in the Settings tab.
• Delete your account at any time under Settings → Delete Account.
• Email support@untabbedapp.com for any access, correction, or deletion request that cannot be completed inside the app.

If you live in California, the EU/UK, or another jurisdiction with privacy law, the rights guaranteed by your local law apply on top of the rights above (including the right to know what we hold on you, to request correction or deletion, to receive a copy in a portable format, and to lodge a complaint with your data protection authority).

11. Children

Untabbed is for users 21 years of age and older. We do not knowingly collect personal information from anyone under 21. If we learn we have collected data from someone under 21, we delete it.

12. Security

We use industry-standard measures: HTTPS/TLS in transit, AES-256 encryption at rest in AWS, hardware-backed Keychain storage for your authentication tokens on your device, and IAM-scoped access to our backend. No system is perfectly secure, but we treat your data as if it were our own.

13. Changes to this policy

We will post any material changes here, update the "Last updated" date, and where required notify you in the app or by email. Continued use after a change means you accept the updated policy.

14. Contact

Questions about this Privacy Policy?