Privacy Policy

Scope

This policy explains how Fern Ventures LLC (“Baddie AI,” “we,” “us,” or “our”) handles information when you use Baddie AI — Miami Spice Edition at miamibaddie.com. The service is a restaurant guide; it does not take reservations or process payments.

Information we collect

We store the searches, prompts, and Discover filters you submit, the number and identifiers of restaurant results returned, request status, approximate country, the model used, and timestamps. These records are associated with a pseudonymous browser-session value, not your name. Do not submit passwords, payment information, medical information, or other sensitive personal information.

If you use voice dictation, your recording is sent to our AI provider for transcription. Baddie AI does not intentionally retain the audio file after transcription; the resulting text is treated like any other submitted prompt. If you choose to create an account, Clerk processes your email and authentication data, and we store your Want to Go and Been There lists, recent search history, plus your saved menu picks, whether you marked a pick as already eaten, and your optional email preference. When you sign in, eligible searches previously made in the same browser session may be attached to your account so they appear in My Spice.

If you select “Use location,” your browser asks for permission and provides current coordinates and an accuracy estimate. We use them during that browser session to rank nearby restaurant records and provide location context to the AI response. We do not continuously track your device, and raw coordinates are not added to the administrator search-history record. You can turn location off from the search box or deny browser permission.

We also process technical information needed to operate and secure the service, including IP address for rate limiting and geographic access controls, browser and device information, cookies, and diagnostic logs. We store a hashed random browser-session value with search records rather than the raw session value or raw IP address.

Why we use information

We use information to answer requests, retrieve relevant official Miami Spice records, transcribe voice input, improve search quality, understand which features are useful, prevent abuse, enforce our Terms, maintain security, support My Spice, and respond to support, legal, or regulatory requests. Authorized Baddie AI administrators may review submitted searches and prompts for these purposes.

AI processing

Your prompt, recent conversation context, and retrieved official restaurant facts may be sent to the configured AI provider to plan retrieval and write a grounded answer. When enabled, current coordinates and computed local date and time may also be included so the response can prioritize nearby restaurants with a matching official meal and participating day. Voice recordings are sent to the configured transcription provider. We do not authorize these providers to use Baddie AI inputs for our advertising. Their processing is also governed by their applicable terms and privacy commitments.

Service providers and disclosures

We use Railway and PostgreSQL for hosting and storage, Qdrant for restaurant retrieval, Clerk for optional authentication, and AI providers such as OpenAI or OpenRouter for model and transcription services. We may disclose information to vendors acting for us, to comply with law or valid legal process, to protect rights and safety, or as part of a merger, financing, acquisition, or transfer of the service. We do not sell personal information or use search activity for cross-context behavioral advertising.

Retention

Search and prompt records are retained for up to 90 days, then deleted through the application’s retention process. Records of legal agreement, consisting of a hashed browser-session value, policy versions, approximate country, and timestamp, may be kept for up to five years to establish and enforce the agreement. Account and My Spice data are kept until you delete the account or the service no longer needs them. Providers may keep limited security or backup records under their own retention schedules, and we may retain information longer when reasonably necessary for fraud prevention, disputes, or legal obligations.

Raw device coordinates are used for the active search session and are not intentionally retained in the 90-day administrator search-history table. AI and infrastructure providers may process request data under their own limited security and retention practices.

Cookies and choices

We use necessary cookies to remember your legal agreement, maintain a pseudonymous session, secure the service, and support Clerk if you sign in. The short notice beside the search composer explains that submitting a search agrees to the Terms and acknowledges this Policy; we record the policy versions, notice text, acceptance method, timestamp, and hashed browser-session value. You may continue browsing public restaurant pages without submitting a search. Email updates are optional and off by default.

Access, deletion, and account choices

Signed-in users can view and delete individual recent conversations in My Spice, and may delete their account and Baddie AI account data in Settings. Search history remains subject to the 90-day retention period described above. You may also contact us to request access, correction, or deletion where applicable. Because anonymous search records use a hashed browser-session value and are not linked to a verified identity, we may be unable to identify a particular anonymous record without additional information. We will verify requests as required by law and may deny or limit requests where an exception applies.

Children

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information, contact us so we can investigate and delete it where required.

Security and third-party links

We use reasonable administrative, technical, and organizational safeguards, including restricted administrator access. No system is completely secure. Restaurant, reservation, map, and other external links are controlled by third parties and are governed by their own privacy practices.

Changes and contact

We will post changes here and update the effective date. If a material change expands how we use retained prompts, we will provide a new notice and request agreement before applying it as required. For privacy questions or requests, contact team@guestlistbaddie.com.