What we keep, what we don't, and how to get rid of it.

What we keep

• Your phone number, email and name. Encrypted at rest with the same kind of locks banks use (AES-256-GCM, with the encryption key held in a managed secret store, never in the database). Your phone number is how the register recognizes you, and how we send the reward notifications you asked for.
• Your visits. When a check is closed to your account at the register, we keep the amount, the location, the time, and, where the venue's point of sale sends it, the items on the check, any discounts and tax, the check number, and how many people were at the table. Never the payment method, card type or tip. The venue uses this to shape rewards around what you actually order and when you come in.
• Your rewards and preferences. Points, rewards, tier, streaks, your home venue, the teams you follow, and your notification choices.
• If your venue runs a free picks game: your date of birth and, at the moment you place a pick, your device's location. Picks are only open to adults, and only inside the state where the game is offered. We check both, then keep the date of birth encrypted with the rest of your details and never store the coordinates.

What we never keep

• Card numbers, CVVs, expiry dates. You pay the venue the way you always have, on their register. Payment stays between you, the venue and their payment processor. We never receive card data at all.
• Bank login credentials. We never ask for them.
• Your password. Sign-in is handled by a dedicated identity provider. We hold an opaque account id, nothing you could log in with.
• Money. Points and picks credits have no cash value, cannot be bought, and are never charged to you.

What we work out about you

Your venue can see which teams you follow, either because you told the app or because your visits line up with their games. It uses that to time messages, offers and reward windows, and to place you on the in-venue leaderboard under the display name you chose. None of it leaves the venue's dashboard, and none of it is sold or shared with anyone else.

How long we keep it

Until you tell us to forget you. There's a button for that in the app, one tap, no support ticket, no two-week wait. When you press it, your phone, email and name are nulled, your sign-in is removed, your rewards and picks are deleted, and your visits become anonymous venue records with no link back to you, all inside a single database transaction. We retain a minimal audit log of the deletion itself for compliance. The full walkthrough is on the account deletion page.

Where it lives

US data centers. Encrypted at rest. Every tenant's data is walled off from every other tenant's inside the database itself. Backups inherit the same encryption and age out within 30 days of a deletion.

Cookies and tracking

We use the minimum needed to keep you signed in. No third-party advertising trackers. No retargeting pixels. The app doesn't follow you around the rest of the internet.

Messages

Push and email are on by default and can be turned off in your profile with one tap; every marketing email carries a one-click unsubscribe. Text messages are off until you turn them on, and every one of them tells you how to stop.

Your rights

You can export everything we have about you, correct anything that's wrong, and ask us to delete it. The export and delete buttons are in your account settings. The right to correct is one email away, write to support@bribedhorns.com.

If you're in California, the CCPA applies to you. If you're in the EU or UK, the GDPR applies to you. Both give you the rights described above; we honor them regardless of where you live.