Privacy Policy

This Privacy Policy explains what personal information Tugce Ventures LLC ("Psst", "we") collects through the Psst apps, psst.dating and Psst wristbands, how we use it, who we share it with, how long we keep it, and the choices and rights you have. Psst is designed to collect as little as possible: no location, no phone number, no date of birth, no contacts.

1. Information we collect

When you sign in

• A pseudonymous identifier from Apple or Google (the "subject"), which keeps your account to one sign-in.
• Your email address only as a one-way hash, unless you choose to receive email from a venue (see "Venue marketing").
• A random identifier for the browser or device you sign in on, used to keep your session secure and, as a one-way hash, to stop a banned member from coming back with a new account.

Your member profile

• Nickname and up to three saved nicknames, profile photo (a selfie taken in the app or a photo from your library), optional height, optional gender (shown only as a symbol, and used to pair you in a room game you join), bio, optional Instagram handle and who may see it, and your settings.
• Optional show-preferences (which genders you want to see). These are sensitive personal information: we collect them only with your separate consent, encrypt them, and use them only to filter what you see and whom a room game you join pairs you with. They are never shown to anyone, never shared and never used for advertising.

Your nights

• The wristband you claimed, the venue, the night, when you claimed and left, your table label if the venue assigned one, tonight's nickname and intent.
• Psst you send and receive (anonymous until mutual), matches, and messages you exchange.
• Arrival announcements, if you turn them on.
• Tonight's wall: snapshots you post and the reactions you give, and whether venues may share your posts to the public wall.
• Room chat, where the venue has it on: the messages you write to the room and those you reply to, reports about messages, and any chat ban the venue gives you.
• Co-presence (that you were at a night), used for Crossed paths only if you opted in.
• Room games you join: the round, whom you were paired with and your answers, and the wall post of your two band numbers if you both said yes.

Safety information

• Blocks, reports you make or receive, staff alerts, and the history of nicknames on your account (so a new name never escapes a block or report).

Technical information

• A keyed hash of your IP address for rate limits and abuse prevention, push notification tokens if you allow notifications, and basic logs.

When you buy a Psst band

• What you ordered, the price and the payment status, and the recipient's name and shipping address. The address is encrypted and deleted 90 days after the order ships; order records are kept for accounting. Card details go to Stripe, never to Psst.

When you buy or are given a premium number

• The number, where it counts (the Psst network or one venue), how it was sold, the price and the term. While it runs only you can claim a band with that number; it does not renew by itself, and it returns to the pool when it ends or when you let it go. Purchase records are kept for accounting.

When you buy a night pass

• The venue, the night, the price and whether the door used it. The venue sells the pass through Stripe and its door sees the pass when it taps your band; card details go to Stripe, never to Psst. Pass records are kept for accounting.

When you buy a Venue Pass

• The venue, the price and the 30 days it runs. The venue sells it through Stripe and its door sees the pass when it taps your own band; it never renews by itself. Card details go to Stripe, never to Psst. Pass records are kept for accounting.

When you ask a venue to host a night (organizers)

• Your group's name and kind, its size, the night you asked for, your name, email and (if you give it) phone, and your message. We pass them to that venue so it can answer you, and email you its answer. Your contact details and message are encrypted and deleted 30 days after the night, whatever the answer.

When you ask for a demo

• Your venue's name and city, your role, your name, email and (if you give it) phone, and your message. We use them only to answer you; your contact details and message are encrypted, only Psst admins can read them and each read is recorded. Deleted after 12 months.

When a venue asks to join Psst

• The venue's business details (name, type, address, website, Instagram, capacity, hours, events and door policy) and a contact person's name, role, work email, phone and, if the band kit should go elsewhere, a mailing address.
• We use these details only to review the request, plan the band kit and reply. The contact's name, email, phone and mailing address are encrypted, and only Psst admins can read them; each read is recorded.

What we never collect

• Location. The app never requests location permission. Presence comes from tapping your wristband.
• Face templates or biometric identifiers. Only your photo is kept; Psst never makes a face template from it. If you turn on Unlock with Face ID, Touch ID or your phone's biometrics, your phone checks your face or finger and tells the app only whether it matched.
• ID documents or dates of birth. The venue checks ID at the door.

2. How we use information

• To run nights: show you to other guests in the same venue on the same night, deliver psst, matches and messages, and end nights on time.
• To keep people safe: give each photo an invisible mark for the account that views it (so a leaked screenshot can be traced), moderate photos, act on reports, alert venue staff, prevent banned members from returning, and enforce limits.
• To provide member features you choose: connections, Crossed paths, status sharing and venue perks.
• Invite links: if you join through a member's invite link, we note it so they can earn a loyalty point the first night you are both out at the same venue; they see only how many friends joined, never who. A venue's link counts members who joined through it the same way.
• Network perks: when a venue offers a perk to members who own its band or a Psst band (a discount on entry or a night pass), its door sees the perk when it taps your own band; the venue sees only how often each perk was used.
• Date deals: after a night, a venue where you matched may offer a priced second date in your connection's chat. If either of you saves it, we keep that it was saved, the deal as offered and when the venue's bar marked it used; you pay at the venue, never through Psst. Psst never reads your chat to decide when to show it.
• Timed offers and the mutual bundle: a venue's priced offers shown in the room; a bundle you send is an ordinary Send a Drink offer the other person accepts or passes.
• Partner perks: at the end of a night you may see offers from Psst's non-alcohol partners that the venue switched on (for example a ride home). When you open one we count a tap for that venue and day, nothing about who you are; the partner's own terms and privacy policy apply on its site.
• Band tab, where a venue uses it: if you open a tab on your band at the bar, the venue's point-of-sale system (such as Square) holds your card and orders; Psst only links your band to a customer record named by your band label, and the link ends when you leave or the night ends.
• Second Chance, if you turn it on: an unanswered psst between you and another member who also turned it on is kept for up to 60 days, to tell you both, the next time you are both at that venue, that it happened — never who.
• The next-day email, if you asked a venue for emails: Psst sends it in the venue's name the day after a night, with a one-click unsubscribe that deletes the address you gave.
• Icebreakers and groups: an answer you give to the night's question shows on your card that night; a Table Wave tells the other table that your table waved, never who; a "two truths and a lie" game stays inside your match; if the door linked your band to friends' bands, your group sees each other's nicknames and band numbers and shares a chat for the night. Song requests go to the venue's staff with your band number, and a tip you add is paid to the venue at the bar. All of this is deleted with the night (24 hours after it ends); a game goes with its match.
• Room games, where the venue runs them: when you join a round, we pair you at random with someone in the room — women and men first, never against either person's show-preferences, never with someone either of you blocked — and show each of you the other's card for tonight (in Band Hunt only the band number until you both say yes). In a drink game one of you buys the other a drink at the bar; who buys is drawn when you're paired, and Psst sets the share of woman–man pairs in which the man buys. If you both say yes you become a match for the night and, if the venue shows pairs on its wall, tonight's wall shows your two band numbers until either of you takes it down. Staff may invite the room by push a few times a night; you can turn game invites off in Settings. All of it is deleted with the night.
• Room chat, where the venue has it on: everyone live in the room tonight sees your messages with your nickname and photo, except people you blocked or who blocked you. Before anyone sees a message, it is checked against a word list and by our moderation provider, and links, phone numbers, emails and handles are refused. The venue's staff who moderate the chat see each message with your band number, and can remove messages and ban you from the chat. Messages are deleted with the night, except those the venue removed or a report holds, which we keep for safety review for up to a year.
• Gifts and Psst Plus, once they are offered: hearts, roses, toasts and a Psst Plus subscription are bought from Apple or Google, who handle the payment; we receive the store's record of the purchase (product, date, period, refunds) and keep it for accounting. A heart or a rose shows the person you send it to your nickname and band number tonight; a toast shows the table you chose on the venue's screen, never your name. A day after the night we keep only a gift's kind, venue and night, and the receiver's own count for Psst Plus stats. The venue earns a share of the gifts sent in its room and sees totals only.
• To show a venue's sponsor card or first-drink offer while you are in its room, and to count once per night that it was shown to you. The venue's sponsor report shows totals only (hidden on nights under 10 guests); we delete these counts after 90 days.
• To operate, secure, debug and improve the Service, using aggregated or de-identified data where possible.
• To comply with law and respond to lawful requests.

We do not sell or share your personal information for cross-context behavioral advertising, and there are no third-party ad or tracking SDKs in the guest app.

Psst Events (social mode)

• At a social event we do not use your gender, show-preferences or age range to decide who you see, and other guests do not see your gender, height, age, relationship goal or smoking that night.
• Next to the "21 or older" confirmation we keep a second one, "18 or older", with the date you gave it.
• A connection made at a social event is marked as such, so its chat keeps the social wording; a social event creates no Crossed paths record.
• Organizers and employers who run a social event receive aggregate numbers only, as venues do.

3. Who we share information with

• Other members, only as the product describes: tonight's profile with people in the same venue tonight; what you chose to reveal with a mutual match; your connections; and Crossed paths entries (venue and date only) with members who also opted in.
• Every signed-in member, when a venue shares one of your wall snapshots to the public wall: the photo, credited to the venue and the date only, never your name, for up to 30 days, unless you turned sharing off or took the post back.
• Venues: aggregated statistics only (never below 10 people), and comparisons with their city's average made of at least three other venues, never one venue alone; if you opt in to a venue's loyalty program, that venue sees your nickname, member code, visits and perk status — never your photo, bio, psst, matches or preferences; if you opt in to a venue's emails, that venue receives your email address, and can download it with the others who opted in, to email you about its own venue only: venues agree never to sell it, share it or upload it to an advertising platform. Venue staff see band numbers and table labels in safety alerts. After a night, the venue's owners and managers can open that night's wall archive: the snapshots and announcements as the room saw them, without the name or band number of whoever took each snapshot, and with reaction totals only, for 12 months; after that only Psst keeps it.
• Service providers acting on our instructions under contract (see the list below).
• Authorities, when required by law or when we believe in good faith that disclosure is necessary to protect someone's safety.
• A successor, if Psst is involved in a merger or acquisition, subject to this Policy.

Provider	Purpose	Data
Cloudflare (R2 storage, DNS, network)	Photo storage and delivery, network protection	Photos (private, signed links only), network data
OpenAI	Checking photos, nicknames and bios before others see them	The photo or text, sent once; provider retention turned off
Apple Push Notification service, Firebase Cloud Messaging, Expo Push, web push services	Delivering notifications	Device token and a generic message, never names or photos
Resend	Email: receipts, answers to requests, and venue email you opted in to	Email address, message
Stripe	Payments for bands, tickets and passes you buy	Payment details (held by Stripe), order amount
Apple App Store, Google Play	In-app purchases, when they are offered	The store's record of a purchase (product, date, refunds)
eSignatures.com	Signing venue agreements, when a venue signs that way	The signer's name, title and email (venue contacts only)
Square	A tab on your band, at venues that use it	Your band label and a session reference; never your name, and Psst never sees your card
Self-hosted analytics and error tracking	Reliability and product analytics without third-party trackers	De-identified usage events; error reports scrubbed of personal data

All primary data is stored in the United States on infrastructure we control.

4. How long we keep information

Information	Kept for
Tonight's profile and psst	Deleted 24 hours after the night ends
Messages from matches not saved by both people	Deleted 24 hours after the night ends
Connections and their messages	While both members keep the connection
Co-presence for Crossed paths	90 days, only if you opted in; otherwise deleted with the night
Member signals (Crossed paths psst)	30 days
Nickname history	1 year
Reports	1 year, longer if under legal hold
Audit log of security-relevant actions	2 years
Account photo	While your account exists
Device markers (one-way hash of the device ID)	While your account exists; if the account was banned or suspended, kept after deletion so the restriction can't be reset
Watermarked photo variants	Cached for 10 minutes
Who sent a gift (heart, rose, toast)	Deleted 24 hours after the night ends; the kind, venue and night stay, and the receiver's count stays while their account exists
Who reacted to a wall post	Deleted 24 hours after the night ends; only the totals stay with the post
Room games: who joined, the pairs and their wall posts	Deleted 24 hours after the night ends
Room chat: the messages written to the room	Deleted 24 hours after the night ends; those the venue removed or a report holds are kept up to a year
Room chat bans	While in force; deleted a year after they end
Public wall shares	30 days after the venue shares a post, or until you take it back, turn sharing off or the post is removed
Wall snapshots and announcements	In the night's archive: 12 months for the venue's owners and managers, then kept by Psst in its archive with no set end date (never shown to guests)
Sponsor card views	Counted once per night; the counts are deleted after 90 days
Shipping address for a band order	Deleted 90 days after the order ships
Orders, tickets, passes and purchase records	Kept for tax and accounting as long as the law requires; no longer linked to a profile after you delete your account
Requests to host a night (organizers)	Contact details and message deleted 30 days after the night
Demo requests from the website	Deleted 12 months after the request
Night ratings and comments	Deleted 12 months after the night, or with the account
Partner perk taps	Counts per venue and day only; nothing about who tapped
A venue's request to join Psst	12 months after a decline; otherwise 24 months after the last change, unless the venue joins
Backups	Encrypted; deleted after 35 days

When you delete your account we delete everything except band orders and purchases kept for accounting (no longer linked to a profile), reports under legal hold (with your personal details removed), scrambled markers of a suspended or banned sign-in, email and devices so the restriction carries over, and anonymized aggregates. If you signed in with Apple, we also ask Apple to disconnect Psst from your Apple ID. How to delete, with or without the app: psst.dating/delete-account.

5. Your choices and rights

In the app you can, at any time: edit your profile, go invisible, block and report, control who sees your status, turn arrival announcements and Crossed paths on or off, delete your show-preferences, limit the use of your sensitive personal information, leave venue loyalty programs, unsubscribe from venue emails, download your data, and delete your account.

Depending on where you live (including California under the CCPA as amended by the CPRA), you may have the right to know and access the personal information we hold, to correct it, to delete it, to limit the use of sensitive personal information, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising these rights. You can use the in-app tools or write to [email protected]. We may need to verify your request through your signed-in account. An authorized agent may act for you as the law allows.

6. Security

We encrypt data in transit, encrypt sensitive fields such as show-preferences and member codes at the application layer, hash identifiers we only need to compare, keep photos in private storage reachable only through short-lived signed links, and limit staff access. No system is perfectly secure; we will notify you of a breach where the law requires.

7. Age

Psst is only for adults: 21 and over at dating nights, and 18 or 21 and over at social events (Psst Events), as each event's organizer sets. We do not knowingly collect information from anyone under 18. If you believe someone younger than a night allows is using Psst, report them in the app or write to us.

8. Changes

We will post updates here and tell you in the app before a material change takes effect, asking for your consent again where the law requires.

9. Contact

Tugce Ventures LLC · 2108 North Street, Sacramento, CA 95816, USA · [email protected]