Effective September 5, 2026
Privacy notice
Web for Fun LLC operates Thereabouts. Contact hello@thereabouts.app about your data or this notice. The private beta accepts new users who live in the United States and are 18 or older.
Data needed for the app
We use your email, display name, sign-in records, group membership, invitations, and saved-place choices to provide your private group. Group members see the places you save and your name. Saved-place preferences and group search-area settings stay until removed or the group is deleted.
We process the links, text, and search hints you choose to submit to find places. Raw source material is not kept as a history. Eligible public-source interpretations and limited provider caches can last 30 days. Current device location is used only when needed for features you enable; it is not stored as location history.
Understanding service costs
After you review this notice and confirm beta eligibility, we keep resource records linked to your account and group through random identifiers. They contain provider call counts, model or service categories, AI token counts, outcomes, and daily service activity. This helps us control costs and plan sustainable pricing. The records contain no search text, source links, place names or IDs, saved-place contents, or location.
Detailed usage lasts up to 90 days and daily summaries up to 13 months. These first-party records are separate from optional product analytics. Existing users with unresolved eligibility can continue using the app with new linked collection off.
Optional product analytics
“Share usage data” starts off. If you turn it on, we record actions such as opening Go, using filters, starting an Add flow, seeing choices, saving, and handing off to Maps. Random account, group, flow, and visit identifiers help us measure success and return visits. We record app version and platform, but no advertising identifier, fingerprint, screen recording, or source contents.
Events last 30 days; daily summaries last up to 13 months. Turn the choice off in the account menu under Privacy. This deletes your retained optional activity history and stops new optional events. You can use all features without it.
Service providers
Cloudflare hosts the API, database, and website. Google Firebase handles sign-in and native crash reports. Google Places processes place searches and lookups. OpenAI processes extraction inputs when AI is used; API response storage is disabled, but provider abuse-monitoring retention may apply. Resend delivers sign-in and invitation emails. Our private GitHub issue system can hold feedback you explicitly submit.
Service providers may process data in the United States and other countries. We do not sell personal data, share it for targeted advertising, or use it for ad audiences. Anonymous operational counters remain separate from linked analytics. Crash reports include device and app diagnostics and provider-generated installation/session identifiers; we do not add your account ID, source contents, or location. Firebase documents a 90-day crash retention period before removal begins.
Your rights and choices
Use Privacy in the app to export your records, change the optional analytics choice, or delete your account. Deletion requires a recent sign-in. Your app account and personal metrics are removed; saved places in groups with other members stay without your name. Provider cleanup can take additional time. Backup copies expire on their recovery schedule, normally up to 30 days for our database, and deletions must be reapplied before restored data is used.
You may also request access, correction, deletion, objection, restriction, or portability by emailing us. We verify requests using your account and respond within applicable deadlines. If local law gives you an appeal or complaint right, contact us or your privacy regulator. Withdrawal does not affect processing before withdrawal. We retain only the limited records needed to honor deletion, address legal obligations, or resolve disputes.
Purpose and scope
We process essential app data to provide the service, protect accounts, and meet legal obligations. First-party cost accounting supports our legitimate interest in operating an affordable service, subject to applicable rights. Optional product analytics relies on your choice. We do not treat waitlist enrollment as analytics consent.
The beta is not intended for minors. If you believe a child has provided data, or you joined from outside the United States, contact us. We will review access and applicable privacy requirements. Material changes to linked collection require a new notice before it begins.
The waitlist privacy notice covers the landing page and beta emails.
Back to Thereabouts