Privacy Policy

Effective date: [EFFECTIVE DATE] This Privacy Policy explains how [COMPANY LEGAL NAME], doing business as Neighborhood Sauna ("we", "us" or "our"), collects, uses, shares and protects personal information when you use our saunas, our iPhone app and our website (together, the "Services"). It also explains the privacy rights you have under California law. If you have questions, contact us at [PRIVACY EMAIL]. We do not sell your personal information, we do not share it for targeted advertising, and we do not use advertising or analytics trackers in our app or on our website. 1. Information We Collect 1.1 Information you give us • Account details: your name, email address and password. Passwords are stored by our authentication provider in hashed form; we cannot see them. If you sign in with Google, we receive your name and email address from Google. • Profile details: your mobile number, date of birth, gender, zip code, home Neighborhood (location), and whether you'd like friends to be able to find you by name. • Emergency contact: the name, relationship and phone number of the person you'd like us to contact in an emergency. • Terms and Waiver records: when you accept our Terms and Conditions and sign our Waiver and Release of Liability, we record your name, email address and date of birth as they were at that moment, the exact wording you agreed to, the version and a fingerprint of the document, the date and time, your IP address, and the type of device and app or browser you used. • Bookings: the sessions you book, how many people are coming, and any cancellations and refunds. • Guests: if you book for other people, the names you give us and, for anyone who isn't yet a member, the email address or mobile number you provide so they can be invited. Please only give us a guest's details with their permission. • Payments: your card is collected and stored by our payment processor, Stripe. We do not see or store your full card number. We keep the card brand and last four digits, your Stripe customer reference, and a record of each payment and refund. • Messages: anything you send us, such as questions, feedback or a report about a safety or conduct issue. 1.2 Information we collect automatically • Device and log information: your IP address, device type, operating system, app or browser version, and the dates and times you use the Services, collected when you sign in, book and accept our Terms and Waiver. • Push notification token: if you allow notifications in the iPhone app, a token that lets us send notifications to your device. • Website storage: our website uses your browser's storage to keep you signed in and to remember a booking you were part-way through. We do not use advertising or tracking cookies. 1.3 Information from others • If another member books you as their guest, we receive your name and the email address or mobile number they give us. • If you sign in with Google, we receive your name and email address from Google. 1.4 Information at our saunas • Video surveillance (CCTV) in the areas described in our Terms and Conditions, for safety and security. We never place cameras in changing rooms, showers or restrooms. • Incident records: if you are involved in an incident, injury or conduct report, we keep a record of what happened, which may include health information you or others share with staff at the time. 1.5 What we don't collect • We do not ask for or keep your medical history. Our Waiver asks you to confirm you are fit to take part, but you do not tell us your conditions. • Face ID: if you turn on Face ID in the iPhone app, your face data never leaves your device and is never sent to us. Your sign-in details are stored securely in your device's keychain. • Precise location: we do not track your location. We only use the zip code you enter. 2. How We Use Your Information We use personal information to: • create and manage your account and let you sign in; • take and manage bookings, process payments and refunds, and send booking confirmations and notices; • confirm you are 18 or older; • keep a permanent record that you, and each guest, accepted our Terms and signed our Waiver; • contact your emergency contact, and give first aid or call emergency services, if you appear to need help; • find the Neighborhood closest to you from your zip code; • let you add guests to a booking, notify them, and let them find and accept your invitation; • keep our saunas safe and secure, enforce our Terms and Code of Conduct, investigate incidents, and prevent fraud and misuse; • respond to your questions and requests; • send you news, events and offers, but only if you opted in (you can opt out at any time); • understand how our Services are used so we can improve them; and • comply with the law, and establish, exercise or defend legal claims. 3. How We Share Your Information We share personal information only as follows: • Service providers who run parts of our Services for us under contracts that limit how they can use it: Supabase (database, sign-in and hosting of our servers), Stripe (payments), Apple (the iPhone app, push notifications and Apple Pay), Google (if you sign in with Google), Zippopotam.us (looking up a zip code's location on our website) and [WEBSITE HOSTING PROVIDER]. • Other guests: if you book for someone, they see your first name and last initial and the session details. If someone books for you, they see your first name and last initial and whether you have signed the Waiver, but not your other details. Other members can find you by name only if you turn that on in your Profile; otherwise they need your exact email or mobile number. • Emergency services and your emergency contact, if you appear to need help. • Our insurers, lawyers and professional advisers, and law enforcement, in connection with an incident, claim or legal requirement. • A successor or buyer of our business, if it is sold or reorganized, subject to this Privacy Policy. • Anyone else, with your permission. We do not sell personal information and do not share it for cross-context behavioral advertising. 4. How Long We Keep Information • Account and profile details: while your account is open, then deleted or anonymized within [90] days of closing it, except as below. • Terms and Waiver records, and incident records: kept permanently, including after your account is closed, because we may need them to respond to a claim. They are kept securely and used only for that purpose. • Booking and payment records: [7] years, for tax and accounting. • CCTV footage: [30] days, unless it is needed for an incident, claim or legal requirement. • Guest invitations for people who never sign up: [12] months after the session. • Push notification tokens: until you turn off notifications, delete the app, or close your account. 5. Your Choices • You can update your details in your Profile at any time. • You can turn "Let friends find me by name" on or off in your Profile. • You can opt out of news and offers using the link in any message, or by contacting us. • You can turn notifications off in your iPhone's Settings. • You can close your account [in your Profile / by contacting us]. Records we must keep, as described in Section 4, are retained. 6. Your California Privacy Rights If you live in California, you have the right to: • know what personal information we have collected about you, where it came from, why we use it, and who we share it with; • get a copy of your personal information; • ask us to delete your personal information; • ask us to correct inaccurate personal information; • opt out of the sale or sharing of your personal information (we do not sell or share it); • limit our use of sensitive personal information (we use it only as needed to provide the Services, as allowed by law); and • not be discriminated against for using these rights. To make a request, email [PRIVACY EMAIL]. We will confirm your identity by matching information we already hold, and respond within 45 days. You can use an authorized agent; we may ask them for proof of your permission. Some information, such as signed Waiver records and information needed for a claim, can't be deleted because the law allows us to keep it. In the last 12 months we have collected the categories of personal information described in Section 1, including identifiers, customer records, characteristics protected by law (age and gender), commercial information, internet activity, audio/visual information (CCTV), and sensitive personal information (account login details). We used them for the purposes in Section 2 and disclosed them to the categories of recipients in Section 3. Our website recognizes the Global Privacy Control signal; because we don't sell or share personal information, no further action is needed. California's "Shine the Light" law: we do not share personal information with third parties for their own direct marketing. 7. Security We protect personal information with measures such as encryption in transit, access controls that limit each person to their own records, and strict limits on staff access. No system is completely secure, so please keep your password private and tell us if you think your account has been misused. 8. Children Neighborhood Sauna is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it. 9. Where Your Information Is Stored We are based in the United States and store information in the United States. 10. Changes to This Policy We may update this Privacy Policy. We will post the new version with a new effective date and, if the changes are significant, tell you in the app, on our website or by email. 11. Contact Us [COMPANY LEGAL NAME] [POSTAL ADDRESS] [PRIVACY EMAIL]