Privacy Policy

Effective Date:August 24, 2025
Last Updated: August 24, 2025

1. Introduction

This Privacy Policy explains how Thyme 2 Play, LLC ("Thyme 2 Play," "we," "our," or "us") collects, uses, discloses, and safeguards your personal information when you use our white-label engagement platform (the "Platform") through participating venue interfaces.

Important: While you may access our Platform through a participating venue's branded interface (such as "[Venue Name] Rewards"), Thyme 2 Play, LLC is the data controller responsible for collecting and processing your personal information. This Privacy Policy governs all data collection and processing regardless of which venue's branded interface you use to access our platform.

2. Our White-Label Platform Model

2.1 Platform Structure

  • Technology Provider: Thyme 2 Play, LLC develops, hosts, and maintains the Platform technology

  • Participating Venues: Independent hospitality businesses that license our Platform under their own branding

  • Data Controller: Thyme 2 Play, LLC serves as the data controller for all personal information collected through our Platform, regardless of which venue's interface you use

  • Your Experience: You interact with venue-branded interfaces while we handle all data processing and privacy compliance

2.2 Venue Relationships

  • Participating venues are independent businesses that do not control or process your personal data

  • Venues may access limited information necessary for reward redemption at their locations

  • Each venue maintains its own customer service and redemption policies

  • We share minimal necessary information with venues to enable reward redemption

3. Information We Collect

3.1 Information You Provide Directly

  • Account Information: When you create an account using Google OAuth, we collect your email address and basic profile information (name, profile picture)

  • Platform Activity: Your contest participation, team selections, and engagement preferences

  • Communications: Messages or feedback you send to us or through venue interfaces

3.2 Information Collected Automatically

  • Usage Data: How you interact with our Platform, including features used and venue interactions

  • Device Information: Browser type, device type, and operating system

  • Log Data: IP addresses, access times, and referring URLs

  • Venue Context: Which participating venue's interface you're using (for reward management)

3.3 Information from Third Parties

  • Google OAuth Data: We use Google OAuth for authentication and collect your Google email address and basic profile information to enable account creation and login functionality

  • Venue Integration Data: Limited information from participating venues necessary to process reward redemptions

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Platform Service Provision

  • Creating and managing your user account across all participating venues

  • Processing your contest participation and reward earning

  • Providing leaderboards, scoring, and engagement features

  • Managing promotional credit balances and venue-specific rewards

  • Sending Platform-related notifications

4.2 Venue Integration and Rewards

  • Sharing necessary information with participating venues to enable reward redemption

  • Tracking reward earning and redemption across different venues

  • Facilitating customer service between you and participating venues

  • Managing venue-specific promotions and contests

4.3 Platform Improvement and Analytics

  • Analyzing usage patterns to improve our Platform functionality

  • Understanding venue engagement and partnership effectiveness

  • Troubleshooting technical issues across venue integrations

  • Developing new features and venue partnership capabilities

4.4 Communication

  • Responding to your inquiries and support requests

  • Sending important updates about our Platform or venue partnerships

  • Facilitating communication between you and participating venues when necessary

Google Data Limitation: We only use Google user data (email and profile information) to provide and improve the core functionality of our Platform. We do not use Google data for advertising, marketing to third parties, or any purposes unrelated to our engagement platform and venue partnerships.

5. How We Share Your Information

5.1 Participating Venues

We share limited information with participating venues only as necessary for:

  • Processing reward redemptions at their location

  • Providing customer service for venue-specific issues

  • Managing venue-specific promotions and contests

  • Fraud prevention and security

Important: Venues receive only the minimum information necessary to provide their services. They do not have access to your complete Platform profile or activity across other venues.

5.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Platform, including:

  • Cloud hosting providers for data storage

  • Analytics services for Platform usage tracking

  • Email service providers for communications

  • Security and fraud prevention services

All service providers are contractually obligated to protect your information and use it only for specified purposes related to our Platform operations.

5.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal processes.

5.4 Business Transfers

In connection with any merger, sale of assets, or acquisition of Thyme 2 Play, your information may be transferred as part of the business assets.

5.5 No Sale of Personal Information

We do not sell your personal information to third parties. This includes not selling data to venues, advertisers, or any other entities.

5. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

  • Encryption of data in transit and at rest

  • Regular security assessments and monitoring

  • Access controls and authentication measures

  • Secure data center facilities

6. Data Retention

6.1 Account Data

We retain your account information and game data for as long as your account remains active or as needed to provide our services.

6.2 Inactive Accounts

If you don't use your account for 24 months, we may delete your account and associated data after providing 30 days' notice.

6.3 Legal Obligations

We may retain certain information for legal compliance, dispute resolution, or safety purposes as required by applicable law.

7. Your Rights and Choices

7.1 California Consumer Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: You can request information about the categories and specific pieces of personal information we collect, use, disclose, and sell about you.

Right to Delete: You can request that we delete your personal information, subject to certain exceptions.

Right to Correct: You can request that we correct inaccurate personal information we maintain about you.

Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information (note: we do not sell personal information).

Right to Limit: You can request to limit our use and disclosure of sensitive personal information.

Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

7.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at [EMAIL] or use the contact form on our website. We will verify your identity before processing your request and respond within the timeframes required by law.

7.3 Account Controls

You can:

  • Update your account information through your profile settings

  • Delete your account by contacting us

  • Control email communications through your account preferences

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information during such transfers.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

For Platform privacy and data questions: Thyme 2 Play, LLC
Email: info@thyme2play.com
Website: https://thyme2play.com
Address: 2939 S Norton Avenue, Los Angeles, CA 90018

For venue-specific questions (reward redemption, customer service, etc.):
Please contact the specific participating venue directly. Venue contact information is available through their branded interface.

For California residents: You may also contact us regarding your CCPA rights using the information above.

Categories of Personal Information (CCPA Disclosure)