Privacy Policy
Effective Date: October 8, 2026
Shoutpoint Florida LLC, doing business as On & Off ("On & Off," "we," "our," or "us"), operates the On & Off mobile apps for diners and for restaurants, the website at joinonandoff.com, and related services (together, the "Service"). Shoutpoint Florida LLC is the business responsible for your personal information. This Privacy Policy explains what we collect, why we collect it, who we share it with, and the choices and rights you have.
Notice at Collection
When you sign up for On & Off we collect:
- Identity and contact details: your name, email address, phone number (if you give it), and a password (stored only as a hash) or your Apple or Google sign in ID.
- Verification details: your Instagram handle, your Google Maps profile link or Google display name, and any referral, invite, or promo code. We use them to check that you are a real person, because membership is invite only.
- Signup device details: IP address, browser or app user agent, device model, operating system, app version, and an approximate location (city, region, country) looked up from your IP address. We use them to prevent fake accounts and abuse.
We use this information to create and secure your account, review your application, run the Service, and meet legal obligations. We do not sell your personal information or share it for cross context behavioral advertising. Retention periods are listed in Section 7. California residents can read more in Section 10.
1. Information We Collect
1.1 Information you give us
- Account details: name, email address, phone number (optional), password (hashed with bcrypt) or Apple or Google sign in identifiers.
- Verification details: Instagram handle, Google Maps profile link or Google display name, and referral, invite, or promo codes.
- Profile: profile photo and any other details you choose to add.
- Reservations and activity: reservations (date, time, party size, venue, special requests), check ins, favorites, reviews and ratings, photos you upload, rewards (XP) activity, and referrals.
- Messages: support chat messages you send us, and messages between you and venues sent through the Service.
- Preferences: your notification preferences and your market or city.
- Payments: premium purchases are processed by Stripe or Apple. We receive confirmation of the purchase, the plan, and its dates. We never receive or store your full card number.
- Business users: venue details (name, address, hours, photos, deals), staff accounts, WhatsApp phone numbers and the messages you exchange with our WhatsApp assistant, and billing details.
1.2 Information collected automatically
- Signup metadata: IP address, user agent, device model, operating system, app version, and approximate location (city, region, country) derived from your IP address through ipwho.is.
- Push token: a device token so we can send the push notifications you allow.
- Screenshot events: the app detects when a screenshot is taken. We log your name, account type, the screen it happened on, the platform, and the app version, and send this to our team's internal Slack channel. We do not receive the screenshot image itself.
- Server logs: our hosting providers record technical request data such as IP address, time, and requested page to keep the Service running and secure.
We do not collect precise location (GPS coordinates). We do not use analytics tools, advertising networks, tracking pixels, or session replay on the apps or the website.
1.3 Information from other sources
- Public Instagram data: we use Apify to look up the public Instagram profile for the handle you give us, to confirm it exists and belongs to a real person.
- Public Google reviews: we use Google Places to read public reviews for venues and match your Google display name against them, for example to confirm a review you said you left.
- Apple and Google sign in: if you use them, we receive your name, email address (or a private relay email), and an account identifier.
- Venue information: publicly available business information for restaurant listings.
2. How We Use Your Information
- To create your account, confirm you are eligible, and review your membership application
- To provide the Service: show deals, process reservations and check ins, and run rewards and referrals
- To process premium purchases and business billing
- To send reservation confirmations, reminders, and other messages you asked for
- To answer support requests and help venues manage their listing, including through our WhatsApp assistant
- To moderate photos and keep content safe
- To detect, prevent, and investigate fraud, fake accounts, abuse, and security issues
- To send marketing emails and promotional notifications, only as allowed by your preferences
- To comply with legal, tax, and accounting obligations
3. Automated Decisions and AI
Signup verification. Membership is invite only and we review every application. As part of that review, our system automatically checks whether the Instagram handle you give us exists. If the handle is not found, your application can be rejected automatically. We also compare your Google display name with public Google reviews. You have the right to ask for a person to review any automated decision. Email support@joinonandoff.com and a member of our team will look at your application by hand.
AI tools. We use Anthropic's AI models to moderate uploaded photos, to help draft replies in support and in the WhatsApp assistant for venues, and to help venues set up their listing. The WhatsApp assistant for venues is automated and says so. Venues can reply TEAM at any time to reach a person, or STOP to stop messages. We do not use your data to train AI models, and Anthropic does not train its models on data sent through its commercial service.
4. How We Share Information
- Venues: when you book, the venue sees your name, party size, reservation time, special requests, and your history with that venue.
- Service providers: the companies listed in Section 5, which process data for us under contract.
- Legal reasons: if required by law, court order, or a valid government request, or to protect the rights, property, or safety of our users, venues, or On & Off.
- Business transfers: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will tell you before it becomes subject to a different privacy policy.
We do not sell your personal information, and we do not share it for cross context behavioral advertising.
5. Service Providers
We use the following providers to run the Service. Each receives only the data it needs for its task.
| Provider | What it does for us | Data involved |
|---|---|---|
| Stripe | Card payments for premium and business billing | Name, email, payment details (held by Stripe), purchase records |
| Apple | In app purchases and subscriptions, Sign in with Apple | Purchase receipts, Apple account identifier, name and email you share |
| Google Sign In, Google Maps and Places, Google Play billing where available | Google account identifier, name and email you share, venue and review lookups, purchase receipts | |
| Amazon Web Services | File storage and delivery (S3, CloudFront) | Profile photos, venue photos, uploaded images |
| Railway | Hosting for our API servers | All data processed by the Service, server logs |
| MongoDB Atlas | Database hosting | All account and Service data |
| Vercel | Hosting for this website | Website request logs (IP address, browser) |
| Expo | Push notification delivery and app updates | Push tokens, notification content, device and app version |
| Resend | Email delivery | Email address, name, email content |
| Anthropic | AI for photo moderation, drafting support and WhatsApp replies, venue onboarding | Uploaded photos, message text, venue details |
| Meta (WhatsApp) | WhatsApp Business messaging with venues | Venue phone numbers and messages |
| Apify | Lookup of public Instagram profiles | Instagram handle, public profile data |
| ipwho.is | Approximate location from IP address at signup | IP address |
| Slack | Internal notifications for our team | Signup, support, booking, and screenshot event alerts, which can include your name and email |
Website fonts are hosted on our own servers, so visiting this website does not send your IP address to Google or any other font provider.
6. Data Security
- Encrypted connections (HTTPS/TLS) for all data in transit
- Passwords stored only as bcrypt hashes
- Token based authentication, with all sessions revoked when you delete your account
- Access controls and regular security reviews
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the authorities where and when the law requires.
7. Data Retention
| Data | How long we keep it |
|---|---|
| Account details (name, email, profile photo) | While your account is active. After you delete your account, kept up to 30 days, then anonymized. |
| Signup verification and device data (IP address, device, approximate location, Instagram handle, Google profile, phone) | While your account exists. Wiped immediately when you delete your account. |
| Reservations, check ins, payment and billing records | Up to 7 years for tax and accounting, linked to the anonymized account after deletion |
| Reviews | While they are published. After account deletion the text may remain, shown as written by "Former member" |
| Support chats and WhatsApp messages | Up to 3 years |
| Push token | Until you turn off notifications, sign out, or delete your account (cleared immediately on deletion) |
| Screenshot event alerts | Not stored in our database. The alert stays in our internal Slack until our team deletes it. |
| Backups | Overwritten on a rolling cycle of up to 90 days |
8. Deleting Your Account
You can delete your account in the app at any time:
- Diner app: Profile, then Edit Profile, then Delete Account.
- Business app: the Security screen, then Delete Account. Venues owned by a deleted business account are taken offline, not listed.
When you delete your account we sign you out everywhere and immediately wipe your sensitive signup data (IP address, device details, approximate location, Instagram handle, Google profile, and phone number). Within 30 days we anonymize the rest of your account: your name, email, photo, and sign in identifiers are removed. Some transaction records, such as reservations and payments, are kept with the anonymized account for accounting and legal reasons. You can also ask us to delete your data by emailing legal@joinonandoff.com.
9. Your Choices and Rights
- Marketing emails: every marketing email has an unsubscribe link. Unsubscribing takes effect immediately. We still send transactional emails, such as reservation and purchase confirmations.
- Notifications: choose which notifications you receive (deal alerts, reservation updates, reminders, social, promotions, marketing emails) in the app's notification settings, or turn off push in your device settings.
- Access, correction, deletion, and portability: ask for a copy of your data, ask us to fix it, or ask us to delete it by emailing legal@joinonandoff.com.
- Human review: ask for a person to review an automated signup decision (see Section 3).
We respond to requests within 30 days, or within the time the law in your state or country requires, if shorter.
10. California Residents (CCPA and CPRA)
This section applies to residents of California and supplements the rest of this policy. In the past 12 months we collected the following categories of personal information:
| Category | Examples | Sources | Recipients |
|---|---|---|---|
| Identifiers | Name, email, phone, account IDs, Apple or Google IDs, IP address, push token | You, your device, Apple, Google | Venues (name only), service providers |
| Customer records | Contact details, purchase records (no full card numbers) | You, Stripe, Apple | Payment and hosting providers |
| Commercial information | Premium purchases, reservations, rewards | You, Stripe, Apple | Venues (your bookings with them), service providers |
| Internet or device activity | User agent, device model, OS, app version, screenshot events | Your device | Hosting providers, Slack |
| Approximate geolocation | City, region, country from IP address; your market | ipwho.is, you | Hosting and database providers |
| Audio, electronic, visual information | Profile and review photos, support messages | You | AWS, Anthropic (moderation), hosting providers |
| Social media and public profile data | Instagram handle and public profile, Google display name and public reviews | You, Apify, Google | Hosting and database providers |
| Inferences | None. We do not create profiles to predict your preferences or characteristics. | Not applicable | Not applicable |
Purposes. We use each category for the business purposes listed in Section 2: providing the Service, verifying eligibility, security and fraud prevention, payments, customer support, and legal compliance.
No selling or sharing. We do not sell personal information and we do not share it for cross context behavioral advertising. We have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16.
Sensitive personal information. We collect account login credentials (your email with a hashed password) to secure your account. We do not collect precise geolocation. We do not use or disclose sensitive personal information to infer characteristics about you or for any purpose other than those allowed by California law, so we do not offer a right to limit.
Your rights. You have the right to:
- Know what personal information we collect, use, and disclose, and get a copy of it
- Delete personal information we collected from you, with legal exceptions
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information (we do neither)
- Limit the use of sensitive personal information (we only use it for permitted purposes)
- Not be discriminated against for exercising any of these rights. We will not deny you the Service, charge a different price, or give a lower quality of service because you made a request.
How to make a request. Email legal@joinonandoff.com with the subject "California privacy request". To protect your account, we verify your request by matching the email address on your account and, if needed, asking you to confirm details only the account holder would know. You can use an authorized agent. The agent must give us your signed written permission, and we may ask you to confirm your identity with us directly. We respond within 45 days and will tell you if we need more time, up to another 45 days.
11. Florida Residents
We are a Florida company. We do not sell personal information and we do not use it for targeted advertising. Florida residents can use every right described in Section 9 by emailing legal@joinonandoff.com.
12. Other Regions (EEA and UK)
The Service is offered in the United States. If you use it from the European Economic Area or the United Kingdom, we process your data to perform our contract with you, for our legitimate interests in security and fraud prevention, to comply with the law, and with your consent where required (for example, marketing). You can object to or restrict processing and complain to your local data protection authority. Your data is processed in the United States; where required we rely on Standard Contractual Clauses for transfers.
13. Children
You must be 18 or older to use On & Off. Deals that include alcohol are only for guests 21 or older, and the venue checks ID. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 13. Every application is reviewed before it is approved, and we close any account we learn belongs to someone under 18. If you are a parent or guardian and believe your child gave us personal information, email legal@joinonandoff.com. We will permanently delete it within 10 business days.
14. Cookies and Similar Technologies
Today our website uses only strictly necessary storage, such as remembering your cookie choice. We do not use analytics, advertising, or tracking cookies. The cookie banner exists so that if we add optional cookies in the future, we will set them only after you agree. You can also block cookies in your browser settings.
15. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will tell you in the app or by email and update the effective date above.
16. Contact Us
Shoutpoint Florida LLC (d/b/a On & Off)
Privacy and legal: legal@joinonandoff.com
Support: support@joinonandoff.com
General inquiries: info@joinonandoff.com
Website: joinonandoff.com