Privacy Policy

Stupid Good (“Stupid Good”, “we”, “us”) is a personalized venue-discovery service that helps you find restaurants and bars worth going to. This policy applies to visitors, registered users, and subscribers of our website, apps, and related services (together, the “Service”).

We collect the following categories of information:

• Account information. We use Amazon Cognito to manage sign-in. Depending on how you register, this includes your email address, phone number, and/or basic profile details from a social sign-in provider (for example, your name and email from Google). Authentication is handled by our identity provider; we do not store your password.
• Profile & taste preferences. Dietary preferences, cuisines and dishes you like, saved cities, and your answers to onboarding questions — used to personalize your recommendations.
• Usage & analytics. First-party analytics events about how you use the Service, such as searches you run, Eatlists you view, venues you open, and messages you send the Concierge. Our own analytics remain separate from optional third-party services. If you allow analytics, PostHog receives campaign events such as page views, city/list selections, venue views, save/contact taps, sign-ups and log-ins. After sign-in, only your account ID (a random code) links those events to your account; we do not send PostHog your name, email or phone number. Session replay needs its own opt-in and masks input fields. For new visitors confirmed to be in the US, Meta Pixel ad measurement is on by default unless you opt out or send Global Privacy Control. Outside the US, or when your country is unknown, it stays off until you allow marketing. We honor previously saved refusals everywhere. With your explicit marketing choice, when you sign up it also sends Meta your email address, phone number and name (whichever of these we have), scrambled (hashed) in your browser first. It sends them with that sign-up and with the later Meta events until you reload the site, close the tab or log out, so Meta can match them to its ads. This happens only with your marketing permission. Hashing does not make this information anonymous. We do not send authentication credentials or private Concierge conversations in these campaign events.
• Content you submit. Ratings and reviews, saved and shared Eatlists, itineraries, and your conversations with the AI Concierge. Public Eatlists, public itineraries and some saves are shown to other people in For You; see Section 5.
• Device & log data. IP address, device and browser type, and log data. We capture your IP address server-side for security and consent logging and remove it before it enters our analytics pipeline. If you allow analytics, your browser also sends PostHog your IP address, basic browser and device details, the page address and the site you came from. When Meta ad measurement is enabled under the choices described above, your browser sends the same kinds of information to the Meta Pixel. Our error-monitoring service receives filtered error details and stack traces; we remove request bodies, cookies, query strings, credentials, Concierge messages, email addresses, and US phone numbers before sending an error.

We use your information to:

• generate personalized recommendations and rank venues for you using our scoring engine;
• power the AI Concierge and answer your questions;
• operate, maintain, secure, and support the Service, including fraud prevention;
• allow authorized staff to review saved Concierge questions and answers for quality assurance and to improve the Concierge;
• understand how the Service is used and improve our products through analytics;
• run rewards and wallet-credit promotions and process subscription billing; and
• communicate with you about your account and, where you’ve opted in, send marketing messages.

The AI Concierge answers your questions using a third-party large-language-model providers (Anthropic and OpenAI). When you send a message to the Concierge, your query and the context needed to answer it are transmitted to that provider for the sole purpose of generating a response and operating the Service. Please do not send sensitive personal information (for example, government identifiers, payment-card numbers, or health details) to the Concierge.

Disclosures and your choices — we disclose personal information in the situations below. Optional advertising measurement may be treated as a “sale” or “sharing” under applicable privacy laws. You can decline it through Cookie preferences or a browser Global Privacy Control signal.

• Other members and visitors (For You). Anyone, signed in or not, can see this activity in For You and on its community pages, under your display name (or “Stupid Good member” if you have none): your public Eatlists once they hold a place, with their names, descriptions, places, venue photos and Eatlist notes; the places you add to them; and your public itineraries, with their name, city, length and places but not your dates or notes. New Eatlists and new itineraries start public. Places you heart into Saved or Want to Try appear as “saved” while “Show my hearts in For You” is on, whether those two Eatlists are public or private, counting only hearts made after this feature launched; Saved and Want to Try themselves never appear as Eatlists. Your private Eatlists, and places you add to them, never appear. Eatlists created before October 15, 2026 stay private unless you make them public. You can turn on “Hide my Eatlists from For You” or turn off “Show my hearts in For You” at any time in For You, and make any Eatlist or itinerary private from its page.
• Service providers. Cloud infrastructure and identity (Amazon Web Services), our AI providers (Anthropic and OpenAI), our payment processor, email and SMS delivery, analytics processors, and error-monitoring provider (Sentry) — each only to the extent needed to run the Service.
• Optional advertising measurement. Meta receives browser/device and public-page event information when ad measurement is enabled. New US visitors are included by default, unless they opt out or send GPC; other or unknown locations require marketing permission. Matching hashed account contact details still requires an explicit marketing choice. You can opt out immediately with Do Not Sell or Share or change your choices in Cookie preferences. We honor Global Privacy Control by keeping campaign analytics, advertising tracking and session replay off.
• Legal requirements. To comply with applicable law, enforce our Terms, or protect the rights, property, and safety of our users and the public.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Aggregated, de-identified insights. We may sell, license, or share aggregated and de-identified insights about venues and dining trends — for example, which venues, dishes, and cuisines are popular in a city, or how sentiment for them is changing over time. These insights are built from combined data across many people, meet a minimum group size before any data point is published or shared, and are not designed to identify you. We commit not to re-identify this information, and we contractually require the businesses that receive it not to re-identify anyone and not to re-sell anything about an individual. Under laws such as California’s CCPA/CPRA, some of this sharing may be treated as a “sale” or “share,” so we give you the right to opt out (see below).

Do Not Sell or Share My Personal Information. You can opt out of the sale or sharing of your personal information at any time in either of two ways. First, enable the Global Privacy Control (GPC) signal in your browser: we automatically honor it as a valid do-not-sell instruction. Second, email privacy@stupidgood.ai to request the opt-out manually, and we will process it like the other privacy requests described in Section 7. Once you opt out, we exclude your data from the aggregated insights we share, and we do not discriminate against you for opting out. An emailed request cannot switch off the Meta Pixel in your browser. To stop Meta ad measurement, turn off Marketing in Cookie preferences or use GPC. Both apply to the browser you set them in, so set them in each browser you use.

We keep account and profile information for as long as your account is active. Saved Concierge conversations remain available in your account until you delete it; anonymous Concierge chats expire within a day. Our own analytics events are retained on a tiered schedule and deleted no later than 730 days after collection. PostHog and Meta keep the information they receive for the periods set by their own services. Consent records are kept as a compliance record even after account deletion, with your account identifier removed. When you delete your account, we remove or anonymize your personal data as described in the next section.

Depending on where you live — including under the GDPR and California’s CCPA/CPRA — you may have the right to access, export, correct, or delete your personal information, to opt out of the sale or sharing of your personal information, and to object to or restrict certain processing. You can:

• export a copy of your data from your account or by request;
• delete your account, which removes or anonymizes your personal data across our systems — some records, such as consent logs and financial records, are retained where the law requires. If you allowed analytics, PostHog holds the campaign events linked to your account ID, including those from before you signed in on that browser (never your name, email or phone number). If Meta ad measurement was enabled, Meta holds what the Meta Pixel sent it. Deleting your account does not currently delete that information from PostHog or Meta; they delete it on their own schedules (see Section 6);
• opt out of analytics and marketing through our consent controls; we honor Global Privacy Control (GPC) browser signals;
• opt out of the sale or sharing of your personal information (“Do Not Sell or Share My Personal Information”) by enabling the Global Privacy Control (GPC) signal in your browser, which we honor automatically, or by emailing us to request the opt-out manually. An emailed request cannot switch off the Meta Pixel in your browser; use Cookie preferences or GPC for that, in each browser you use.

To make a request, email privacy@stupidgood.ai. We respond within the timeframes required by applicable law (for example, 30 days under the GDPR and 45 days under the CCPA), and we will not discriminate against you for exercising your rights.

We use cookies and browser storage (localStorage) to keep you signed in, remember your preferences, and measure usage. You control these through our consent banner, which gives “Reject All” equal weight to “Accept All” and can be reopened at any time with Cookie preferences in the site footer. The categories are:

• Strictly necessary (functional). Always on and cannot be turned off, because the Service cannot function without them (for example, keeping you signed in).
• Analytics. First-party measurement of how the Service is used and filtered browser error/performance reporting. On by default; you can turn it off. PostHog, our outside analytics service, is different: it stays off unless you allow Analytics in the cookie banner, and it never runs while your browser sends Global Privacy Control.
• Marketing. Lets the Meta Pixel measure visits and actions after Facebook or Instagram ads. It sets Meta’s _fbp cookie, plus _fbc when you arrive from an ad click; Meta says its cookies last up to 90 days. With an explicit marketing choice, when you sign up it also sends Meta your email, phone number and name (whichever we have), hashed in your browser first, with that sign-up and the later Meta events until you reload the site, close the tab or log out, for ad matching. Ad measurement is on by default only for new visitors whose country is confirmed as US, without a prior refusal or GPC signal. It is off until you allow it elsewhere or when country is unknown. Use Reject All, turn off Marketing and save, or use Do Not Sell or Share in the footer to opt out. Turning it off stops sending to Meta; the cookies stay until they expire or you clear them.
• Session replay. Off by default and opt-in only. If you turn it on, our analytics provider records how you interact with a page (such as clicks, scrolling, and on-screen actions, with your typed inputs automatically masked) so we can diagnose usability problems. You can turn it back off at any time.
• SMS marketing. Off by default and opt-in only. If you opt in, we may send occasional promotional text messages; message and data rates may apply, and you can reply STOP to opt out at any time. Transactional texts, such as security codes, are separate and are not marketing.

We honor the Global Privacy Control (GPC) browser signal, and you can also clear cookies in your browser at any time.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the product. Your continued use of the Service after an update means you accept the revised policy.

Questions about this policy or your data? Email us at privacy@stupidgood.ai.