Privacy Policy

DRAFT FOR ATTORNEY REVIEW. Not legal advice. Not yet in effect. Prepared 2026-10-24 for Gorin Collective LLC. Placeholders: Nearific, nearific.app, erick@gorincollective.com, Draft, not yet in effect. Written to match the product design in decisions-2026-10-24.md (anonymous device sessions, optional first name and age range, location only on request, no sale of data).

Points for counsel

1. State privacy laws: confirm which comprehensive state laws (California, Colorado, Virginia, Texas, Oregon, and others) could apply at launch or later, given thresholds, and whether Arizona has enacted one by the effective date. §9 is written to offer the same core rights to everyone.
2. Location data: precise location is collected only on request and stored as a last-known point. Confirm whether it counts as "sensitive personal information" where the policy applies and whether a separate consent is needed.
3. Children: the service is for 13+; confirm COPPA posture and whether the age-range field creates actual knowledge of users under 13.
4. Breach notification: Arizona's breach statute (A.R.S. §18-551 et seq.) and other states; confirm §10 is adequate.
5. Processor list in §6 and data-processing terms with each vendor (Supabase, Vercel, PostHog, Sentry, Resend, Google).
6. Google Maps Platform terms require that Google's privacy policy be referenced where Google content is shown; confirm §6 wording.
7. Future push notifications and native apps will need app-store privacy disclosures; §11 reserves that.

Effective date: Draft, not yet in effect

1. Overview

Nearific (the "Service") is operated by Gorin Collective LLC, Phoenix, Arizona ("we", "us"). This policy explains what information we collect when you use the Service as a consumer or as a merchant, how we use it, who sees it, and the choices you have.

The short version: you can use the Service without an account. We identify your device with an anonymous identifier, we ask for your location only when you tap a feature that needs it, merchants see your first name and age range only if you choose to share them and only when you redeem, and we do not sell your personal information.

2. Information we collect

From consumers

Information you choose to provide

• The area you pick (for example, "Downtown Gilbert"), your search radius, and your offer preferences (categories, offer types, minimum discount).
• Optionally, a first name and an age range (for example, "25 to 34"). We do not ask for your birthdate.
• Optionally, an email address if you create an account, and a sign-in identity from Apple or Google if you use those options when available.
• Reports you send (for example, "offer not honored") and messages to support.

Information collected automatically

• An anonymous device identifier we create on your first visit and store in a first-party cookie and in your browser's local storage. It lets us remember your preferences, record your claims, and let a merchant confirm your redemption.
• Activity in the Service: which areas and offers you view, what you claim, when a claim is redeemed, taps on "directions", and similar events, each with a timestamp.
• Location, only when you tap "near me", "walk me there", or similar: your device's approximate or precise location at that moment. We store the most recent point and its time to show nearby offers and, if you redeem, to note whether the redemption happened near the business. We do not track your location in the background.
• Device and technical data: browser type, operating system, screen size, language, IP address (in server logs and for coarse region), and error reports.

From merchants

Business name, address, hours, category, photos, and the contact name, email, and phone of the person managing the account; offers you post; redemption records your staff create; billing details if and when paid plans exist (handled by a payment processor, not stored by us).

From other sources

Business listing information from Google Maps Platform (names, addresses, coordinates, categories, hours, photos). This is information about businesses, not about consumers.

3. How we use information

• To run the Service: show offers near you, record claims and redemptions, prevent the same offer from being claimed twice, and show merchants whether their offers worked.
• To match offers to your stated preferences and, when you enable them, to deliver in-app alerts ("nudges") about new offers in an area you use. Notifications outside the app will be offered only with your separate permission.
• To produce analytics for merchants, in aggregate: counts and timing of views, claims, and redemptions, and age-range breakdowns when enough people are included to avoid identifying anyone.
• To keep the Service secure and fair: rate limiting, fraud and abuse detection, and enforcing claim limits.
• To communicate with you if you have an account or have contacted us.
• To improve the Service, using de-identified and aggregated data.
• To comply with law and enforce our terms.

We do not use your information for third-party advertising, and we do not build advertising profiles.

4. What merchants can see about you

• At redemption: your first name and age range, if you chose to share them (you can turn either off in Your data), the offer, the time you claimed it, and whether your device was near the business if you shared location.
• Otherwise: only aggregated numbers. Merchants never receive your email address, phone number, precise location history, or anonymous identifier through the Service, and they agree not to try to identify you.

5. Cookies and similar technologies

We use first-party cookies and browser storage for one purpose: to keep your anonymous session (or your account session) and your preferences. We do not use third-party advertising cookies. Our analytics and error-reporting tools (see §6) use their own identifiers tied to your anonymous session, not to your name.

You can clear cookies and site data in your browser, or tap Forget this device in the app, which deletes your device record on our side. Either action signs you out and ends active claims. Where a "Do Not Track" or Global Privacy Control signal is sent by your browser, we do not sell or share personal information in any case.

6. How we share information

We share information only in these cases:

• Merchants, as described in §4.
• Service providers that process data for us under contract: Supabase (database, authentication, storage), Vercel (hosting), PostHog (product analytics), Sentry (error reporting), Resend (transactional email), and Google Maps Platform (business data and map links; Google's privacy policy applies to Google content at https://policies.google.com/privacy). [Counsel: keep current.]
• Legal and safety: to comply with law, respond to lawful requests, protect the rights and safety of users, merchants, and the public, or enforce our terms.
• Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction; this policy will continue to apply until it is changed.
• Aggregated or de-identified data that cannot reasonably identify you, for example statistics about an area's offers.

We do not sell personal information and have not done so.

7. How long we keep information

• Anonymous devices with no activity for 180 days are deleted, along with their preferences.
• Activity events are kept for up to 24 months, then aggregated or deleted.
• Claims and redemptions are kept as part of merchants' analytics; after 24 months they are retained only in aggregated form.
• Location points are overwritten by the next one you share and deleted with your device record.
• Accounts are kept until you delete them; some records may be retained as required by law or for legitimate business purposes such as fraud prevention.
• Merchant records are kept for the life of the account and as needed for tax and legal purposes afterward.

8. Security

We use encryption in transit, access controls, row-level database permissions, and logging. No system is perfectly secure; if we learn of a breach affecting your information we will notify you and the authorities as required by law.

9. Your choices and rights

In the app, under Your data, you can at any time:

• change or remove your first name and age range;
• turn off sharing your first name or age range with merchants;
• turn location off;
• download the information associated with your device or account;
• delete your device record ("Forget this device") or your account.

Depending on where you live you may also have legal rights to access, correct, delete, or receive a copy of your personal information, to opt out of certain processing, and not to be discriminated against for exercising them. We extend these core rights to all users. To exercise them, use Your data in the app or email erick@gorincollective.com. We will verify requests using your session or account, and we will respond within the time required by applicable law. You may designate an authorized agent where the law allows.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided information, contact erick@gorincollective.com and we will delete it.

11. Notifications and future mobile apps

The Service currently shows alerts only while you have it open. If we add device notifications or release mobile apps, we will ask for your permission before sending notifications, and the app stores' privacy disclosures will describe any additional data practices.

12. Changes to this policy

We may update this policy. If the changes are material, we will post a notice in the Service or, if you have an account, email you before they take effect. The effective date at the top tells you when it was last changed.

13. Contact

Gorin Collective LLC, Phoenix, Arizona. Email: erick@gorincollective.com.