Privacy Policy

Last updated October 18, 2026.

This policy explains how Guacoholic collects, uses, discloses, and protects information when you visit guacoholic.club, create an account, buy a membership or merchandise, use partner offers, contribute content, or participate in referrals. This is a working policy and not legal advice; qualified counsel should review it.

1. Information we collect

Account and membership information

Name, display name, email address, authentication records, account identifiers, membership tier and status. Password authentication uses hashed credentials; social sign-in providers supply the account information needed to sign you in.

Membership purchases, subscription status, billing references, referral codes and the member who referred you.

Community and map contributions

Restaurant ratings, notes, store ripeness votes, feed posts, recipes, partner leads, submitted locations and photos.

Paid members may see contributions and the account ID of the member who shared them. We do not display contributor email addresses with these contributions.

When you submit a spot, we temporarily receive your device's precise location to confirm you are within 250 feet of the submitted address. The map pin is created from coordinates derived from the address, not your device location.

With your permission, the map uses device location to find nearby spots and provide distances or directions. Administrative and authorized moderator spot submissions may bypass the proximity check.

Closure reports include the listing, temporary or permanent closure type, notes, reporter account, review decision and reporting restrictions. Reports may hide a listing immediately while it is reviewed.

Partner offers and restaurants

Offer details, participating restaurant identity, redemption date and time, eligibility period, and redemption history.

Restaurant staff use a shared PIN. We store a one-way PIN hash, failed-attempt counts, temporary lockouts and an audit record of each redemption; we do not store the readable PIN.

Listing claims include the claimant's name, email and submitted business details, verification attempts, review status and decisions. Email verification may create an account and sign the claimant in; it does not itself approve ownership. Administrators review claims before owner contact details are assigned to a listing.

Purchases, referrals and payouts

Order items, shipping name and address, fulfillment status and tracking information for merchandise.

Referral attribution, eligible payments, commission calculations, payout account status and transfer references.

Payment card and payout identity information is handled by Stripe. Guacoholic does not store full card numbers or payout bank credentials.

Country-pricing checks use the connection's IP-derived country, proxy/VPN detection results and the billing country returned by Stripe. We use these to determine discounts, country-specific lifetime tiers and billing-country consistency.

Digital membership cards include a member's display name, ID, tier and referral code/QR link. If you share or download the card, the recipient can see those details; the QR does not provide account access.

Information collected automatically

IP address, browser and device information, session and security data, pages visited, referring page and interactions needed to operate, secure and improve the service.

2. How we use information

Create and secure accounts; provide free, Pro and lifetime membership access; and manage subscriptions.

Publish the map, ratings, notes, posts, recipes and photos; prevent duplicate spots and enforce contribution limits.

Verify spot-submission proximity, geocode addresses and place submitted spots on the map.

Apply restaurant-set offer limits (unlimited, a specified number each calendar month, or once ever), confirm paid-member eligibility and record staff-PIN redemptions.

Process purchases, arrange merchandise fulfillment, calculate referral earnings and send approved payouts.

Send account, password-reset, membership, order and other core business emails from info@guacoholic.club; high-priority business notices may be routed internally to trevor@guacoholic.club.

Send welcome and installation-tip emails, claim verification and decision messages, closure-review alerts, and scheduled three-day and one-day billing reminders for eligible renewing subscriptions.

Detect abuse, troubleshoot, analyze aggregate use, comply with law and enforce our Terms.

3. Service providers and disclosures

We disclose information needed for providers to perform services for us. These include Lovable Cloud for hosting, authentication, database and file storage; Stripe for payments, billing and payouts; Printful or Gelato for applicable merchandise production, delivery and tracking; our email-delivery provider for transactional messages; Google Maps and geocoding providers for maps, addresses and location features; proxycheck.io for IP-based proxy/VPN checks; and enabled analytics or operational providers.

The AI partnership-proposal feature sends the details you enter, including any restaurant or contact information, goals and offerings, through Lovable AI to its model provider to generate a draft. Avoid entering sensitive information. We do not promise that AI-provider logs or inputs have zero retention; processing is subject to the provider's terms and safeguards.

Directory records can be imported from Airtable or received through the authorized Meetsabi location connection. These integrations exchange listing information, not unrestricted access to member accounts or payment details.

If you approve an AI assistant connection through the agent integration (MCP), the assistant can use the current read-only spot search and receive listing names, addresses, cities and coordinates. OAuth approval authorizes that connection; it does not allow changing listings or accessing private payment data. Information returned to an assistant is also governed by that assistant provider's privacy practices.

Zoho may host Guacoholic business inboxes. Transactional app email is sent through our configured delivery infrastructure, not represented as Zoho-hosted app delivery. We may also disclose information when required by law, to protect rights and safety, or in connection with a business transfer.

We do not sell personal information or use it for third-party behavioral advertising.

4. Public and member-visible information

Restaurant and store listings, aggregate member scores, ripeness totals, city guides, editorial content and listing photos are publicly visible and may be indexed by search engines. Photos are stored in protected storage but displayed through signed links; this does not make a displayed listing photo private. Paid-member contribution views may include notes and contributor account IDs, but do not display contributor email addresses. Free signed-in members may rate, vote and add photos to existing listings. Do not submit sensitive information or photos you do not have permission to publish. Offer redemption requires an eligible paid account.

Editorial Buzz tags link to independently published coverage. They do not expose private member information or incorporate outside review scores into member ratings.

5. Cookies and local storage

We use necessary browser storage for authentication, security, preferences and referral attribution. We may use privacy-conscious analytics to understand service performance. Browser controls can remove storage, but disabling necessary storage may prevent sign-in or core features.

Home-screen installations cache application files and previously visited pages on your device to speed up repeat launches and offer a limited fallback when the network is slow or unavailable. Cached material may be out of date. Payments and current membership or listing information still require an online connection. On a shared device, sign out and clear site storage when appropriate.

6. Retention and security

We retain account and contribution data while an account is active and as reasonably needed to operate the community. Financial, payout, order and redemption records may be retained for tax, accounting, fraud-prevention and legal obligations. Content may remain after account closure when needed to preserve community context, unless deletion is required or appropriate.

We use encrypted connections, access controls, row-level permissions, hashed passwords and restaurant PINs, and limited administrative access. No online system is completely secure.

7. Your choices and rights

Depending on your location, you may request access, correction, deletion, portability or restriction of your personal information, or object to certain processing. You may unsubscribe from non-essential marketing while continuing to receive service messages. We do not discriminate for exercising privacy rights.

California residents may request information about collection and disclosure, correction or deletion and may opt out of a sale or sharing; Guacoholic does not sell personal information. EEA and UK residents may also have rights under applicable data-protection law and may complain to their local authority.

8. Children

Guacoholic is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information.

9. Changes and contact

We may update this policy as our services or legal obligations change. Material changes will be posted here and, when appropriate, communicated to members.

For privacy requests or questions, email info@guacoholic.club. Guacoholic is based in Santa Fe, New Mexico.