Privacy notice

This page says what we keep about you, who it goes to, how long it stays, and how you delete it. If you are only looking at the home page without signing in, none of the things below happen.

What we keep

Your email address — only to confirm that you are on the invite list, and to send you a one-time sign-in code.
Your conversations with the AI guide — so that it can carry on from what was said before.
Usage records — what each question cost, used to work out cost and quota.

We do not ask for, and do not store, your home address, your phone number, your payment information or any identity-document information. This site will never ask you for a password, a bank card number or an ID number. If a page or an email asks you for these in our name, it is not us.

What leaves this site

The AI guide needs two outside services in order to answer at all:

OpenAIProcesses the text you type, in order to find relevant material.

DeepSeekProcesses your question and the relevant material, in order to write the answer.

AnthropicProcesses your question and relevant material for answers in isolated evaluations.

What we send them contains no email address, no name and no account of yours. The identifier we attach to each request is a random number drawn fresh every time, with no derivable relationship to your account. Phone numbers and email addresses that are obvious in what you type are replaced with placeholders before anything is sent, and what we store is the replaced version too.

This says the same thing as the passage you see the first time you sign in — both are generated from the same vendor list, and adding a vendor without updating both makes the build fail on the spot.

How long it stays

Conversations are kept for at most 30 days; once that is up they are deleted. You can also delete all of your conversations yourself at any time.

What happens when you delete your account

All of this person's conversation turns inside the retention window, plus the earlier summariesDeleted; no row is left behind.

This person's row on the invite list: email address, display name, third-party sign-in linksIrreversibly replaced with a random key that has nothing to do with you (the row stays, but it cannot point back to you).

Every session this person still has openDeleted; no row is left behind.

The rows in the usage ledger that point at this person (cost and quota still have to be counted, but they should no longer point back to this person)Irreversibly replaced with a random key that has nothing to do with you (the row stays, but it cannot point back to you).

The answer ratings and corrections this person leftIrreversibly replaced with a random key that has nothing to do with you (the row stays, but it cannot point back to you).

“Replaced with a random key” is irreversible: the key is drawn fresh, it is not a hash of your email address — a hash can be looked back up, and that is not anonymous.

What is stored in your browser

le_sessionThe sign-in session itself. Without it, not a single byte of invite-only content can be fetched.

le_meOnly used to let the page know that you are signed in, so it can draw the signed-in version of the interface.

There are no advertising cookies and no third-party analytics scripts. This page, and the images, fonts and styles on the home page, are all embedded in the page itself, so your browser does not request anything from anywhere else in order to display them. (The restaurant illustrations inside the city guides are stored on Google Cloud Storage, and your browser fetches those images from there directly.)

How to reach us

To ask for a copy of your data, to delete your account, or if you think this page does not match what actually happens: hello@localeatsclub.com.