Privacy policy

Who we are

OK, Sounds Fun is a Gain Street Strategy-owned venture operated by Gain Street Strategy Inc. Questions or privacy requests can be sent to tom@gainstreetstrategy.com.

Information you provide

An account is required to use the native app. We collect your email address, display name, home area, activity preferences, budget and travel settings, saved or passed activities, groups, friend invitations, group matches, and plans. User-created friendships, groups and invitations form an in-app social graph, but we do not request or scrape a device address book. When you mark an outing complete, we also store the activity, completion time, a bounded title/category/city/region snapshot and any optional “Worth it?” rating, feedback tags or private note so your history works across devices and recommendations can improve. Invitation emails are used only to deliver and manage the invitation. If you register a business, we also collect the business contact name, email address, optional phone number, business profile, listing content, public venue street address, official or booking website links, optional venue map coordinates, confirmations and submitted photos needed to review and manage its cards. If you use the public sponsorship-inquiry form or destination-partnership inquiry form, we collect the organization and contact names, organization type where applicable, contact email, region, promotion goal, preferred start window, free-card stage where applicable, optional approved-card URL or reference, optional website and message, inquiry reference, a random browser-session business-journey reference or one-time partner-inquiry journey reference, coarse allowlisted client-claimed acquisition source/campaign/CTA labels, and your consent to be contacted about that inquiry; submitting it does not subscribe you to marketing. We do not collect a partner’s recipient list or individual visitor activity through that form. Venue coordinates describe the listed business or activity, not the consumer’s or device’s location. If you submit a support or privacy request, we retain its topic, subject, message, status and response history as needed to respond and document the resolution. The current public web demo can be tried without a cloud account; its demo preferences and choices stay in that browser’s local storage unless you clear them.

Business submissions and catalogue photos

Business drafts and their source photos are private to the submitting account and authorized reviewers. A business representative or authorized owner/administrator can select rights-cleared activity-card photos. Images are uploaded to managed Supabase storage and linked to the authenticated account and relevant listing or catalogue record. If a card is approved, a licensed copy of its selected photos may be published with the activity.

Information collected automatically

Our hosting, authentication, and app-delivery providers may process basic technical information such as IP address, device or browser type, timestamps, request status, and security logs. The business page creates one random journey reference only when you take a business action. It keeps that reference in browser session storage, reuses it for free-card and sponsorship steps, and clears it after a successful inquiry or when the browser session ends. It does not read a raw referrer, arbitrary UTM value, advertising identifier, persistent device identifier, or consumer activity for this purpose. The current app does not request precise GPS location. Links to venues and maps open third-party services with their own privacy practices.

How we use information

• Provide activity recommendations, saved lists, invitations, group matches, plans, and private completed-experience history.
• Use completion feedback to improve your recommendations.
• Authenticate accounts, prevent abuse, keep the service secure, and respond to support requests.
• Understand product usage and improve reliability.
• Meet legal obligations and enforce our terms.

While you are signed in, we store first-party engagement records linked to your account, including recommendation impressions, opens, saves, hides and shares; planning actions; selected session context and general region; ranking score and reason; and algorithm version. We use these records to evaluate feature and recommendation quality, personalize future suggestions, and support deletion and self-export. They are not a third-party analytics feed and are not shown to businesses or other users.

For signed-in business representatives, we record a small, allowlisted set of registration and listing milestones—such as starting, creating a profile, submitting a card or requesting Premium—to understand the aggregate conversion funnel and improve the business tools. The ledger does not store contact details, notes, photos, raw referral URLs, precise user/device location, device identifiers or advertising identifiers, and the owner dashboard shows aggregate counts rather than individual identities.

Private choices and group matching

Your individual passes are not shown to friends. A group sees an activity when the group’s match rule is reached. Group members may see the resulting match and planning details. Do not put sensitive information in plan notes.

Private messages

Accepted friends can exchange one-to-one text messages. We store the message text, participants, send time, and your own conversation read state in Supabase so conversations can synchronize across devices. The other participant’s last-read time is not shown to you. The app’s database rules limit normal message access to the two participants, but messages are not end-to-end encrypted.

If you report a message, we store the message reference, selected reason, and details you provide in a private moderation queue so authorized support can investigate abuse. We do not copy message text into engagement analytics, show it to businesses, or sell it. Blocking or removing a friend closes the conversation and prevents new messages. Existing records remain available in your private account export until an account is deleted. Do not use chat for passwords, payment details, government identifiers, precise home addresses, or other highly sensitive information.

Service providers

We use service providers to operate the app, including Supabase for accounts, the database, private business-submission storage, public catalogue-photo storage, and current authentication-email delivery; HighLevel/GHL for our domain, DNS, certificate setup, customer-relationship management and business-inquiry follow-up; Expo for app builds and updates; Apple for iOS distribution; Google Maps Platform for on-demand place photos; and our website host for public pages. These providers process information under their own terms and security controls.

After a successful qualifying sponsorship inquiry, the business page may offer an optional HighLevel scheduling link. It opens only when you choose it. The app does not append your inquiry fields to that link or automatically book a meeting; information you later choose to enter on the scheduling page is processed by HighLevel under its own terms and notices.

When an activity does not have an owner-supplied photo, Google Maps Platform may provide a current place photo on demand. Google may process the request and basic technical information under its Privacy Policy. We show Google Maps and photographer attribution with the photo and do not permanently store Google photo files or temporary photo references.

Sale, advertising, and sponsored activities

We do not sell personal information. Standard approved business listings are free. A business may request paid Premium exposure, but a request alone does not charge or activate placement. Any active Premium card is clearly labelled Sponsored. Campaign reporting is aggregate and does not reveal an individual’s passes, private group choices, profile answers, or friend relationships to that business.

Retention and deletion

We keep account information while your account is active and for only as long as reasonably needed for security, support, or legal obligations. Sponsorship inquiries are retained only as reasonably needed to respond, qualify the request, document consent, and administer any resulting business relationship; you may ask us to close or delete an inquiry subject to legal recordkeeping needs. You can delete your account and associated app data inside the app under You → Delete account and data. The deletion flow removes private business-submission photo files before deleting the account and cascading private database records, including private conversations and messages, completed-experience history, first-party recommendation records, business-funnel milestones and support/privacy cases. An approved public catalogue card or licensed public copy of a submitted photo may remain for catalogue continuity and rights records; contact support to request review or unpublishing. You may also email us from your account address. Account-scoped data on a device can be removed by resetting the app, signing out, or clearing its storage as applicable.

Security and your choices

We use access controls and encrypted connections, but no online service can promise absolute security. Native discovery and personalized account features require sign-in; the current public web demo is local-only and does not provide real account synchronization or private group matching. Confirmation, sign-in, and password-reset links are sensitive and should not be forwarded. You may unsubscribe from non-essential messages, although service and security notices may still be sent.

Children and international access

The service is not directed to children under 13. If you believe a child provided personal information, contact us. Information may be processed in Canada, the United States, or other locations where our providers operate, with safeguards required by applicable law.

Changes

We may update this policy as the app evolves. The effective date above will change when a revised policy is posted. Material changes will be communicated in the app or by another appropriate method.