Privacy Policy

Stubby is a platform for discovering, recording, and sharing craft-beer experiences. It is owned and operated by Latent Space Inc., a corporation organized under the laws of Ontario, Canada and based in Toronto. This policy explains how we collect, use, disclose, store, and protect your personal information across the Stubby app, website, and related services (the "Services").

By creating an account or using the Services, you consent to the handling of your information as described here. Privacy questions go to our Privacy Officer at privacy@getstubby.com.

Account information. Email address, phone number, display name, username/handle, and an optional profile photo.

Visit and activity. Brewery check-ins and timestamps, photos and content you upload, ratings, reviews, comments and reactions, and your friend connections and social interactions.

Location. Collected only when you actively check in or otherwise grant location permission — latitude/longitude, the derived city/province/country, and the accuracy radius your device reports. We do not track your location continuously or in the background.

Device and technical. IP address, device identifiers, device type and operating system, app version, language preference, push-notification token, and crash/diagnostic reports.

Analytics. Feature usage, session activity, performance metrics, application errors, and engagement patterns — aggregated or pseudonymized where possible.

We use personal information to: create and manage your account and authenticate you; record brewery visits and check-ins; power social and community features and show your activity to friends according to your privacy settings; deliver notifications and service messages; improve and develop the Services; detect fraud, abuse, and spam and maintain platform security; comply with legal obligations; and enforce our Terms of Service.

We do not sell, rent, or trade personal information to advertisers or data brokers for monetary consideration.

Depending on your account settings, some information is visible to other users — typically your display name, username, profile photo, check-ins, ratings, reviews, and public activity-feed content.

Privacy features such as Ghost Mode or a private profile hide some of this activity from other users. You remain responsible for anything you choose to share publicly.

For users in Canada, we process personal information primarily on the basis of your consent under the Personal Information Protection and Electronic Documents Act ("PIPEDA"). For marketing email (waitlist + launch announcement) we rely on express opt-in consent under Canada's Anti-Spam Legislation ("CASL"). You may withdraw consent at any time, subject to legal or contractual limits.

We share personal information only with service providers who help us operate Stubby — cloud hosting and storage, authentication, SMS and email delivery, maps and geocoding, product analytics, error monitoring, customer support, and security/anti-abuse. They process data only on our instructions, under contract, and only as needed to provide their service. We do not sell personal data. For the specific providers we use, email privacy@getstubby.com.

We may disclose information where reasonably necessary to comply with applicable law; respond to court orders, warrants, subpoenas, or other lawful requests; protect the safety of users or the public; investigate fraud, abuse, or security incidents; or protect our legal rights and property.

If Stubby or Latent Space Inc. is involved in a merger, acquisition, financing, reorganization, or sale of all or substantially all of its assets, personal information may be transferred as part of that transaction, subject to applicable privacy laws. We will notify users where required by law.

Your personal information is stored primarily in Canada. Some of our service providers process limited data outside Canada (in the United States or the European Union); while there, that data is subject to the laws of those jurisdictions, including lawful access requests. We disclose this transfer per PIPEDA principle 4.1.3. By using the Services you acknowledge these cross-border transfers.

We keep personal information only as long as necessary for the purposes described in this policy:

Backup copies may remain in disaster-recovery systems for a limited period after deletion.

You can delete your account at any time from the app (Profile → Delete account) or on the web. When you delete your account, we permanently remove your personal data — your email, name, handle, photo, sign-in identities, device tokens, and the photos and notes attached to your visits — and we revoke your sign-in credentials. This happens immediately and cannot be undone.

Anonymized records of past activity (for example, that a visit happened at a brewery, with no link back to you) may be retained to keep community counts accurate; these are no longer personal data. Residual copies may persist in encrypted backups for up to 35 days before they age out.

Under PIPEDA you have the right to access, correct, or delete your personal information, to withdraw consent, and to ask how we handle your data. Delete your account in Settings; email privacy@getstubby.com for access or correction requests. You can also complain to the Office of the Privacy Commissioner of Canada.

We use administrative, technical, and physical safeguards, including TLS in transit, encryption at rest where appropriate, role-based access controls and authentication, monitoring and logging, and security reviews and vulnerability management. No system can guarantee absolute security, but we employ commercially reasonable measures to protect your information.

If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA § 10.1, and keep records of breaches as the law requires.

We use cookies, local storage, SDKs, and similar technologies to authenticate users, maintain sessions, analyze usage, improve performance, and monitor reliability. You can change analytics and error-monitoring preferences any time via the cookie banner, and manage other preferences through your device or browser settings.

Stubby is not directed at children. You must be at least 16 to use the Services, and at least of legal drinking age in your province to register an account — 18+ in Alberta, Manitoba, and Québec, and 19+ elsewhere in Canada. We do not knowingly collect personal information from anyone under 16; if we learn that we have, we take reasonable steps to delete it.

We may update this policy from time to time. Material changes will be communicated by email to active users or through the Services. The date above always reflects the latest version, and the change log below records revisions.

Questions, privacy requests, or complaints? Contact our Privacy Officer at Latent Space Inc. by email at privacy@getstubby.com. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.