Privacy Policy

Effective May 8, 2026

LocalVibes (“LocalVibes”, “we”, “our”) is a real-time venue discovery platform operated by MCH Ventures. This Privacy Policy explains what personal data we collect when you use our mobile application (the “App”) or our website at mchventures.app (the “Site”), how we use it, who we share it with, and your choices.

Information we collect

Information you give us

• Account information: email address, password (stored only as a salted hash), display name, optional profile photo, age range and gender (optional, used to power crowd demographics).
• User-generated content: reviews, photos, check-ins, crowd updates, surveys, wishlists, reservation requests, and safety reports you submit.
• Business owner information (if you sign up as a business): business name, address, contact information, menu and event content, and billing details handled through Stripe.

Information we collect automatically

• Location: with your permission (foreground “when in use” access only), we use your device location to show venues near you. We do not track your location in the background.
• Device information: device model, operating system version, push notification token, and app version.
• Usage information: pages viewed, features used, actions taken in the App or on the Site, and crash diagnostics.

How we use your information

• To create and maintain your account and authenticate sessions.
• To deliver core App features (venue discovery, reviews, crowd updates, reservations, social features).
• To send transactional email (account verification, password reset, reservation confirmations).
• To send push notifications you have opted into.
• To process payments for business subscriptions and ad-free upgrades.
• To investigate safety reports and enforce our Terms of Service.
• To improve the App and Site through aggregated, de-identified analytics.

Service providers we share data with

We share the minimum data necessary with these third-party processors so the App can function. Each provider is contractually limited to using the data only to deliver the contracted service to us.

• Convex — backend database, authentication, and real-time sync. Stores all user account data, content, and session tokens.
• Resend — transactional email delivery (account verification, password reset). Receives only the recipient email address and the message content.
• Stripe — payment processing for business subscriptions. Receives business owners' billing details directly; we never store full card numbers.
• RevenueCat + Apple App Store / Google Play Billing — manages mobile subscriptions (ad-free upgrade). Receives anonymized purchase records only.
• Google Maps Platform (Maps SDK + Places API) — renders maps and resolves venue search. Receives the search query and approximate coordinates required to fulfill the request.
• Google AdMob — serves banner advertisements to users on the free tier. Receives a non-resettable advertising identifier and minimal device context per Google's policy. Users on the ad-free subscription do not see ads and do not have this data shared.
• Expo / Apple Push Notification Service / Firebase Cloud Messaging — delivers push notifications. Receives only your push token and the message payload.

Your choices

• Location: you can revoke location permission in your device settings at any time. Some discovery features will return reduced results.
• Notifications: opt out per category in App Settings → Notifications, or revoke entirely in your device settings.
• Account deletion: request account deletion at any time via App Settings → Account → Delete Account, or by emailingsupport@mchventures.app. We delete your account and all associated personal data within 30 days, except where retention is required by law.
• Marketing communications: we do not send marketing email at this time. Transactional email cannot be opted out of while you have an active account.

Data retention

We retain your account and content for as long as your account is active. When you delete your account, we delete or anonymize your data within 30 days. Some records (billing, audit logs, safety reports) are retained longer where required by law.

Children's privacy

LocalVibes is not directed to children under 17. We do not knowingly collect personal information from children under 17. If you believe a child has created an account, contact us at support@mchventures.app and we will delete it.

International transfers

Our infrastructure is hosted in the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via in-App notification or email at least 14 days before they take effect.

Contact us

Questions about this Privacy Policy? Email support@mchventures.app.