Privacy Policy

Information You Provide Directly

• Account Information: When you create an account, we collect your email address and password, and a display name (1–24 characters) that you can edit at any time. If you do not choose one, we generate a simple default from your email address.
• Guest Names: If you join a Group Slide without an account, we collect the name you type in for that session.
• Profile Image: You may upload a profile image. It is stored in a private storage bucket — not publicly accessible — readable only by you and by members of Group Slide sessions you have joined.
• Payment Information: If you subscribe to a paid plan, payment is processed by our third-party payment processor, Stripe. Subscriptions are not purchasable within the iOS app; Stripe processing applies only to the web app. We do not directly collect or store your credit card number or full payment details — Stripe handles this securely. We do receive limited information from Stripe, such as your subscription status, billing history, and Stripe customer and subscription identifiers, which we store on your profile.

Information Collected Automatically

• Location Data: Slideshow uses your device's location (with your permission), or a location you type in yourself, to find restaurants and venues near you. Venue results from Google Places are never stored — they are re-fetched live each time. We do store your chosen starting location on your own device (see "Storage on Your Device" below), and we store a coarse, imprecise geohash of that starting area alongside the decision records described next, so we can understand how the App performs in different areas.
• Decision and Usage Records: Slideshow keeps a record of how you use the App. This includes the venues shown to you, which you swiped right or left on, which you saved or rated, which filters, modes and Quick Picks you selected, when a decision was started, completed, or abandoned, your position in a deck, timing between actions, and technical context such as app version and platform. These records are stored on our servers and linked to your account.
• Use Without an Account: The only way to use the App while signed out is as an invited guest in a Group Slide session. When you join as a guest, we create a random identifier that is stored on your device and attached to the same kind of decision and usage records. It is not linked to your name or email, and it is not merged into an account if you later sign up.
• Device Information: We store your browser or app user-agent string on every decision record. That string identifies your device type, operating system, and app or browser version, and we use it for debugging and compatibility.
• IP Addresses: When someone attempts to join a Group Slide, we temporarily record the IP address of the request and whether the attempt succeeded, solely to rate-limit abuse of group join codes. These records contain no account or name information.

Information from Third Parties

• Google Places API: Venue information, photos, ratings, and related data displayed in the App are sourced from Google Places API. Use of this data is subject to Google's own privacy practices.
• Stripe: Subscription and payment status information is provided to us by Stripe as our payment processor.

Slideshow stores a small amount of information locally on your device (in browser local storage, session storage, or, in the iOS app, in the device's own secure app storage). This includes:

• Your sign-in session, so you are not signed out each time you open the App.
• Your chosen starting location (latitude and longitude, and a label if you typed one in). This expires automatically after 24 hours and is then cleared.
• Your Group Slide identity for a session you have joined — your participant record and the secret token that authorizes your swipes — plus the name you entered.
• Preferences and app state, such as your selected mode, whether you have seen onboarding, your most recent "Decide For Me" result, and, when signed out, the random identifier described above.

We do not use advertising cookies or third-party tracking cookies. You can clear this information at any time by signing out, clearing your browser storage, or deleting the app from your device.

Group Slide lets several people decide together. When you host or join a group, other members of that group can see the name you are using — your display name if you are signed in, or the guest name you typed in — and that you have joined. The group's shared outcome, including the venue that everyone matched on, is visible to all members.

Your individual left/right swipes are recorded on our servers so a match can be determined, and the host of a session can see the swipes recorded within their own session. Your email address is never shown to other participants. If you join as a guest, no account is created and we do not collect your email address.

We use the information we collect to:

• Provide, operate, and maintain the App's core features (venue discovery, saving favorites, group decisions, personalized recommendations)
• Process subscription payments and manage your account tier, including complimentary or beta access grants
• Communicate with you about your account, subscription, or support requests
• Understand how the App is used, in aggregate, and improve and develop new features
• Detect, prevent, and address technical issues, abuse, or fraudulent activity
• Comply with legal obligations

We do not sell your personal information to third parties, and we do not use your information for advertising.

We share information only in the following circumstances:

• Service Providers: With third-party vendors who help us operate the App, each bound to handle your data securely and only for the purposes we specify:
  • Google — venue and location search via Google Places API
  • Stripe — payment processing and subscription management
  • Supabase / Lovable Cloud — database, authentication, and application hosting
  • Our transactional email provider — delivery of account emails such as sign-up confirmation, magic links, password resets, and email-change confirmations. Your email address and the contents of those messages are processed by that provider.
• Other Users: As described in "Group Slide and What Others Can See" above.
• Legal Requirements: If required to do so by law, or in response to valid legal requests by public authorities.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

We retain your personal information for as long as your account is active or as needed to provide you the App's services. Join-attempt IP records are kept only as long as needed for abuse prevention. If you delete your account, we delete your personal data as described below, except where retention is required for legal, tax, or accounting purposes (such as records of payment transactions held by Stripe).

• Account Deletion: You may delete your account at any time directly within the App, under Account settings. This permanently deletes your profile and display name, your uploaded profile image file, your saved venues, your venue ratings, your decision and usage records, your access grants, and your participation and swipes in group sessions. Any sessions you hosted are deleted along with them, and any active subscription is cancelled.
• Location Permissions: You can enable or disable location access for Slideshow at any time through your device's system settings. Note that some features of the App may not function properly without location access.
• Access and Correction: You may contact us to request access to, correction of, or deletion of your personal data.

If you are a resident of the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR or CCPA/CPRA, including the right to request a copy of your data or object to certain processing. Contact us using the information below to exercise these rights.

Slideshow is not intended for use by children under the age of 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

We take reasonable measures to protect your information from unauthorized access, loss, or misuse. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

The App may contain links to third-party services (such as Google Maps for directions, or a venue's phone number for calling). This Privacy Policy does not apply to those third-party services, and we encourage you to review their respective privacy policies.

Venue photos are loaded by your device directly from Google's image CDN — our servers do not proxy those images. As a result, Google receives your device's IP address and can see which venues were displayed to you.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this policy, and, where appropriate, through additional notice within the App.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at: