Privacy Policy

1. Information you give us

• Account details: your name, email address, password (stored only as a secure hash) and, if you choose, a phone number, profile photo and bio.
• Age: to confirm you are 18 or older.
• Sign-in with Google or Apple: the name and email address the provider shares with us, and a provider identifier.
• Venue accounts: business name, venue address, category, photos, opening hours, entry rules, events, promotions and contact details.
• Messages you send us through the contact form, waitlist or email.

2. Information collected automatically

• Location: when you allow it, your device’s approximate or precise location while the app is in use, to show venues near you. We do not track your location in the background.
• Usage: venues you view and save as favorites, and basic technical information such as device type, operating system and app version.
• Push notification token, if you allow notifications.
• Server logs: IP address, request times and error information, kept for security and troubleshooting.

3. Payments

Venue subscriptions are processed by Stripe. Card details are entered directly into Stripe and are never stored on our servers. We receive only a payment reference, the card brand and last four digits, and the subscription status.

4. How we use your information

• To create and secure your account and keep you signed in.
• To show nearby venues, crowd levels, events and promotions.
• To let venues manage their listing and subscription.
• To review and approve venues and promotions.
• To send account emails such as verification codes, password resets and important service notices.
• To answer your messages and provide support.
• To prevent fraud, abuse and security incidents, and to comply with the law.
• To understand, in aggregate, how Barnola is used so we can improve it.

5. How we share information

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share information only:

• With service providers who run parts of Barnola for us — hosting, email delivery, payment processing (Stripe), sign-in (Google, Apple) and push notifications — under contracts that limit their use of it.
• With venues, only in aggregate (for example, the number of views a venue received).
• When required by law, or to protect the rights, safety and property of our users, venues or Barnola.
• As part of a merger, acquisition or sale of assets, in which case this policy continues to apply.

6. Data retention

We keep your information while your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep certain records — for example payment and tax records — for as long as the law requires.

7. Security

We use encryption in transit (HTTPS), hashed passwords and codes, short-lived sessions and access controls to protect your information. No system is perfectly secure, so please use a strong, unique password.

8. Your choices and rights

• Access and update your profile information in the app at any time.
• Turn location access and notifications on or off in your device settings.
• Delete your account in the app or by contacting us — see our Delete Your Account page.
• Depending on where you live (for example California), you may have the right to request access to, correction of, or deletion of your personal information. Contact us to make a request; we will not discriminate against you for exercising your rights.

9. Age requirement

Barnola is only for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you in the app or by email before they take effect. The date at the top shows when it was last updated.

11. Contact us

If you have questions about this policy or your information, contact us using the details below.