Privacy Policy

• Company (“we”, “us”, “our”) refers to I AM GREATER THAN FEAR, located in Oceanside, California, United States. I Am Greater Than Fear is the data controller responsible for your personal information.
• Website refers to iamgreaterthanfear.club, our company site.
• App refers to 67433 Key to the City, our membership app for Oceanside, California, on the web at 67433thekeytothecity.com and on iOS and Android.
• Store refers to our I>Fear online store, hosted by Shopify at i-fear.myshopify.com.
• Personal information means any information that relates to an identified or identifiable individual.
• Service provider means a third party that processes information on our behalf and on our instructions.

Our company website is a set of static pages. It sets no cookies, runs no analytics, embeds no third-party scripts or fonts, and has no forms — the contact page opens your own mail client. We do not collect personal information through it. Our hosting provider, Vercel, processes standard server request data (including IP address) in order to serve the pages and protect the service, as any web host does.

Our store is hosted by Shopify. If you place an order, the name, shipping address, email address and payment details you enter are collected and processed by Shopify and its payment providers under their own policies, and we receive the order information we need to fulfil and support your purchase. We do not see or store your full card details.

When you create an account in the app we store your mobile phone number and whether it has been confirmed with a sign-in code. Your phone number is never shown to other users. If you choose to add a display name or an avatar image we store those too; images you upload are stored with our cloud storage provider, Google Cloud Storage. If you become a member, we also store the email address you give Stripe at checkout so we can reach you about your membership. We do not otherwise collect an email address.

We keep a record of what you do in the app:

• Deals you redeem. Each redemption is recorded and tied to your account.
• Events you RSVP to, and whether you are going, waitlisted, or not going.
• Business, deal and event pages you open from a check-in sticker or a shared link. We keep these visit records — including ones made on this device shortly before you created your account — so we can tell which business or person introduced you to the app.
• If you run a business in the app, the business, deal and event records you create, and the businesses you are listed on as an owner.
• Content you report. Each report records your account, what you reported and any note you add. Only our moderators see reports; the business is not told who made one.

Businesses can see the attendee list for events they host, which includes the name of each person who has RSVP'd.

Subscriptions are handled by Stripe. We never see or store your card details — Stripe collects them directly. On our side we store your Stripe customer ID so that we can look your subscription up, a copy of your subscription's current expiry date that Stripe keeps up to date, and the email address you enter at checkout.

We use PostHog to understand how the app is used and to capture errors. Once you sign in, we associate that analytics data with your account, including your display name and, if we have one, your email address. Events we record include signing in, signing out, finishing onboarding, redeeming a deal, creating a business or a deal, starting subscription checkout, and viewing a business check-in page. Uncaught errors are reported automatically.

On the web, analytics traffic is proxied through our own domain. In the iOS and Android apps it goes to PostHog directly. Our company website has no analytics of any kind.

Some screens show distances, or sort and filter by them. We ask for your location on the home screen the first time you open the app after signing in, behind an explainer that says what it is for, and you can decline. The coordinates stay on your device: the app remembers your most recent position there for up to seven days so distances can be shown without waiting on a new reading, and clears it when you sign out or turn location off. We never send your coordinates to our servers or to anyone else.

The QR scanner reads a business's check-in code using your camera. Decoding happens entirely on your device. No image or video from your camera is uploaded or stored.

If you allow notifications, we store a device push token for each device so we can send them, along with the platform it belongs to. We ask for permission on the home screen the first time you open the app after signing in, behind an explainer that says what we would send, and you can decline. We send two kinds of notification and no others: a single welcome notification when you first grant permission, and a reminder about 24 hours before an event you are going to. Notifications are delivered by Firebase Cloud Messaging, which receives the token and the message. You can turn notifications on or off at any time from your profile screen in the app, or in your device settings.

Two features send text to Google's Gemini API. Businesses can generate a deal description or a deal image, which sends the deal name along with the business name and its categories. Separately, search is powered by embeddings: the text of deals, events and businesses, and the search terms you type, are sent to Gemini to be converted into vectors. Neither sends your account details.

Map screens are drawn with Apple MapKit JS. Apple receives the requests needed to render the map and handles them under its own privacy policy.

Sign-in codes are delivered by text message through Twilio, which receives your phone number in order to deliver them. Before we send the first code to a number we also use Twilio's lookup service to check that it can receive texts. We send sign-in codes only — no marketing messages. Any transactional email we send goes through Resend; we log the recipient, subject and sender of each message so that we can diagnose delivery problems, and sign-in tokens are never written to that log.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not run advertising in the app, and we do not share your information with advertisers or data brokers.

User data lives in our own database instance running on cloud infrastructure located in the United States. If you are outside the United States, using the app or ordering from the store means your information is transferred to and processed in the United States, where data protection law may differ from your own.

We rely on a small number of providers, each processing information only as needed to deliver the service:

• Vercel — hosting for our website and the app.
• Google Cloud — database hosting and image storage for the app.
• Stripe — subscription payments for the app.
• Twilio — sign-in codes by text message.
• Resend — transactional email.
• Google (Gemini API) — AI deal drafting and search embeddings.
• Firebase Cloud Messaging — push notifications.
• PostHog — product analytics and error reporting for the app.
• Apple (MapKit JS) — map rendering.
• Mixcloud — embedded audio playback in the app.
• Shopify — our online store, including checkout and payments.

You can delete your app account yourself, from Edit Profile in the app. Deletion takes effect immediately and cannot be undone. It removes your name, photo, phone number, email address and invite code, and your devices stop receiving notifications. It also ends your membership straight away, without a refund for the rest of the billing period, cancels your RSVPs to events that have not started, and withdraws any pending business claim. If you own a business in the app, or help run the app, email us instead: the business, or your access, has to be handed over first. Some records are append-only by design and are kept after your account is deleted:

• Redemptions — the record that you redeemed a particular deal. A redemption cannot be reversed or deleted.
• RSVPs — cancelling an RSVP marks it as not going rather than deleting it.
• Visit records — the record that you opened a business's check-in page or a shared deal, event or referral link.
• Reports you filed about a business, deal or event.

Businesses rely on these records to reconcile what they honoured, which is why they persist. Once your account is deleted they are no longer linked to anything that identifies you, but the redemption, attendance and visit history itself is retained. Our payment processor keeps its billing records for your membership, and analytics already recorded stays with our analytics provider. Order records from the store are retained as long as required for tax and accounting purposes.

If you are a California resident, the CCPA gives you the right to know what personal information we hold about you, to request that we correct or delete it, and not to be treated differently for exercising those rights. Residents of other U.S. states with comprehensive privacy laws have equivalent rights. We do not sell personal information, so there is no sale to opt out of. Email us to make a request and we will respond within the time the law allows.

You must be at least 18 years old to buy a membership or place an order with us. The app is not intended for anyone under 13, and we do not knowingly collect information from children under 13. If you believe a child has given us their information, email us and we will remove it.

We will update this page when our practices change and move the effective date at the top. Significant changes will also be surfaced in the app.

Questions, requests and complaints go to hello@iamgreaterthanfear.club. Our postal locality is Oceanside, California, United States.