Privacy policy

This policy describes what Thing To Do LLC collects and why. It is written for this product, not as a generic template. It is not legal advice.

What we collect

• Account. Email, name, date of birth, and a password or a sign-in from Google or X, if you create an account.
• Location you choose. Zip codes, addresses, and map coordinates you type or allow, so we can find places in range. We do not need background tracking to spin.
• Date of birth. To keep bars, clubs, casinos, and spas off the wheel until you meet the age for that type. We store the date so we can compute age; we do not display it publicly.
• Invites. If you share an invite link, we store that a new account used your code so we can credit you both one extra spin.
• Business listings. Name, address, category, public phone/email/website when the map has them, claim tokens, and emails we send about the 30-day trial. If you add a missing place, we store the details you submit and that you submitted them. If you suggest a business email, we store it only after that inbox confirms the link we send. If you invite an unlisted place onto the wheel, we store that you asked and may email that business (not your name) that someone nearby wants them listed.
• Photos. We store image URLs from public maps (OpenStreetMap), Wikimedia/Wikipedia, and a business's own website (Open Graph). If you add a photo link, we store that URL and that you submitted it. We do not scrape Google, Instagram, or Facebook galleries.
• Feedback. If you send a note, we store the message, optional email, and (if you signed in) your account so we can follow up. Notes are private. We do not publish them.

What we use it for

To run the wheel, keep listings current from public maps, email businesses about claiming a listing, remind you to spin if you asked for that, process the charges you start, and stop abuse (fake names, duplicate adds).

Public map records

Place names and pins come from OpenStreetMap and from Overture Maps Places (open records from Meta, Microsoft, and others). We store a place's own address, phone, and email when those files include them. We do not sell a marketing list of consumers. We do send transactional mail to a business when we have a real inbox on file.

Cookies and sign-in

A session cookie (or a preview bearer token) keeps you signed in. We do not run third-party advertising pixels on these pages.

Notifications

If you allow phone pings, we store a browser push subscription so we can notify you 24 hours after a spin when the free one is ready, then a few quieter follow-ups if you go quiet. We do not sell that endpoint. Turn pings or all reminders off on Account.

How long we keep it

Account and listing records stay while the account or listing is active and for a reasonable time after, so we can honor opt-outs, charge disputes, and the 30-day trial clock. You can ask us to close an account or correct a listing.

Your requests

Email privacy@thingtodo.app to access, correct, or delete personal data we hold, or to opt a business email out of listing mail. We may need to verify it is you. Some records (already sent mail, billing history) we may retain where the law requires it.

Children

Thing To Do LLC is not directed at children under 13. Do not create an account for them. Ages 13–17 can spin daytime and family-friendly types; bars, clubs, and casinos wait until 21, and spas until 18.

Changes

If this policy changes in a material way, we will update the date on this page. Keep using the app after that date means you have seen the new version.