CIPHER

Privacy Policy

Last updated: April 4, 2026

cipher77 LLC ("we", "us", "our") operates the Cipher membership platform and mobile applications (the "Service"). This Privacy Policy describes how we collect, use, and protect your personal information.

Information We Collect

When you use our Service, we may collect:

• Account Information: Phone number, first and last name, email address (if using Apple Sign-In)
• Membership Data: Points balance, tier status, visit history, enrollment date
• Reservation & Booking Data: Dates, party sizes, special requests, table assignments
• Ticket Purchases: Event tickets, VIP passes, comp tickets issued to you
• Device Information: Device type, operating system (collected automatically by our hosting provider)

How We Use Your Information

• Provide and maintain your membership account
• Process reservations, bookings, and ticket purchases
• Track and award loyalty points
• Send transactional messages (booking confirmations, OTP codes)
• Improve our services and venue operations

Information We Do NOT Collect

• We do not collect location data
• We do not use advertising trackers or analytics SDKs
• We do not sell or share your data with third parties for marketing
• We do not collect payment card information (payments are processed by our POS system on-site)

Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Supabase (AWS infrastructure, US region). All data is encrypted in transit (TLS) and at rest. Access is controlled through Row Level Security policies. Only authorized staff with appropriate roles can view your information through our management portals.

Authentication

We use phone-based OTP (one-time password) and Apple Sign-In for authentication. We do not store passwords. Biometric data (Face ID / Touch ID) is processed entirely on your device and never transmitted to our servers.

Data Retention

We retain your account data for as long as your membership is active. If you delete your account, your personal data is permanently removed from our systems. Anonymized, aggregated data (e.g., total visit counts) may be retained for business analytics.

Your Rights

You have the right to:

• Access your personal data through the Members portal
• Correct inaccurate information by contacting us
• Delete your account and all associated data at any time (via the app or our data deletion page)
• Export your data by contacting us

Third-Party Services

• Supabase: Database and authentication (supabase.com/privacy)
• Cloudflare: CDN and security (cloudflare.com/privacypolicy)
• Apple: Sign in with Apple authentication (Apple's privacy policy applies)

Children's Privacy

Our Service is not directed to individuals under 21. We do not knowingly collect personal information from anyone under 21.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

cipher77 LLC
Atlanta, GA
Contact Form

cipher77 LLC. All rights reserved.