Privacy Policy

Effective Date: March 6, 2026 Operator: Yuppy LLC

1. Introduction

Stoop ("we," "our," or "us") is a bar discovery and social planning app operated by Yuppy LLC. This Privacy Policy explains how we collect, use, and protect your information when you use the Stoop mobile application and related services (the "Service").

By using Stoop, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account Information

When you create an account via Apple Sign In, we collect:

• Apple User ID — a unique, anonymous identifier provided by Apple
• Display name — the name you choose to show other users
• Avatar color — your selected profile color
• Preferred drink — the drink you select for personalized pricing

Contact Information

• Phone number hashes — We collect SHA-256 hashes of phone numbers from your contacts, with your permission, solely to help you find friends on Stoop. Hashing occurs on your device. We never store, transmit, or have access to actual phone numbers.

Location Information

• Coarse location — Used client-side only to show nearby bars and sunshine conditions. Your location is never sent to or stored on our servers.

Usage Data

• Favorites and interactions — Bars you save, features you use, and preferences you set within the app.

Analytics Data

• Anonymous analytics — Collected via PostHog using anonymized identifiers. No personal information is tied to analytics data.

Crash Data

• Crash reports — Collected via Sentry to help us fix bugs. Crash reports do not contain personally identifiable information.

3. How We Use Your Information

We use your information to:

• Provide and operate the Service
• Show you personalized drink prices, happy hours, and bar recommendations
• Match you with friends who also use Stoop
• Improve app performance and fix bugs
• Communicate important updates about the Service

4. Third-Party Services

Stoop integrates with the following third-party services, each governed by their own privacy policies:

• Supabase — Database and authentication (Privacy Policy)
• Apple Sign In — Authentication (Privacy Policy)
• Mapbox — Maps (Privacy Policy)
• BestTime — Crowd and busyness data (Privacy Policy)
• Anthropic (Claude) — AI features, server-side only; no user data is sent to Anthropic (Privacy Policy)
• PostHog — Anonymous analytics (Privacy Policy)
• Sentry — Crash reporting (Privacy Policy)

5. Data Sharing

We do not sell your personal information.

We share data only:

• With the third-party service providers listed above, as necessary to operate the Service
• When required by law, regulation, or legal process
• To protect the rights, safety, or property of Yuppy LLC, our users, or the public

6. Data Retention

• Account data — Retained until you delete your account
• Analytics data — Retained for 12 months
• Crash data — Retained for 90 days

When you delete your account, your personal data is permanently removed from our systems.

7. Data Security

We implement industry-standard measures to protect your data:

• TLS encryption for all data in transit
• Encryption at rest for stored data
• Row-level security (RLS) on all database tables
• Strict access controls limiting data access to essential personnel

8. Your Rights

You have the right to:

• Access your personal data
• Delete your account and associated data (available in-app under Settings)
• Export your data (data portability)
• Opt out of analytics collection (available in-app)

To exercise any of these rights, use the in-app settings or contact us at privacy@stoop.bar.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know — You may request the categories and specific pieces of personal information we have collected about you.
• Right to Delete — You may request deletion of your personal information.
• Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.
• No Sale of Personal Information — We do not sell personal information to third parties.

To make a CCPA request, contact us at privacy@stoop.bar.

10. Children's Privacy

Stoop is not intended for use by anyone under the age of 13, in compliance with the Children's Online Privacy Protection Act (COPPA). The Service features content related to alcohol and is designed for users aged 21 and older.

We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through an app update or in-app notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: privacy@stoop.bar Operator: Yuppy LLC