Privacy Policy

Weekend Crusher LLC ("we," "us," or "our") operates Weekend Crusher, an AI-powered family activity planning service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using Weekend Crusher, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email address, and password when you create an account (or Google account details if you sign in with Google)
• Family Profile: Names and ages of adults and children in your household, pet information, family structure
• Preferences: Activity interests, budget preferences, scheduling goals, distance preferences
• Location Data: Your metro area or zip code for discovering local events
• Email Recipients: Email addresses of people you designate to receive schedule emails (e.g., spouse, grandparents, caregivers)
• Feedback: Ratings, reviews, and feedback you provide about activities and schedules
• Community Submissions: Event information you submit through our community features

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, swipe interactions, schedule generation history
• Device Information: Browser type, operating system, device type (mobile/desktop)
• Log Data: IP address, access times, referring URLs
• Performance Data: Error logs and service performance metrics

1.3 Information from Third-Party Services

• Google Sign-In: If you authenticate with Google, we receive your name, email, and profile photo
• Stripe: We receive subscription status and payment confirmation (we do not store your credit card details)

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Generate personalized activity recommendations and weekend schedules based on your family's ages, interests, and location
• Discover Events: Use your location to find relevant local events and activities in your metro area
• Send Communications: Deliver weekly schedule emails, ticket sale reminders, and feedback requests to you and your designated recipients
• AI Processing: Send your family preferences (anonymized where possible) to Google Gemini AI to generate tailored activity recommendations
• Improve the Service: Analyze usage patterns and feedback to enhance features, content quality, and user experience
• Process Payments: Manage your subscription through Stripe
• Maintain Security: Detect and prevent fraud, abuse, and security incidents
• Comply with Law: Meet legal obligations and respond to lawful requests

3. Third-Party Services

We use the following third-party services to operate Weekend Crusher. Each service has its own privacy practices:

4. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for authentication and basic functionality (e.g., Firebase Auth session cookies)
• Preference Cookies: Store your selected region and display preferences
• Local Storage: Used to store your saved activities list and UI preferences on your device

We do not use third-party advertising cookies or cross-site tracking. We do not sell your data to advertisers.

5. Data Retention

We retain your data as follows:

• Account Data: Retained as long as your account is active
• Family Profiles and Preferences: Retained as long as your account is active
• Generated Schedules: Retained for up to 12 months, then automatically deleted
• Event Data: Expired events are automatically cleaned up daily
• Email Logs: Delivery records retained for up to 90 days
• Payment Records: Retained as required by applicable financial regulations

When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Firebase Authentication with secure session management
• Encrypted data transmission (HTTPS/TLS)
• Firestore security rules restricting data access to authorized users
• API keys and secrets stored in secure cloud secret management
• Regular security reviews of infrastructure and code

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to using commercially reasonable measures to protect your data.

7. Children's Privacy (COPPA)

We do not knowingly collect personal information directly from children under 13 years of age. The family profile information (children's names and ages) is provided by the parent or guardian account holder for the purpose of personalizing activity recommendations.

Children's names provided in family profiles are used solely to personalize schedule descriptions and are not shared with third parties for marketing purposes. Only age ranges (not exact birthdates) are sent to AI services for recommendation generation.

If you believe we have inadvertently collected personal information from a child under 13, please contact us at [email protected] and we will promptly delete the information.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate personal data through your account settings
• Deletion: Delete your account and associated data through your account settings
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain processing of your data
• Opt-Out of Communications: Unsubscribe from marketing emails at any time (transactional emails related to your account may still be sent)

To exercise any of these rights, contact us at [email protected] or use the self-service options in your account settings.

9. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: With the third-party services listed in Section 3, solely to operate the Service
• Designated Recipients: Schedule emails are sent to email addresses you explicitly designate
• Legal Requirements: When required by law, subpoena, or other legal process
• Safety: To protect the rights, safety, or property of Weekend Crusher, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last Updated" date. For significant changes, we will provide additional notice via email or in-app notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: