Privacy Policy

Last Updated: 03/10/26

Effective Date: 03/10/26

1. INTRODUCTION

1.1 Scope. This Privacy Policy ("Policy") describes how Tablemate ("Company," "we," "us," or "our") collects, uses, discloses, and protects information when you access or use the Tablemate mobile application, website, and related services (collectively, the "Service" or "Platform"). This Policy applies to all users of the Service, including visitors, registered users, hosts, and players.

1.2 Your Consent. By accessing or using the Service, you consent to the collection, use, and disclosure of your information as described in this Policy. If you do not agree with this Policy, you must not use the Service.

1.3 Changes. We may update this Policy from time to time. We will notify you of material changes by posting the updated Policy within the Service and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account and Profile Information:

• Name: First name and last name

• Email address: Used for authentication, account recovery, and communications

• Phone number: Optional; used for account recovery and notifications if provided

• Date of birth: Required for age verification (21+); used to confirm eligibility

• Residential address: Collected during onboarding for geographic eligibility and market verification; never shared with other users and used only for geofencing and host access on game day

• Profile photo: Optional; displayed to other users when you host or join games

• LinkedIn profile: Required for verification; we collect LinkedIn identifier, email, name, and profile URL when you connect your LinkedIn account

Game-Related Information:

• Game titles, dates, times, locations (city and coordinates), stakes, notes, and player capacity when you create or join games

• Messages and communications sent through the Service

• Ratings and reviews you submit about hosts or players

Verification Information:

• Identity verification is conducted through Stripe Identity. We do not store copies of your government-issued ID or selfie. Stripe processes verification and provides us only with a verification result (verified/unverified) and, in some cases, limited metadata. Please review Stripe's Privacy Policy for details on how Stripe handles your data.

Market and Location Eligibility:

• City, state, and ZIP code when you check market availability or join a waitlist

2.2 Information Collected Automatically

Device and Usage Information:

• Device type, operating system, unique device identifiers

• App version, language preferences

• Usage data, including features used, time spent, and interaction patterns

• Crash reports and diagnostic data (if you have not opted out)

Location Information:

• Precise location (GPS): When you grant permission, we collect your device's location to verify you are within designated service areas (e.g., Sacramento region), to show approximate distances to games, and to enable location-based features. Location data may be collected in the background when the app is in use.

• Approximate location: We may infer approximate location from your IP address or from address information you provide.

2.3 Information from Third Parties

Authentication Providers:

• Google Sign-In: When you sign in with Google, we receive your email address, name, and profile photo (if you consent). We use this to create or link your account.

• Supabase Auth: We use Supabase for authentication (email OTP, password, and OAuth). Supabase processes login credentials and session tokens. See Supabase Privacy Policy.

Verification Providers:

• Stripe Identity: For ID verification, we redirect you to Stripe. Stripe collects and processes your government ID and selfie. We receive only the verification outcome.

• LinkedIn: When you connect LinkedIn, we receive your LinkedIn identifier, email, name, and profile URL to verify your professional identity.

3. HOW WE USE YOUR INFORMATION

3.1 To Provide the Service:

• Create and manage your account

• Authenticate you and maintain your session

• Display your profile to other users (name, photo, ratings, verification status) when relevant to games

• Facilitate game discovery, creation, joining, and coordination

• Enable messaging between users

• Show approximate distances to games based on your location

• Verify your eligibility for the Service (age, location, identity)

3.2 To Improve the Service:

• Analyze usage patterns to improve features and user experience

• Debug and fix technical issues

• Develop new features and services

3.3 For Safety and Compliance:

• Enforce our Terms of Service and policies

• Prevent fraud, abuse, and illegal activity

• Comply with legal obligations and respond to lawful requests from authorities

• Protect the rights, property, and safety of Tablemate, our users, and the public

3.4 Communications:

• Send transactional messages (e.g., account verification, password reset, game-related notifications)

• Send service-related announcements (e.g., policy updates, security alerts)

• With your consent, send marketing or promotional communications (you may opt out at any time)

3.5 Aggregated and De-identified Data:

• We may create aggregated or de-identified data that cannot reasonably identify you. We may use such data for analytics, research, and improving the Service without restriction.

4. HOW WE SHARE YOUR INFORMATION

4.1 With Other Users:

• Your first name, last initial (or display name), profile photo, host/player ratings, and verification badges are visible to other users when you host or join games, appear in search results, or are viewed on profiles.

• Your full residential address is never shared with other users. Game addresses are encrypted and disclosed only to approved players on game day, at our discretion.

• Your LinkedIn username may be visible only to fully verified users for trust purposes.

4.2 Service Providers:

• We share information with third-party service providers who perform services on our behalf, including:

  • Supabase: Database, authentication, and backend infrastructure

  • Stripe: Identity verification

  • Google: Sign-in authentication

  • LinkedIn: Professional verification

  • Apple/Google (App Stores): App distribution and in-app purchase processing, if applicable

  • Analytics and crash reporting providers: To improve the Service

  • Cloud hosting and CDN providers: To host and deliver the Service

• These providers are contractually obligated to use your information only to provide services to us and to protect it in accordance with applicable law.

4.3 Legal and Safety:

• We may disclose your information if required by law, court order, subpoena, or government request.

• We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.

4.4 Business Transfers:

• If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

4.5 With Your Consent:

• We may share your information for other purposes with your explicit consent.

4.6 We Do Not Sell Your Personal Information:

• We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. DATA RETENTION

5.1 Active Accounts. We retain your information for as long as your account is active or as needed to provide you the Service.

5.2 After Account Closure. After you close your account, we may retain certain information as necessary to:

• Comply with legal obligations

• Resolve disputes and enforce our agreements

• Prevent fraud and abuse

• Maintain security and integrity of our systems

5.3 Backups and Deletion. Deletion may not be immediate. We may retain copies in backup systems for a limited period. We will delete or anonymize your information when it is no longer needed for the purposes described in this Policy, subject to legal retention requirements.

6. DATA SECURITY

6.1 Measures. We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure data centers, and regular security assessments.

6.2 Limitations. No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You use the Service at your own risk.

6.3 Your Responsibility. You are responsible for maintaining the confidentiality of your account credentials. Notify us immediately if you suspect unauthorized access.

7. YOUR RIGHTS AND CHOICES

7.1 Access and Correction. You may access and update your profile information, contact details, and preferences through the Service's account settings or by contacting us.

7.2 Deletion. You may request deletion of your account and associated personal information by contacting us. We will process your request in accordance with applicable law. Note that we may retain certain information as described in Section 5.

7.3 Location. You may disable location services through your device settings. Doing so may limit or prevent certain features (e.g., verifying you are within a service area, showing distances to games).

7.4 Marketing Communications. You may opt out of marketing emails by clicking the unsubscribe link in any marketing email or by contacting us.

7.5 Privacy Rights by Jurisdiction:

• California Residents: You may have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information. To exercise your rights, contact us or use any in-app tools we provide.

• European Economic Area (EEA) and UK Residents: You may have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent. You may also have the right to lodge a complaint with a supervisory authority.

• Other Jurisdictions: You may have additional rights under local law. Contact us to exercise them.

7.6 Verification. To protect your privacy, we may verify your identity before processing certain requests.

8. CHILDREN'S PRIVACY

8.1 The Service is not intended for individuals under 21 years of age. We do not knowingly collect personal information from anyone under 21. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. We will delete such information promptly.

9. INTERNATIONAL DATA TRANSFERS

9.1 The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your jurisdiction.

9.2 By using the Service, you consent to the transfer of your information to the United States and other countries as described in this Policy. Where required by law, we implement appropriate safeguards (e.g., Standard Contractual Clauses) for transfers of personal data from the EEA, UK, or other jurisdictions.

10. THIRD-PARTY LINKS AND SERVICES

10.1 The Service may contain links to third-party websites, apps, or services (e.g., LinkedIn, Stripe, Google). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing them with any information.

11. COOKIES AND SIMILAR TECHNOLOGIES

11.1 Mobile App. Our mobile app may use local storage, device identifiers, and similar technologies to maintain your session, preferences, and improve the Service.

11.2 Website. If we offer a website, we may use cookies and similar technologies for authentication, analytics, and functionality. You may configure your browser to refuse cookies, but some features may not function properly.

12. DO NOT TRACK

12.1 Some browsers offer a "Do Not Track" (DNT) signal. There is no universally accepted standard for how to respond to DNT signals. We do not currently respond to DNT signals, but we honor your choices as described in this Policy.

13. CONTACT US

For questions or concerns about this Privacy Policy or our data practices, or to exercise your privacy rights, please contact us at:

Tablemate
tablemate916@gmail.com

For privacy-related requests, please include "Privacy Policy" in the subject line and provide sufficient detail for us to process your request.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

Privacy FAQs

What data is collected?

We collect only essential info like device type and game stats to improve your experience.

How is data used?

Is my data shared?

Can I delete my data?

Is my data secure?

Your data helps us maintain app security and personalize gameplay.

We do not sell or share your personal information with third parties except as required by law.

Yes, you can request data deletion by contacting support anytime.

We use encryption and strict protocols to keep your info safe.

Get in touch

Questions about privacy or data? Reach out anytime.