Privacy Policy

A Host is the person paying for the event. Host information may be used for payment authorization, merchant verification, safety, dispute review, and event coordination.

A Guest is the person participating in or benefiting from the event. Guest information may be used for matching, event coordination, mutual verification, safety, dispute review, and merchant fulfillment.

A Merchant is the restaurant or establishment servicing the order. Merchants may receive event, order, verification, and limited user information needed to fulfill the event.

An Initiator is the person who creates the event. A Participant is the person who attends or joins the event. Depending on the event type, the Host may be the initiator or participant, and the Guest may be the initiator or participant.

Treat.Me may collect data at different event stages, including event creation, bidding, acceptance, merchant approval, attendance confirmation, ETA submission, travel coordination, mutual verification, merchant verification, fulfillment, cancellation, dispute, and completion.

We may collect:

• Name;
• Username or display name;
• Email address;
• Phone number;
• Password or authentication credentials, where applicable;
• Account status;
• Login history;
• App session information;
• Account settings;
• Notification preferences;
• Device sessions associated with your account;
• Age confirmation or date of birth, where required;
• Profile creation and update timestamps; and
• Other information needed to create, secure, and maintain your account.

You may provide profile information such as:

• Profile photo or avatar;
• Short bio or profile description;
• Preferences you choose to add;
• Public-facing profile details;
• Ratings, reviews, or reputation indicators;
• Account badges, verification indicators, or safety-related labels; and
• Other optional information you choose to include.

Please do not include sensitive personal information in your profile unless the app specifically asks for it and it is required for a legitimate Treat.Me feature.

When you create, join, bid on, claim, accept, attend, cancel, or complete an event, we may collect:

• Event type;
• Event visibility;
• Event title or description;
• Merchant or place selected;
• Selected items, order details, or order preferences;
• Budget or item limits, where applicable;
• Event creation time;
• Event start, expiration, acceptance, cancellation, and completion times;
• Bid details;
• Invite-link activity;
• Match status;
• Participant status;
• Attendance confirmation;
• ETA information;
• Arrival or presence signals;
• Verification attempts;
• Verification outcomes;
• Merchant acceptance or decline;
• Merchant fulfillment status;
• Completion status;
• Cancellation stage and reason;
• No-show or late status;
• Dispute-related notes; and
• Internal audit records tied to the event.

Treat.Me is a location-based service. We may collect, process, and use location information to operate essential features.

Depending on your device settings, app permissions, and the feature being used, location information may include:

• Approximate location;
• Precise location, when enabled and required for an active feature;
• Location at app launch or app foreground use;
• Location during active event coordination;
• Distance from a selected merchant or meeting place;
• ETA-related location signals;
• Arrival or proximity signals;
• Map interactions;
• Location search terms;
• Pickup, meetup, or merchant coordinates;
• City, region, or general area derived from location; and
• Location metadata needed for safety, fraud prevention, or dispute review.

We may use location information to:

• Show nearby restaurants, merchants, or events;
• Support Lounge or area-based discovery features;
• Help users coordinate travel to a merchant;
• Support ETA, late, and no-show logic;
• Help users find each other at a public merchant location;
• Support merchant verification and order handoff;
• Detect suspicious, unsafe, or abusive activity;
• Review cancellations, disputes, or policy violations; and
• Improve maps, routing, reliability, and user experience.

You can disable location permissions in your device settings. If you do, some Treat.Me features may not work correctly, including nearby discovery, active meetup coordination, ETA-based attendance, proximity verification, and certain safety features.

Treat.Me uses payment service providers, including Stripe, to support payments, authorization, captures, refunds, application fees, merchant payouts, and dispute handling.

We may collect and process payment-related information such as:

• Stripe customer ID;
• Stripe payment method reference or tokenized payment identifier;
• Last four digits and card brand, where provided by the payment processor;
• Payment authorization status;
• Payment intent or charge identifiers;
• Refund identifiers;
• Application fee identifiers;
• Connected-account identifiers for merchants;
• Transaction amount;
• Currency;
• Taxes, fees, cancellation charges, and refund amounts;
• Host, Guest, Merchant, and Treat.Me liability records;
• Payment status;
• Receipt and invoice metadata;
• Fraud, chargeback, or dispute information;
• Payment failure reason codes;
• Payment audit metadata, such as event ID, transaction ID, settlement ID, and correlation ID; and
• Information needed to comply with legal, tax, accounting, anti-fraud, and payment-network obligations.

Treat.Me does not store full credit card numbers or full bank-account numbers on our servers. Payment providers may collect and process payment information directly under their own privacy policies and terms.

Treat.Me may provide in-app messaging or communication features between event parties. We may collect:

• Message content;
• Message sender and recipient;
• Message timestamps;
• Delivery and read status, where supported;
• Attachments, images, or media, if supported;
• Event or transaction association;
• Abuse reports tied to messages; and
• Moderation or safety-review metadata.

Messages may be retained for the duration of an active event and for a limited period after the event if needed for safety, dispute resolution, fraud prevention, legal compliance, audit, or enforcement. We may remove or anonymize messages when they are no longer needed for these purposes.

Treat.Me may use verification steps to support safer event completion. We may collect:

• QR-code scan attempts;
• Device-authentication completion status, where used;
• Verification success, failure, or skip status;
• Merchant verification code status;
• Attempt counts;
• Verification timestamps;
• Device and session identifiers associated with verification;
• Fault or policy classification tied to failed verification; and
• Related audit logs.

Treat.Me does not need to receive your biometric template, face image used by your device for Face ID, fingerprint template, or device passcode when you use device authentication. Device authentication is generally handled by your device or operating system.

When you interact with a merchant through Treat.Me, we may collect:

• Merchant selected;
• Place or restaurant details;
• Menu items selected;
• Item options, modifiers, quantities, and notes;
• Order status;
• Merchant acceptance or decline;
• Merchant verification status;
• Fulfillment status;
• Merchant completion status;
• Merchant-reported issue, delay, cancellation, or incident;
• Merchant support communications; and
• Information needed for refunds, cancellations, disputes, or safety review.

We may automatically collect technical information such as:

• Device type;
• Device model;
• Operating system;
• App version;
• Browser type;
• IP address;
• Mobile carrier or network type;
• Language settings;
• Time zone;
• Device identifiers;
• Push notification token;
• Session identifiers;
• Authentication tokens or security tokens;
• Crash logs;
• Diagnostic logs;
• Performance metrics;
• Referring pages;
• Pages viewed;
• Links clicked;
• Form submission metadata;
• Security events;
• Bot-prevention signals, including security challenge results from services such as Cloudflare Turnstile;
• Cookie and similar technology data; and
• Approximate location derived from IP address.

If you enable notifications, we may collect and use push notification tokens and device-session information to send:

• Event updates;
• Bid or invitation updates;
• Merchant acceptance or decline updates;
• ETA and arrival reminders;
• Verification prompts;
• Order status updates;
• Cancellation and refund updates;
• Safety alerts;
• Account security alerts;
• Support responses; and
• Marketing or promotional messages, where permitted.

You can manage notification permissions through your device settings and, where available, Treat.Me app settings.

If you contact support or report a user, merchant, event, payment issue, or safety concern, we may collect:

• Your name and contact information;
• Support message content;
• Report category and description;
• Screenshots or attachments you provide;
• Event, transaction, payment, or merchant identifiers;
• Account, device, and session information;
• Internal support notes;
• Resolution status;
• Enforcement actions; and
• Follow-up communications.

When you use website forms, including contact, support, merchant-interest, waitlist, beta, or security forms, we may collect:

• Name;
• Email address;
• Phone number;
• Company or merchant name, if applicable;
• City, state, or region;
• Message content;
• Form submission timestamp;
• IP address;
• Browser and device information;
• Bot-prevention or captcha verification data; and
• Any other information you voluntarily submit.

We may use cookies, local storage, SDKs, pixels, tags, and similar technologies to:

• Keep you signed in;
• Remember preferences;
• Secure forms;
• Prevent fraud and abuse;
• Understand website usage;
• Measure performance;
• Improve user experience;
• Support analytics;
• Diagnose bugs; and
• Manage consent or privacy preferences.

You can manage cookies through your browser settings. Blocking cookies may affect website or app functionality.

We may use Cloudflare Turnstile or similar bot-prevention and security tools to protect account registration, login, password reset, contact forms, support forms, merchant-interest forms, waitlist forms, and other sensitive or public-facing workflows.

These tools may process technical and interaction-related information, such as IP address, device and browser information, network information, page or form interaction signals, timestamps, and security challenge results. We use this information to help determine whether activity appears legitimate, automated, abusive, fraudulent, or unsafe.

Turnstile may operate in a managed, non-interactive, or invisible mode. If invisible mode is used, the challenge may run in the background without displaying a visible checkbox or challenge to you. Cloudflare processes Turnstile information under its own applicable terms, privacy policy, and Turnstile Privacy Addendum.

We may receive information about you from:

• Other Treat.Me users, such as reports, ratings, reviews, messages, or dispute statements;
• Merchants, such as order status, verification results, incident reports, or fulfillment updates;
• Payment processors, such as payment, refund, chargeback, or risk information;
• Identity, fraud, security, analytics, or support vendors;
• App stores or device platforms;
• Publicly available sources; and
• Law enforcement, regulators, courts, or legal representatives, when legally required or appropriate.

We use information to:

• Create and maintain accounts;
• Authenticate users;
• Display profiles;
• Show nearby merchants and events;
• Enable event creation;
• Enable bidding, invite claims, matching, and acceptance;
• Send events to merchants;
• Coordinate ETA, arrival, and meetup flows;
• Support mutual verification;
• Support merchant verification;
• Process orders and completion;
• Send notifications and service messages;
• Provide customer support; and
• Maintain platform availability and reliability.

We use information to:

• Authorize and process payments;
• Support Stripe customer and payment method references;
• Calculate taxes, service fees, merchant fees, cancellation fees, refunds, and settlement amounts;
• Support merchant payouts;
• Provide receipts and transaction records;
• Handle chargebacks, disputes, and payment failures;
• Detect suspicious or fraudulent payment activity;
• Maintain tax, accounting, and audit records; and
• Enforce payment-related terms and policies.

We use information to:

• Help verify event attendance;
• Support QR-code or code-based verification;
• Determine whether a user may be late or a no-show;
• Review cancellations and disputes;
• Investigate reports of unsafe, fraudulent, or abusive activity;
• Prevent harassment, scams, impersonation, or platform manipulation;
• Enforce our Terms and Safety Guidelines;
• Suspend, restrict, or remove accounts where appropriate;
• Communicate safety information; and
• Protect users, merchants, Treat.Me, and the public.

We use information to:

• Recommend nearby merchants or events;
• Remember preferences;
• Improve search and discovery;
• Improve maps, navigation, and location-based features;
• Improve event workflows;
• Improve notification timing and relevance;
• Understand which features are useful;
• Diagnose crashes or errors; and
• Develop new features.

We use information to send:

• Account messages;
• Login or security alerts;
• Payment and receipt messages;
• Event and order updates;
• Verification reminders;
• Support responses;
• Policy updates;
• Safety alerts;
• Merchant or event-related notices;
• Service announcements; and
• Marketing messages where permitted.

You may opt out of certain marketing communications, but we may still send transactional, safety, legal, or account-related messages.

We use information to:

• Detect fake accounts;
• Prevent spam, bots, scraping, and abuse;
• Protect login and account security;
• Monitor suspicious patterns;
• Investigate payment fraud;
• Prevent unauthorized access;
• Enforce rate limits and security controls;
• Protect forms and support channels; and
• Maintain the integrity of Treat.Me.

We use information to:

• Comply with applicable laws;
• Respond to subpoenas, court orders, warrants, and lawful requests;
• Maintain tax, accounting, and payment records;
• Enforce contracts and policies;
• Establish, exercise, or defend legal claims;
• Protect life, safety, or property; and
• Cooperate with regulators, law enforcement, or courts when legally required.

We may show limited information to other users when needed for platform functionality, such as:

• Display name;
• Profile photo;
• General profile details;
• Ratings or reviews;
• Event-related role;
• Event status;
• Selected merchant;
• Approximate arrival or coordination information;
• In-app messages you send;
• Verification prompts or outcomes needed to complete an event; and
• Limited cancellation or completion status.

We do not intentionally show your full payment details, full card number, private account credentials, or unnecessary personal contact information to other users.

We may share information with merchants when needed to evaluate, accept, prepare, verify, fulfill, or complete an event, such as:

• Order details;
• Selected items and modifiers;
• Event status;
• Host or payer verification information;
• Merchant verification code status;
• Arrival, pickup, or handoff status;
• Cancellation or completion status;
• Payment or settlement status needed for merchant operations; and
• Support or dispute information relevant to the merchant.

Merchants should use Treat.Me information only for Treat.Me-related operations and must not misuse user information.

We share payment-related information with Stripe and other payment infrastructure providers as needed to:

• Create and manage customer payment profiles;
• Authorize, capture, refund, or dispute payments;
• Calculate and route application fees;
• Support connected merchant accounts;
• Support fraud detection;
• Comply with payment-network rules;
• Meet legal, tax, risk, and compliance obligations; and
• Maintain records of transactions.

Payment providers may process your information under their own terms and privacy policies.

We may share information with service providers that help us operate Treat.Me, including providers of:

• Cloud hosting and infrastructure;
• Database services;
• Authentication and identity tools;
• Push notifications;
• Email and SMS;
• Mapping and location services;
• Analytics;
• Crash reporting;
• Logging and observability;
• Bot protection and captcha services;
• Fraud detection;
• Customer support;
• Security monitoring;
• Payment processing;
• Tax calculation;
• File storage;
• Content delivery; and
• Legal, accounting, and compliance services.

These providers are authorized to use information only as needed to provide services to us or as otherwise permitted by law and their agreements with us.

Treat.Me may use mapping and location providers to display maps, calculate distances, support merchant discovery, support ETA-related features, and help users navigate to participating merchants.

Depending on your permissions and app usage, these providers may receive location, map, device, and usage information needed to provide map and location services.

Treat.Me may use push notification and messaging providers to deliver service messages, safety alerts, event updates, and account notices. These providers may process device tokens, notification payloads, delivery status, and related technical information.

Treat.Me may use security and bot-prevention services, including Cloudflare Turnstile or similar tools, to protect website forms, account registration, login, password reset, support, merchant-interest forms, waitlist forms, and other public or sensitive endpoints. These services may process device, browser, network, interaction, and challenge-result signals to determine whether activity appears automated, abusive, fraudulent, or unsafe.

If we use an invisible bot-prevention mode, the security check may run in the background without displaying a visible challenge to you.

We may share information when we believe it is necessary or appropriate to:

• Comply with law;
• Respond to legal process;
• Cooperate with law enforcement;
• Protect user safety;
• Investigate fraud, abuse, threats, harassment, or violence;
• Enforce our Terms, Safety Guidelines, and policies;
• Protect Treat.Me, users, merchants, service providers, or the public;
• Prevent or investigate security incidents;
• Resolve disputes; or
• Establish, exercise, or defend legal claims.

If Treat.Me is involved in a merger, acquisition, financing, corporate reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

We may share information when you ask us to, authorize us to, or use a feature that requires sharing.

Account information is generally retained while your account is active. If you delete your account, we will delete or anonymize personal information unless retention is needed for legal, tax, payment, fraud-prevention, safety, dispute, enforcement, or audit purposes.

Event, order, payment, fee, refund, cancellation, settlement, and dispute records may be retained for longer periods because they may be needed for:

• Receipts;
• Refunds;
• Chargebacks;
• Tax records;
• Accounting;
• Merchant payout records;
• Safety investigations;
• Dispute resolution;
• Fraud prevention;
• Legal compliance; and
• Audit logs.

Location information may be retained while needed to provide location-based services, support active events, investigate safety issues, resolve disputes, prevent fraud, and maintain audit records. We may store precise location for shorter periods where possible and retain derived, approximate, or event-related records when needed for legitimate business, safety, legal, or audit purposes.

Messages may be retained during the active event and for a limited period after the event. Messages connected to reports, disputes, fraud, safety incidents, legal matters, or enforcement actions may be retained longer.

Support communications and reports may be retained to resolve your request, maintain service quality, detect repeated abuse, enforce policies, and comply with legal obligations.

Technical logs, security records, crash reports, and diagnostic data may be retained for limited periods unless longer retention is needed for security, fraud prevention, debugging, legal compliance, or audit purposes.

We may retain information that has been anonymized, de-identified, or aggregated so it can no longer reasonably identify you. We may use this information for analytics, reporting, research, product improvement, and business purposes.

You may request a copy of personal information we maintain about you.

You may request that we correct inaccurate or incomplete information.

You may request deletion of personal information, subject to legal and operational exceptions.

You may request a portable copy of certain information where required by law.

You may object to or request that we restrict certain processing where required by law.

Where processing is based on consent, you may withdraw consent. Withdrawal does not affect processing that occurred before withdrawal.

You may opt out of promotional emails by using the unsubscribe link, where available, or by contacting us. You may still receive transactional, safety, legal, or account-related communications.

You can disable push notifications through your device settings. Some event, safety, and account updates may be less visible if notifications are disabled.

You can control location permissions through your device settings. Disabling location may limit Treat.Me features that depend on nearby discovery, ETA, meetup coordination, arrival detection, or safety review.

You can manage cookies through browser settings. Blocking cookies may affect login, forms, personalization, analytics, or security features.

To submit a privacy request, contact:

Email: support@treat.me Subject Line: Privacy Request

We may need to verify your identity before completing a request. We may ask for information reasonably necessary to confirm that you are the account holder or authorized representative.

Residents of certain U.S. states may have rights to access, correct, delete, obtain a copy of, or opt out of certain uses of personal information. If these rights apply to you, you may submit a request by contacting support@treat.me.

Treat.Me does not knowingly sell personal information in exchange for money. If we engage in activities that applicable law treats as a “sale,” “sharing,” or targeted advertising, we will provide required notices and opt-out methods.

If you are a California resident, you may have rights under California privacy law, including the right to know, delete, correct, and opt out of certain sharing or selling of personal information.

Categories of personal information we may collect include:

• Identifiers, such as name, email, phone number, account ID, device ID, and IP address;
• Customer records, such as payment-related records and support records;
• Commercial information, such as event, order, transaction, refund, and cancellation records;
• Internet or network activity, such as app usage, logs, and website interactions;
• Geolocation data, such as approximate or precise location depending on permissions and feature use;
• Audio, electronic, visual, or similar information, such as profile photos, support attachments, or user-uploaded content;
• Inferences, such as preferences derived from app activity; and
• Sensitive personal information, such as precise location or payment-related information, where applicable.

We use these categories for the purposes described in this Privacy Policy, including operating Treat.Me, processing transactions, providing safety features, preventing fraud, supporting users, and complying with law.

If you are located in the EEA, UK, or Switzerland, we process personal information under legal bases that may include:

• Contract: to provide Treat.Me services you request;
• Legitimate interests: to secure, improve, and operate Treat.Me, prevent fraud, support safety, and resolve disputes;
• Consent: where required, such as for certain location permissions, cookies, or marketing communications;
• Legal obligation: to comply with law, payment, tax, accounting, and regulatory duties; and
• Vital interests or public interest: where necessary to protect safety or respond to urgent situations.

You may have rights to access, correct, delete, restrict, object, port, or withdraw consent. You may also have the right to lodge a complaint with a data protection authority.

Treat.Me may process and store information in the United States and other countries where we or our service providers operate. Privacy laws in those locations may differ from the laws where you live.

Transactional messages may include:

• Login and security alerts;
• Event invitations;
• Bid and match updates;
• Merchant acceptance or decline;
• ETA and arrival reminders;
• Verification prompts;
• Order status updates;
• Payment receipts;
• Refund notices;
• Cancellation notices;
• Support replies;
• Policy notices; and
• Safety alerts.

You may not be able to opt out of essential transactional messages while maintaining an active account.

Promotional messages may include product announcements, offers, merchant promotions, or Treat.Me updates. You may opt out of promotional emails or marketing notifications where required by law or where controls are provided.