Privacy Policy
1. Who We Are
First Round is developed and operated by DCM Design Studios ("we," "our," or "us"). Our app helps users discover time-limited deals at local bars and restaurants, earn loyalty points by scanning receipts, redeem offers, and connect with friends through Crews.
For privacy questions, contact us at: support@firstround.app
2. Data We Collect
Account & Profile Information
- Email address (used for authentication)
- Display name and profile avatar (user-provided)
- Deal vibe preferences (e.g., happy hour, late night)
- Role within the app (standard user, venue owner, venue staff, admin)
Location Data
We collect your device's GPS coordinates to show you deals within your chosen radius (1, 5, 10, or 25 miles). Location is requested only when the app is in use. You can also set a saved fallback location in your profile so you don't need to share live GPS every session.
Receipt & Spending Data
When you scan a paper receipt through the app, we capture:
- An image of your receipt (processed for OCR, then deleted from our servers)
- Merchant name, visit date, transaction total, and line items extracted by OCR
- Loyalty point totals derived from your spend at registered venues
We do not collect payment card numbers, bank account details, or any financial instrument information. Receipt data reflects spend you voluntarily submit.
Camera & Photos
Camera access is required only for receipt scanning and uploading a profile avatar. We do not access your camera roll without your action, and we do not use photos for any purpose other than the feature you explicitly invoked.
Social & Communications Data
- Crew memberships (group chat participants you belong to)
- Messages, images, and reactions you send in Crews
- Friend connections made via invite links
Device & Usage Data
- Push notification token (to deliver deal alerts and Crew messages)
- Device type and OS version (for crash reporting and compatibility)
- App usage events (e.g., offer views, scans performed) for feature improvement
Venue Owner Data (Owners Only)
- Venue name, address, and verification receipt (submitted during registration)
- Offer details you create (title, time window, radius, point gates)
- Redemption and claim statistics for your venues
- Venue credit purchase history (via in-app purchases)
3. How We Use Your Data
| Purpose | Data Used |
|---|---|
| Show nearby deals | Location, deal vibe preferences |
| Process receipt scans & award points | Receipt image, OCR output, venue matching |
| Enable deal redemption via QR code | Account ID, offer ID, redemption token |
| Power Crews & social features | Display name, avatar, messages, friend links |
| Send push notifications | Push token, notification preferences |
| Manage venue owner accounts | Venue data, offer data, credit balance |
| Authenticate you securely | Email, OAuth tokens (Google / Apple) |
| Improve the app | Anonymized usage events, crash reports |
| Fraud prevention & abuse detection | Receipt deduplication hashes, account data |
We do not sell your personal data. We do not use your data to serve third-party advertising.
4. Third-Party Services
First Round uses the following third-party services. Each has its own privacy policy governing how they handle data.
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Database, authentication, file storage, realtime messaging, edge function OCR processing | supabase.com/privacy |
| Google Sign-In | Optional OAuth authentication | policies.google.com/privacy |
| Apple Sign-In | Optional OAuth authentication | apple.com/legal/privacy |
| Firebase (Google) | Push notification delivery | firebase.google.com/support/privacy |
| RevenueCat | In-app purchase management for venue credits | revenuecat.com/privacy |
| Apple App Store / Google Play | App distribution and payment processing for in-app purchases | Platform privacy policies apply |
6. Data Retention
- Account data is retained for as long as your account is active. Deleting your account removes your profile within 30 days.
- Receipt images used for OCR are processed and deleted from our servers within 24 hours. The extracted data (merchant, total, points) is retained in your receipt history.
- Crew messages are retained while the Crew exists. Leaving a Crew does not automatically delete your prior messages.
- Usage and analytics data is retained for up to 24 months in anonymized or aggregated form.
7. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Correction: Update your profile, preferences, and saved location directly in the app at any time.
- Deletion: Delete your account from Profile → Settings → Delete Account. This initiates deletion of your profile, receipts, and social data within 30 days. Some anonymized data (e.g., aggregated venue statistics) may be retained.
- Opt-out of push notifications: Adjust notification settings in your device's system settings or within the app.
- Location opt-out: Revoke location permission in your device settings at any time. The app will fall back to your saved profile location or prompt you to set one.
- California residents (CCPA): You have the right to know, delete, and opt out of sale of personal information. We do not sell personal information. To exercise your rights, contact support@firstround.app.
8. Age Requirements
First Round is a platform for discovering deals and offers at bars, restaurants, and nightlife venues. You must be 21 years of age or older to use First Round where alcohol-related offers appear, and at least 18 years of age in all other cases.
We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has created an account, please contact us at support@firstround.app and we will promptly delete the account and associated data.
9. Security
We use industry-standard security practices to protect your data, including:
- HTTPS/TLS encryption for all data in transit
- Row-level security policies in our Supabase database, so users can access only their own data
- Authentication via Supabase Auth with support for Google and Apple OAuth
- No storage of payment card or banking data — purchases are processed entirely by Apple App Store or Google Play
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@firstround.app.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you within the app or by email.
Continued use of First Round after changes take effect constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions, data requests, or to report a concern:
- Email: support@firstround.app
- Subject line: "Privacy Request"
We aim to respond to all privacy inquiries within 5 business days.