Downtown Vibes — Privacy Policy

Effective date: April 21, 2026 Last updated: April 21, 2026

This Privacy Policy describes how Potions and Familiars LLC ("we," "us," or "our") collects, uses, and shares information when you use the Downtown Vibes mobile application (the "App"). By using the App, you agree to this Privacy Policy.

If you have questions, contact us at dylanleeson@potionsandfamiliars.com.

1. Information we collect

We collect the following categories of information:

Account information. When you sign up, we collect your email address and a password (stored as a salted hash, never in plaintext). We may also collect a role designation (customer or business owner) and any profile details you choose to add.

Business listing information. If you create a business listing, we collect the business name, description, location (latitude/longitude), hours, category, photos, and contact details you provide.

Vibe check content (user-generated content). When you post a "vibe check," we collect the text, images, location, and timestamp you submit. We also collect any reports users file against vibe checks.

Location data. With your permission, we collect approximate and/or precise device location to show nearby businesses and to tag vibe checks. You can revoke location access at any time in your device settings.

Subscription and billing data. Paid subscriptions (Single Pin, Dual Pin) are processed entirely through Apple's In-App Purchase system and RevenueCat. We do not see or store your payment card, billing address, or other financial information. We receive a transaction identifier and subscription status from RevenueCat to entitle features in the App.

Device and usage data. We collect standard technical information such as device type, operating system version, App version, crash logs, and error events to diagnose issues and improve the App.

Favorites and interactions. We store which businesses you favorite and your interactions with vibe checks (e.g., posts you create, reports you file, users you block).

Communications. If you email us for support, we retain the message and your reply address so we can respond and improve the App.

2. How we use information

We use the information we collect to:

Create and manage your account and authenticate you
Display business listings, vibe checks, and map features
Process and deliver your in-app subscription entitlements
Send transactional communications (e.g., password reset)
Moderate user-generated content and enforce the Terms of Service
Diagnose crashes, measure performance, and improve the App
Comply with legal obligations and respond to lawful requests

We do not sell your personal information, and we do not use your data for third-party advertising.

3. How we share information

We share information only with the service providers that make the App run, and only to the extent necessary:

Supabase, Inc. — hosts our database and authentication infrastructure. Supabase stores your account credentials, business listings, vibe checks, favorites, and related app data on our behalf.
RevenueCat, Inc. — manages subscription entitlements and receives Apple IAP transaction data.
Apple Inc. — processes all in-app purchase transactions and receives payment details directly from you. We never receive your payment details.
Google LLC (Google Maps Platform) — powers the in-app map. Map tile requests include coarse location.
Expo (650 Industries, Inc.) — provides the push notification infrastructure and over-the-air update delivery for the App.

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, or property of Potions and Familiars LLC, our users, or the public.

If Potions and Familiars LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4. Data retention

We retain your account and content for as long as your account is active. If you delete your account (see Section 6 below), we delete your authentication record, business listings, vibe checks, favorites, and related app data from our primary database. Backups are retained on a rolling basis not to exceed 30 days and are then overwritten.

We may retain a minimal record (e.g., a deleted-account marker) where necessary to comply with legal obligations, resolve disputes, or prevent abuse.

5. Security

We use industry-standard safeguards to protect your information, including:

TLS encryption for all data in transit
Row-level security policies in the database so one user cannot read or modify another user's data
Salted password hashing — we never store plaintext passwords
Principle of least privilege for backend keys
Regular security reviews

No system is perfectly secure. If we become aware of a security incident affecting your data, we will notify you as required by applicable law.

6. Your rights and choices

You have the following controls:

Access and correction. You can view and edit your account details, business listings, and vibe checks directly in the App.

Deletion. You can delete your account at any time from the App (Profile → Delete Account or on the login screen). Deletion cascades to your business listings, vibe checks, favorites, and related app data. You can also request deletion at potionsandfamiliars.com/downtownvibes-data-deletion or by emailing dylanleeson@potionsandfamiliars.com.

Location permissions. You can grant or revoke location access at any time in your device's system settings.

Marketing. The App does not send marketing communications. Transactional emails (e.g., password reset) cannot be opted out of while your account is active.

Regional rights (GDPR / CCPA). If you reside in the European Economic Area, the United Kingdom, or California, you may have additional rights including the right to access, correct, delete, port, or restrict processing of your personal data, and to lodge a complaint with a supervisory authority. To exercise any of these rights, email dylanleeson@potionsandfamiliars.com. We do not sell personal information as defined by the CCPA.

7. Children's privacy

Downtown Vibes is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

8. International users

The App is operated from the United States. If you use the App from outside the United States, your information will be transferred to, processed, and stored in the United States, which may have data protection laws different from those in your country.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. Material changes will be communicated in-app or by email. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact us

Potions and Familiars LLC Email: dylanleeson@potionsandfamiliars.com Website: potionsandfamiliars.com

Downtown Vibes is a product of Potions and Familiars LLC