Privacy Policy

Information we collect

• Account details — your email address, a password (stored securely in hashed form by our authentication provider), and the display name you choose.
• Google sign-in (optional)— if you sign in with Google, we receive your name, email address, and profile picture, as authorized by you on Google’s consent screen.
• Profile & content — an optional avatar image you upload, and the content you create: reviews (ratings, written notes, dish tags, and photos), the groups you create or join, and who invited you.
• Essential cookies— a login session cookie and a small preference cookie that remembers which resort you’re viewing (Walt Disney World or Disneyland). We do not use advertising or third-party tracking cookies.

How we use your information

• To provide the app — your account, reviews, groups, badges, and notifications.
• To send transactional emails you’d expect: signup confirmation, sign-in (magic) links, and password resets.
• To keep the service secure and prevent abuse.

We do not sell your personal information, and we do not use it for advertising.

Who processes your data

We rely on a few trusted providers that process data on our behalf:

• Supabase — database, authentication, and image storage.
• Vercel — application hosting.
• Resend — delivery of the transactional emails above.
• Google — only if you choose “Sign in with Google.”

What other people can see

You control the visibility of each review — Public, Groups (visible only to members of groups you share with), or Private (only you). Your display name and avatar appear alongside reviews you share. We share your information with others only according to these settings, with the processors listed above, or where required by law.

Your choices

• Edit your profile, your reviews, and each review’s visibility at any time.
• Request deletion of your account and associated data by emailing hessfinancial@gmail.com.

Children

The app is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has provided us data, contact us and we will remove it.

Security

We use industry-standard measures to protect your data, including encrypted connections and access controls. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version, and significant changes will be reflected here.

Contact

Questions about this policy or your data? Email hessfinancial@gmail.com.