Privacy Policy

Lettuce is a social map for discovering places worth going and the people to go with — you can find venues, build lists and guides, leave reviews, share moments and plans, connect with friends, and get help from our in-app assistant. Lettuce is operated by First Round Is On Me, Inc. ("Lettuce," "we," "us," or "our").

This Privacy Policy explains what personal information we collect through our mobile apps, our website at lettucesocial.co, and related services (together, the "Service"), how we use and share it, and the choices and rights you have. It does not apply to third-party products or websites that we do not control.

By using the Service you agree to this Privacy Policy. If you do not agree, please don't use Lettuce.

When you create an account and use the Service, you give us:

• Account details — your phone number and email address, which we use to sign you in and secure your account.
• Profile information — your first and last name, username, date of birth, gender, profile photo, interests, and any other details you add to your profile. (We collect your last name to help keep the community safe; it is not shown publicly.)
• Your content — the reviews, ratings, photos, moments, lists, guides, plans and events you create, and the messages you send to other members or to our assistant.
• Contacts you choose to sync — if you allow it, the names and phone numbers in your device address book, so we can help you find friends who are already on Lettuce and invite the ones who aren't.
• Communications — messages you send us, support requests, survey and onboarding responses, and your marketing preferences.

When you use the Service, we collect certain information automatically:

• Location — with your permission, your device's location, so we can surface places, plans and people near you. See "Location data" below.
• Device & usage data — device type and operating system, app version, time zone, language, and how you interact with features (pages viewed, taps, and similar activity).
• Diagnostic data — crash reports, error logs and limited performance and session-replay data used to keep the app stable and to debug problems. Session replays are captured with text and images masked.
• Identifiers — an account identifier and, if you enable notifications, a push-notification token for your device.

We do not use third-party advertising SDKs, we do not track you across other companies' apps and websites for advertising, and we do not show ads in the Service.

• Other members — if a friend syncs their contacts and your number is in them, or someone tags you in a moment, invites you, or sends you a friend request, we receive that information.
• Service providers — providers that help us deliver the Service (for example, our SMS provider confirms whether a verification code was delivered).
• Public and licensed place data — information about venues and neighborhoods from mapping and places providers and other public sources, used to build the map and enrich place listings.

We use personal information to:

• Provide, operate and maintain the Service — create your account, show you nearby places, and power lists, reviews, moments, plans, events, friends and messaging.
• Personalize your experience, including surfacing relevant places, people and recommendations near you.
• Verify your identity and secure your account through one-time passcodes.
• Help you connect with people you know and grow your community.
• Communicate with you about the Service, including verification codes, transactional notifications, and — where permitted — product news you can opt out of.
• Keep the community safe: detect, investigate and prevent spam, fraud, abuse, and violations of our Terms, including through automated and human content moderation.
• Process event tickets and payments where you buy or sell them.
• Understand how the Service is used so we can fix problems and improve it.
• Comply with law and enforce our agreements.

Location is central to Lettuce, but you're in control. We only access your location while you are using the app ("when in use") and only after you grant permission — we never track your location in the background.

We use your location to rank and surface places, plans and people near you, and to set your time zone. You can choose to share precise or approximate location, and you can turn location access off at any time in your device settings — some nearby features may not work as well if you do.

Syncing your contacts is optional. If you allow it, we upload the names and phone numbers from your address book to our servers so we can show you which of your contacts are already on Lettuce and let you invite the rest. We use these details to match and suggest connections.

You can decline the contacts permission and still use the Service. If you previously synced your contacts and want them removed, you can revoke the permission in your device settings and contact us to delete the synced data.

If you choose to connect an external calendar to help coordinate plans, we request read-only access to your free/busy availability so we can suggest times that work. We use this only to power scheduling features. You can disconnect your calendar at any time, which stops future access.

Where the Service lets you buy or sell tickets to events, payments are processed by our payments provider, Stripe. We do not collect or store your full card number; that information goes directly to Stripe under its own privacy policy. We receive limited transaction details (such as amount, date, and a payment reference) to fulfil orders, provide receipts, and prevent fraud.

Lettuce offers an in-app assistant that helps you discover places and plan outings. Your conversations with the assistant, along with relevant context (such as your location and preferences), are processed by us and our AI provider to generate responses. We retain these conversations to operate and improve the feature. Please don't share sensitive information you wouldn't want processed this way, and treat the assistant's suggestions as recommendations, not professional advice.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as described here:

• With other members — your profile, username, reviews, moments, lists, plans and other content you choose to share are visible to others according to your settings and how the feature works.
• With service providers (processors) who process data on our behalf under contract, including: Amazon Web Services (cloud hosting and media storage); Mapbox and Google Maps Platform (maps, places and geocoding); our SMS/messaging providers and Firebase Cloud Messaging (verification codes and notifications); Stripe (event payments); our AI provider (assistant features) and content-moderation providers (safety); Sentry (crash and diagnostics); and onboarding form and survey tools.
• For safety and legal reasons — to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, safety and property of our members, the public, or Lettuce.
• In a business transfer — in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
• With your consent — in other cases where you direct or permit us to share.

If you are in the European Economic Area or the United Kingdom, we process your personal information where we have a legal basis to do so: to perform our contract with you (providing the Service); for our legitimate interests (such as securing the Service, preventing fraud, and improving our features), balanced against your rights; to comply with a legal obligation; or based on your consent (for example, for location, contacts, or optional marketing), which you can withdraw at any time.

You have controls over your information:

• Access, update or delete your profile and content in the app, and manage your privacy settings.
• Permissions — turn location, contacts, camera, photos and notifications on or off in your device settings.
• Marketing — opt out of promotional messages at any time (reply STOP to marketing texts or use the unsubscribe link in emails). We'll still send essential service messages.
• Deactivate or delete your account — deactivation is reversible by logging back in; deletion is permanent (see "Data retention").

Depending on where you live, you may have additional rights — such as to access, correct, delete, or port your personal information, to opt out of "sales" or "sharing" (we do none), or to limit certain processing. Residents of California, other U.S. states with privacy laws, and the EEA/UK may exercise these rights, and we will not discriminate against you for doing so. We honor recognized opt-out preference signals (such as Global Privacy Control) where required. To make a request, contact us using the details below; we may need to verify your identity first. You may also lodge a complaint with your local data protection authority.

We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information, except that we may retain a limited record where necessary to comply with legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements. Backups are purged on a rolling schedule.

We use organizational and technical measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please help protect your account by keeping access to your phone and email secure.

The Service is not intended for anyone under 13, and we do not knowingly collect personal information from children under 13. If you are under 18, you may use the Service only with the involvement and consent of a parent or guardian. If you believe a child under 13 has provided us personal information, please contact us and we will take steps to delete it.

We are based in the United States and process information there and in other countries where we and our service providers operate. These countries may have data-protection laws different from your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.

We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app or by other means. Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or want to exercise your rights, contact us at joe.Feminella@firstroundsonme.co. Lettuce is a service of First Round Is On Me, Inc., 144 Bay Terrace, Staten Island, NY 10306, USA.