Privacy Policy

Effective: April 21, 2026

My Treat ("we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, and protect your personal information when you use the My Treat mobile application and website (the "Service").

1. Information We Collect

Information you provide

Data	Purpose
Name, email address	Account creation and communication
Date of birth	Age verification (18+ requirement). We derive an age bracket (e.g., "20s") for display; your exact birth date is not shown to other users.
Home city and state	Showing relevant local content
Profile photos	Identity and profile display
Interests	Personalizing your feed and matching
Posts, messages, reviews	Core service functionality
Phone number (optional)	Emergency contact and verification

Information collected automatically

Data	Purpose
Device tokens (FCM)	Sending push notifications you have opted into
Device type and OS version	App compatibility and debugging
Approximate location (when permitted)	City-level content filtering. We do not track or store precise GPS coordinates continuously.
Usage data (screens viewed, features used)	Improving the Service

2. How We Use Your Information

• Provide the Service: Display your profile, show relevant posts, facilitate connections and messaging
• Personalization: Rank content based on your interests, location, and activity patterns
• Safety and moderation: Enforce Community Guidelines, detect policy violations, maintain trust scores
• Content review: Authorized My Treat personnel and automated systems may review messages, posts, photos, and other content you submit through the Service (including direct messages between users and messages exchanged with sponsor venues) for safety, moderation, policy enforcement, abuse and fraud investigation, dispute resolution, legal compliance, and service improvement. We do not sell or share the substance of these communications, except (a) with service providers solely to operate the Service, (b) as required by law or legal process, or (c) to protect the safety of users or the integrity of the Service.
• Notifications: Send push notifications about messages, matches, event reminders, and (for premium users) interest-based alerts
• Improvement: Analyze usage patterns to improve features and fix bugs
• Communication: Send service announcements, policy updates, and support responses

3. Third-Party Services

We use the following third-party services to operate the Service:

Service	Provider	Purpose
Firebase Authentication	Google LLC	Account sign-in (email/password, Google, Apple)
Cloud Firestore	Google LLC	Database storage for profiles, posts, messages
Firebase Cloud Storage	Google LLC	Photo storage
Firebase Cloud Messaging	Google LLC	Push notifications
Firebase Cloud Functions	Google LLC	Server-side logic (moderation, notifications, matching)
Google Cloud AI (Gemini)	Google LLC	Content moderation, tag generation, AI-assisted features

These services process data in accordance with Google's Data Processing Terms. Data may be processed in the United States.

4. Data Sharing

We do not sell your personal information. We share data only in these circumstances:

• With other users: Your profile name, photos, age bracket, city, interests, trust score, and reviews are visible to other users as part of the Service
• With service providers: Third-party services listed above, solely to operate the Service
• For legal compliance: When required by law, legal process, or to protect the safety of users
• With your consent: In any other case, only with your explicit permission

5. Data Retention

• Active accounts: Data is retained as long as your account is active
• Deleted accounts: Upon account deletion, we remove your profile, posts, and personal data within 30 days. Some data may be retained in anonymized form for analytics, or as required by law
• Messages: Messages in shared chat threads remain visible to the other participant after your account deletion, but your profile information is removed
• Reports: Safety reports may be retained for up to 2 years to support moderation and legal obligations

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate information through your profile settings
• Deletion: Request deletion of your account and personal data by contacting support@mytreat.club
• Portability: Request your data in a machine-readable format
• Opt-out: Disable push notifications through your device settings

To exercise any of these rights, contact us at support@mytreat.club. We will respond within 30 days.

7. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will promptly terminate their account and delete their data.

8. Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (TLS/HTTPS)
• Firebase Authentication with secure token management
• Firestore security rules restricting data access by user role
• AI-powered content moderation to detect unsafe content
• Server-side validation of all user actions

No system is perfectly secure. We cannot guarantee absolute security but will notify affected users of any data breach as required by law.

9. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact support@mytreat.club.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification. The "Effective" date at the top of this page indicates when the policy was last revised.

11. Contact

For privacy-related questions or requests, contact us at:

My Treat
Email: support@mytreat.club