Bar Bunny

Legal

Privacy Policy

Last updated: August 2026

FortyTwo Collective LLC (“we”, “us”, “our”) operates Bar Bunny (the “Service”), including the Bar Bunny website, mobile apps, and related backend services. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using the Service you agree to the practices described here.

1. Information we collect

Information you give us

  • Account information: name, email address, profile photo, date of birth, phone number, city, state, country, and the user role you sign up as (patron, bartender, or restaurant).
  • Bartender profile data: current workplace, bio, profile image, shift schedule, and any specials or events you publish.
  • Venue/restaurant profile data: business name, location, hours, tagline, description, website, menu, deals, staff roster, and similar venue details.
  • Communications: messages you send through in-app chat, comments, reviews, contact-form submissions, and any support requests.
  • Payment information: for paid Premium subscriptions, payment details are collected and processed by our payment processor. We receive only the confirmation, plan, and last-four / brand metadata needed for receipts and access control. We never store full card numbers.

Information we collect automatically

  • Device and usage data: device model, operating system, app version, IP address, language, time zone, crash logs, performance metrics, and pages or screens viewed.
  • Location data: if you enable location for the Bar Bunny mobile app, we use your approximate or precise location to show nearby venues, find bartenders on shift near you, and surface relevant specials. You can revoke this permission at any time in your device settings.
  • Push notification tokens: when you opt in to notifications, we store a device token so we can deliver shift updates, specials, and event announcements from bartenders or venues you follow.
  • Cookies and similar technologies: we use a small number of cookies and local-storage entries to keep you signed in, remember preferences, measure aggregate site traffic, and measure the performance of our advertising. Some of these are set by advertising and analytics partners rather than by us. See our Cookies Policy for details.

Information from third parties

  • If you sign in or link a social account, we receive basic profile information that the provider shares with us (typically name, email, and avatar).
  • We use privacy-preserving analytics (Vercel Analytics) which collects aggregated, non-identifying metrics about traffic to Bar Bunny.

Advertising and conversion measurement

We advertise Bar Bunny on third-party platforms, currently including Meta (Facebook and Instagram). To understand which ads actually bring people to the Service, our website includes the Meta Pixel and Google Analytics.

  • What is collected:page views, the invite or offer code in the link you arrived on, and the fact that you submitted a sign-up form. Advertising cookies (such as Meta’s _fbp and _fbc) and click identifiers in the ad link let the platform connect that activity back to the ad you clicked.
  • Contact details:when you submit an email address or phone number on one of our invite or offer pages, we also send that contact to Meta from our servers for the sole purpose of matching the conversion to the ad that produced it. It is irreversibly hashed (SHA-256) before it leaves our servers — we never transmit it to Meta in readable form.
  • What it is used for: measuring ad performance, and building audiences so we can show ads to people likely to be interested in Bar Bunnyand avoid showing them to people who already signed up. This constitutes targeted advertising and “sharing” for cross-context behavioral advertising under some state privacy laws. You can opt out — see section 7.
  • What is never sent: we do not send advertising platforms your location, your in-app activity, your messages, or payment information.

2. How we use information

  • To create and operate your account and deliver the Service.
  • To match patrons with bartenders and venues they follow, and to deliver shift updates, specials, events, and other notifications you have opted in to receive.
  • To enable messaging, follows, reviews, and other social features between users who choose to interact.
  • To process payments, manage subscriptions, and prevent payment fraud or unauthorized access.
  • To improve the Service, debug issues, measure feature performance, and inform product decisions using aggregated or de-identified data.
  • To send service-related emails (account, billing, security, policy updates).
  • To respond to your inquiries, support requests, and legal obligations.

SMS and text messaging

If you provide your mobile phone number and opt in during sign-up, we send you account verification and security codes (2FA) by SMS to confirm your identity and protect your account. Message frequency depends on your account activity — typically a one-time code each time you sign up or sign in. Message and data rates may apply. You can reply HELP for help or STOP to unsubscribe at any time; opting out of these texts does not otherwise affect your use of the Service. Your mobile phone number and SMS consent are used solely to deliver these messages. We do not sell or share this information, and your mobile opt-in and consent are never shared with any third parties or affiliates for their own marketing purposes.

3. Legal bases for processing (EEA / UK users)

If you are in the European Economic Area or United Kingdom, we process your personal data on one or more of the following legal bases: performance of a contract (to provide the Service to you), our legitimate interests (e.g., securing the Service, improving product quality, preventing fraud), your consent (e.g., push notifications, optional location, marketing emails), and compliance with legal obligations.

4. Sharing and disclosure

We do not sell your personal information. We share data only in the following limited circumstances:

  • With other users by your action: profile information, photos, posts, reviews, comments, and follower relationships are visible to others as a normal part of the Service.
  • With venues you connect to:bartenders linked to a venue may have basic profile details visible to that venue’s admins for staff management.
  • With service providers (subprocessors) who operate parts of the Service under written confidentiality terms:
    • Supabase — database, authentication, and storage.
    • Vercel — web hosting, edge delivery, and aggregate analytics.
    • Resend — transactional email delivery.
    • A PCI-compliant payment processor — payment authorization and billing.
    • Apple Push Notification service and Firebase Cloud Messaging — push delivery.
    • Meta Platforms — advertising delivery and conversion measurement (receives hashed contact identifiers and ad-interaction data only).
    • Google Analytics — website traffic measurement.
  • For legal reasons: when we believe in good faith that disclosure is required to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Bar Bunny, our users, or the public.
  • In a corporate transaction: if FortyTwo Collective LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

5. Data retention

We retain your personal information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or de-identify your personal information within 90 days, except where we must retain it longer to comply with legal obligations (e.g., tax, accounting, anti-fraud), resolve disputes, or enforce our agreements. Aggregated or de-identified data that cannot reasonably be linked back to you may be retained indefinitely.

6. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS) and at rest, role-based access controls, audit logging, and regular review of subprocessors. No method of transmission or storage is perfectly secure, so we encourage you to use a strong, unique password and enable any additional account-protection features we offer.

7. Your choices and rights

  • Access & correction: you can view and update most profile information from your account settings at any time.
  • Notifications: you can disable push notifications globally in your device settings, or per follow inside the app. You can unsubscribe from marketing email using the link in any marketing message.
  • Location: you can revoke location permission at any time in your device settings; doing so will limit nearby-discovery features.
  • Advertising:you can limit ad tracking through your browser’s cookie controls or a tracking-prevention setting, through your device’s “Allow Apps to Track” (iOS) or Ads privacy (Android) settings, and through your ad preferences on the platform itself — for Meta, in Settings → Ads. You may also email us at hello@barbunny.com to opt out of targeted advertising and we will suppress your contact information from ad measurement and audiences.
  • Deletion: you can request deletion of your account and associated personal information by emailing hello@barbunny.com.
  • EEA / UK rights: you have rights to access, correct, delete, restrict, port, and object to processing of your personal data, and to lodge a complaint with your local supervisory authority.
  • California (CCPA/CPRA) rights:California residents have the right to know what personal information we collect, request deletion, request correction, opt out of sale or sharing of personal information, and not be discriminated against for exercising these rights. We do not sell personal information for money. We do share limited identifiers with advertising platforms for cross-context behavioral advertising as described in section 1 — you can opt out at any time using the options in section 7. To submit a request, email hello@barbunny.com.

8. International data transfers

We are based in the United States and our subprocessors operate primarily in the United States and the European Union. If you access the Service from outside these regions, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers of personal data from the EEA, UK, or Switzerland.

9. Children

Bar Bunny is intended for users 21 and older in the United States. We do not knowingly collect personal information from children under 13, and we do not direct the Service to anyone under 21. If you believe a child has provided us with personal information, contact us at hello@barbunny.com and we will take prompt steps to delete it.

10. Third-party links and content

The Service may include links to or content from third-party websites, services, or applications. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before sharing personal information with them.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or in-app notice prior to the changes taking effect, and we will update the “Last updated” date at the top of this page. Your continued use of the Service after the effective date constitutes your acceptance of the revised policy.

12. Contact us

Questions, requests, or concerns about this Privacy Policy or your personal information? Reach out to hello@barbunny.com or write to us at:

FortyTwo Collective LLC
Attn: Privacy
c/o hello@barbunny.com