Version 1.1 · Effective September 9, 2026 · Last updated September 21, 2026
This summary is not the policy. Sections 1–18 are.
We do not keep your coordinates in your account. Your location is used to find nearby bars and to check you're actually at one when you buzz in. It is not saved to your profile or your buzz-in history, though it can appear briefly in our infrastructure providers' logs. We keep that you were at a venue, not where you were standing. Section 4 explains exactly how.
We do not sell your data, and we don't run targeted advertising. We do share information with the service providers that run Buzzin' (listed in Section 8), and some of your activity is visible to people you connect with and, if you claim a deal, to that venue. Sections 7 and 8 say exactly what.
Ghost mode is on by default. New accounts share nothing to their Swarm's feed until you choose otherwise. The one exception is your inner circle — people you personally add there can see where you are buzzed in even while ghost mode is on. Section 7 explains.
Your Swarm sees what you let it see, and people you aren't connected to see nothing about you at all.
You can delete your account and we'll delete your data, with narrow exceptions for safety and legal records that Section 11 names specifically.
This Privacy Policy explains how Buzzin Social LLC, a Florida limited liability company doing business as “Buzzin” (“Buzzin',” “we,” “us”) collects, uses, shares and protects information when you use the Buzzin' mobile application and the website at wheresbuzzin.com (together, the “Service”). It is part of, and incorporated into, our Terms of Service.
Buzzin' shows which bars are busy, lets you tell people you're going out, and surfaces deals posted by venues. Most of what follows exists because that product necessarily involves two sensitive things: where you physically are, and who can see it. We have tried to write this document specifically rather than generically, so that you can actually tell what happens to your information.
The Service is intended solely for people aged 21 and over. We ask for your date of birth at signup and the age requirement is enforced when your account is created, on our servers, not only in the app.
We do not knowingly collect personal information from anyone under 21. If we learn that we have, we will promptly delete the account and its personal information. We keep one thing: an enforcement record, as described in Section 11, so that the same person cannot simply create a new account. If you believe a person under 21 has provided us information, contact support@wheresbuzzin.com. Parents and guardians may contact us at the same address.
| What | Where it comes from | Why |
|---|---|---|
| Email address | Signup | Account identity, sign-in, confirmation, password reset, service and safety notices |
| Password | Signup | Stored only as a salted cryptographic hash by our authentication provider. We never see or store your actual password. |
| Date of birth | Signup | Enforcing the 21+ requirement. Stored as a date on your profile. |
| Username | Signup | Your public handle. Lowercase, unique. |
| Display name | Profile | How your name appears to others. Optional. |
| Profile photo / avatar | Profile | Optional. Stored in our file storage and shown to people who can see your profile. |
| Home city | Profile | Optional. Helps show relevant venues. |
| Terms acceptance | Signup | The version you accepted and the timestamp, so we have a record of what you agreed to. |
| Reports you file | Report flow | The category, any note you write, and what you reported. See §7.4. |
| Venue & staff information | Owner/bartender users | Business email, venue details, hours, photos, tags, deals, specials, shifts |
| What | What is actually stored |
|---|---|
| Buzz-ins | Which venue, the time you buzzed in, the time you left or were checked out, an optional vibe rating, a flag recording that the location check passed, and how busy the venue was at that moment. No coordinates. |
| Plans | Which venue, which date (within 7 days), your chosen visibility, and an optional note |
| Favorites (“Hive”) | Which venues you saved, and the city |
| Deal claims | Which deal, when you claimed it, the buzz-in that qualified you, and whether a bartender marked it redeemed |
| Connections (“Swarm”) | Who you're connected to, the status of each connection, and whether you've granted them inner-circle access |
| Bartender follows | Which bartenders you follow, and approval status |
| Blocks | Who you've blocked. Blocks are enforced in both directions and are never shown to the blocked person. |
| Privacy settings | Ghost mode, and each of your per-statistic visibility toggles |
| Enforcement records | If your account is suspended: the suspension period and the reason |
This is the section that matters most, so it is written precisely rather than reassuringly.
YOUR COORDINATES ARE USED TO COMPUTE A DISTANCE AND ARE NOT WRITTEN TO YOUR RECORD. A COMPLETED BUZZ-IN STORES THE VENUE, THE TIME, AND A FLAG THAT THE DISTANCE CHECK PASSED. IT DOES NOT STORE WHERE YOU WERE.
We want to be careful not to overstate this, so, honestly: coordinates are transmitted to our servers, and while they are not saved to your profile or your buzz-in history, they may appear transiently in our infrastructure provider's operational logs, as any request parameter can. They are not retained by us, not associated with your history, and not used to build a location profile of you.
Location permission is granted through your operating system and can be revoked at any time in your device settings. If you deny it, proximity features and buzz-in are limited or unavailable, but the rest of the app still works. Denying location does not delete anything already recorded.
Not storing coordinates is meaningful, but it does not make presence private. A buzz-in is a record that you were at a specific place at a specific time, and where you have chosen to share your activity, other people can see it. Please read Section 7 and Section 6 of the Terms, which describe the real-world risks of sharing your presence.
Stating the negative is as useful as stating the positive:
We do not use your information to train advertising profiles, and we do not make automated decisions producing legal or similarly significant effects about you. Enforcement decisions involve human review.
Visibility is the core privacy question in a product like this, so here it is, surface by surface.
New accounts start with ghost mode enabled, which keeps your activity out of your Swarm's feed. You choose to turn it off. Ghost mode is narrower than its name suggests: it governs the activity feed only. People you have personally placed in your inner circle can still see where you are buzzed in while ghost mode is on. Nobody is in your inner circle unless you put them there, and you can remove anyone at any time. The app explains this where you set it.
Someone who is not connected to you sees nothing about your activity. Your profile statistics are not public. Your username, display name and avatar are discoverable so that people can find and connect with you.
For each statistic — buzz-ins, bars visited, your Hive, deals activated, your connections — you control separately whether connections can see the count and whether they can open the list. Plans have their own visibility setting. Your inner circle is a smaller group you grant live visibility to. All of these are changeable at any time in Profile privacy, and changes apply going forward.
A person you report is never told that you reported them, or that a report exists. Access to reports is locked at the database level, not merely hidden in the app. The same is true of blocks: a blocked person is not notified and cannot tell they were blocked. We may act on a report in ways that are visible to the reported person — content removal, suspension — without revealing who reported them. Reports, support emails and anything you send us about a safety matter are used only to investigate, respond and enforce our Terms. They are not User Content under the Terms, and we never use them in marketing.
Venue owners see aggregate activity for their venue: how many people are there, trends over time, and how deals performed. They do not get a roster of who is present, and they do not receive your contact information. An honest caveat: aggregate numbers stop being anonymous when they are small. If two people are at a bar, a count of two combined with anything else visible can identify individuals. Treat presence at a venue as potentially observable, because in the physical world it is anyway.
If you claim a deal, the venue can see that a claim was made and mark it redeemed, which necessarily links your account to that redemption for the venue.
We share personal information only as described here.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Database, authentication, file storage, realtime | Effectively all account and activity data; it is where the Service's data lives |
| Mapbox | Map rendering | Location and device/network data necessary to serve map tiles when you view the map |
| Resend | Transactional email delivery | Your email address and the contents of account emails we send you |
| Cloudflare | Hosting and delivery of wheresbuzzin.com | Request metadata including IP address when you visit the website |
| Google Fonts | Typefaces used in the app | Network request metadata, including IP address, if fonts are fetched at runtime |
| Apple / Google | App distribution | Whatever their app store platforms collect under their own policies |
These providers are permitted to use the information only to provide their service to us, under contract. They are not permitted to sell it or use it for their own advertising.
As described in Section 7, and as you configure.
We may preserve and disclose information if we have a good-faith belief that doing so is reasonably necessary to: comply with a law, subpoena, court order or other legal process; enforce our Terms; detect, prevent or address fraud, security or technical issues; or protect the rights, property or safety of any person, including preventing imminent physical harm. Where we are legally permitted and it is not counterproductive to an investigation, we will try to notify you of a legal demand for your information.
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, information may be transferred as part of that transaction. We will require the recipient to honor this policy, or give you notice and a choice before your information becomes subject to a materially different one.
We may create and share information that has been aggregated or de-identified so it can no longer reasonably identify you — for example, city-level nightlife trends. We will not attempt to re-identify it, and we will require recipients not to.
WE DO NOT SELL PERSONAL INFORMATION, AND WE DO NOT SHARE IT FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING, AS THOSE TERMS ARE DEFINED UNDER CALIFORNIA AND OTHER STATE PRIVACY LAWS. WE HAVE NOT DONE SO IN THE PRECEDING TWELVE MONTHS. WE DO NOT SELL OR SHARE LOCATION DATA WITH DATA BROKERS.
If this ever changes, we will update this policy, give you advance notice, and provide the opt-out mechanisms the law requires before doing so.
We honor Global Privacy Control signals as an opt-out of sale and sharing. In practice this changes nothing, because we do not sell or share personal information and do not track you across sites or services (Section 9). We do not respond to Do Not Track signals because there is no cross-site tracking to disable.
| Category | Retention |
|---|---|
| Account and profile | While your account is active |
| Buzz-ins, plans, favorites, deal claims | While your account is active, unless you delete them sooner |
| Precise coordinates | Not retained. See §4.2 regarding transient provider logs. |
| Reports | Retained after the account or content they concern is deleted. A safety record has to outlive its subject or deleting an account would erase the evidence of why it was reported. |
| Enforcement records (suspensions, bans) | Retained as needed to enforce bans and prevent evasion |
| Terms acceptance records | Retained as a legal record of the agreement |
| Backups | Deleted data persists in encrypted backups for a limited rolling window, then is overwritten |
| Provider logs | Per each provider's retention schedule, typically short |
We may also retain information where necessary to comply with law, resolve disputes, or establish, exercise or defend legal claims.
We take security seriously and use measures appropriate to a service of this kind:
NO METHOD OF TRANSMISSION OR STORAGE IS COMPLETELY SECURE. WE CANNOT AND DO NOT GUARANTEE THE SECURITY OF YOUR INFORMATION. YOU ARE RESPONSIBLE FOR KEEPING YOUR PASSWORD CONFIDENTIAL AND FOR THE SECURITY OF YOUR DEVICE.
Revoke location permission, revoke photo access, or uninstall the app. Uninstalling does not delete your account.
You may delete your account at any time from Settings, or by emailing support@wheresbuzzin.com from your account address. Deletion removes your profile, buzz-ins, plans, favorites, claims, connections and avatar. The exceptions are named in Section 11 — principally reports concerning you, enforcement records, terms-acceptance records, and backups pending rotation. Deletion is permanent and cannot be undone. Content already seen, screenshotted or shared by other people is beyond our reach.
Email support@wheresbuzzin.com from your account address and we will provide a machine-readable export within the timeframe required by applicable law, and in any case within 45 days.
Depending on where you live, you may have the rights below. We extend these rights to all U.S. users regardless of state, because operating two standards is a good way to get one of them wrong.
To exercise any right, email privacy@wheresbuzzin.com from your account address, or use the in-app controls. We verify requests by confirming control of the account email. An authorized agent may submit a request with written proof of authorization.
California residents additionally have the rights described under the CCPA as amended by the CPRA. The categories of personal information we collect are: identifiers; commercial information (deal claims); internet or network activity; geolocation data; and audio/visual information (photos you upload). We do not collect or draw inferences about you. Sources, purposes and disclosures are described in Sections 3, 6 and 8. We disclose to service providers only. We do not sell or share personal information, and we have not in the preceding twelve months. California residents may also request information under the “Shine the Light” law; we do not disclose personal information to third parties for their direct marketing.
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have the corresponding rights listed above, exercised the same way.
Nevada residents may submit an opt-out of the sale of covered information; we do not sell it.
The Service is operated from, and intended for users in, the United States. Information is processed and stored in the United States, where privacy laws may differ from those where you live. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law, and you understand that your information will be transferred to and processed in the United States.
We do not currently offer the Service in the European Economic Area or the United Kingdom and do not target users there. If that changes, we will publish the additional disclosures and lawful bases those regimes require before doing so.
If we become aware of a security incident that compromises your personal information, we will notify you and any regulator as required by applicable law, without unreasonable delay and in any case within 30 days of determining that a breach occurred, as Florida law requires, and will describe what happened, what information was involved, and what you can do. We will not conceal an incident to avoid embarrassment.
We may update this policy. When we do, we will change the “Last updated” date above. For material changes — particularly any change to what we collect, how location is handled, or who we share with — we will give you advance notice by in-app notice or email before the change takes effect, and we will ask you to accept the updated policy in the app before you continue. For non-material changes such as corrections and clarifications, your continued use after the effective date means you accept the updated policy.
We aim to respond to privacy requests within 45 days, and will tell you if we need the extension the law allows.