Privacy policy
Last updated October 19, 2026
Mark Menezes operates Mark From Riverside Club under the Mark From Riverside name. This policy covers the Club app, offered to users in the United States, and describes the information it uses and your choices. Contact Mark through support@markfromriverside.com for privacy questions. The separately operated purchase website and external services also provide their own notices.
Information we collect
Account information may include your email address, name, required contact phone number, authentication identifiers, sign-in methods, security factors, and basic account activity. Hosting and security services may process technical request information such as IP address, browser details, timestamps, and errors. Information you choose to add may include a profile photo and saved places, events, card-design preferences, and reminder times. Membership records may include the purchase email when supplied, a purchase reference, purchaser name, status, verification results, membership dates, and the account to which a purchase or complimentary card was assigned.
Saved businesses are linked to your account so favorites sync across devices. Business cards show aggregate favorite and approved-review totals; these totals do not identify who saved a business. Previously saved device favorites are transferred to your signed-in account when available.
Saved events and personal reminders are linked to your account. We store the saved listing, its event dates when available, and the reminder time you choose. Reminders appear in your notification bell and may be sent to devices where you enabled phone alerts. You can cancel reminders or remove saved items from your saved list. Personal reminders are excluded from the admin announcement history.
Your contact phone number is stored with your private account details and can be updated in your account. It is not shown on membership verification pages, business reviews, or wallet passes. Providing it does not enroll you in marketing texts or enable SMS verification.
We keep an operational activity history for security, support, and accountability. It records account and membership changes, admin actions, saved items and reminders, moderation and notification states, and limited app screen/open and error reports. Authorized owners and full administrators can filter this history by account. It contains timestamps, record identifiers, changed field names, and selected non-secret status values; it excludes passwords, access tokens, message or review bodies, raw error contents, and copies of contact-detail values. Audit identifiers and operational records may remain after account deletion, without copied account names or email addresses.
Sources and purposes
A separate restricted account register keeps the account name, email address, account ID, administrator ID, action dates, status, and reason for bans and deletions. Authorized owners and full administrators use it for account safety, support, and accountability, including after an account is deleted. It does not retain passwords, security factors, phone numbers, or personal photos. Contact support to ask about access, correction, or retention of this limited record.
We receive information from you, your chosen sign-in provider, your browser or device, and the membership purchase records used for matching. We use it to create and secure accounts, connect verified purchases, display membership status, provide requested features, prevent misuse, respond to support, and improve the app. Authorized app administrators can view account details and membership purchase records when operating and supporting the app. Manual purchase assignments and complimentary card grants are recorded for accountability.
Service providers
Supabase provides authentication, database services, and private profile-photo storage. Hostinger hosts the app website and processes technical request information to deliver and secure it. Cloudflare Turnstile checks authentication forms for automated abuse. It processes signals such as your IP address, browser and connection information, and the site origin to detect bots and improve its detection capabilities. See Cloudflare’s Turnstile Privacy Addendum. We send the verification token to Supabase with your authentication request. Resend delivers authentication email, and Microsoft provides the support mailbox and sends welcome, deletion-confirmation, and membership-status emails. The website purchase system, HighLevel, supplies purchase information used to verify and match memberships. Apple and Google process information when you choose their available sign-in options. Facebook sign-in is temporarily unavailable; if enabled, Facebook processes information when you choose it. These providers process information to deliver their services.
Optional phone alerts
If you enable phone alerts in the installed app, we store a notification registration token, an installation identifier, device platform, account/session association, delivery preferences, and limited delivery-status information. Apple Push Notification service delivers iPhone alerts; Google Firebase Cloud Messaging delivers Android alerts. These providers process the device token and notification payload to route messages. Phone alerts are optional and do not enable SMS. You can disable delivery in Notification preferences and manage system permission in your phone’s Settings. A reminder may still appear in your in-app bell when phone alerts are disabled.
Club announcement preferences follow your account. Renewal-reminder preferences, the current BOGO display preference, and dismissed local notices are device-specific. Personal event reminders belong to your account and can be changed or canceled from your saved list. Delivery timing depends on connectivity, system settings, and the event information available; reminders are not a guarantee that an event will take place.
Optional wallet cards
When you add a membership card to Apple Wallet or Google Wallet, the pass includes your member name, membership dates, and a random verification identifier. Your chosen wallet provider processes that pass under its own privacy policy. Anyone with the QR link can check current membership status and see your first name and last initial. Keep your card and QR code private. Deleting your account disables that verification link; remove saved passes from your wallet separately. Printed expiration dates reflect the term when issued and may need to be refreshed by adding the card again after renewal.
Location, photos, and external content
When you choose Use my location and grant browser permission, the app uses your current location to show nearby places. It does not continuously track or save that location to your account. Opening a map requests map tiles from OpenStreetMap, which receives technical request information and the map area requested. Instagram posts and videos load in an embedded Instagram player only after you choose to view them. This connects to Instagram inside the app. MFR does not store copies of these Instagram videos on its servers. Opening directions or another external link connects to that provider. These services may receive your IP address and browser information and apply their own storage and privacy practices. Instagram and other external services may collect information about activity over time and across different websites, when you visit those services.
Profile photos use private storage with time-limited access links. Business and editorial photos published by administrators are public. Passkey authentication provides cryptographic proof; the app does not receive your fingerprint or face scan.
Card photo review
If you submit a card photo, we store your face photograph, its associated purchase reference, submission/review status, and review notes in restricted storage. Authorized administrators review photos for suitability; approved photos appear on your signed-in virtual card for you to show participating staff. Pending or rejected photos do not appear on that card. We do not use facial-recognition matching, create biometric face templates, or send these photos to an AI face-analysis service. A photo review does not prove identity.
Approved photos cannot be freely replaced during the same card purchase. A new verified purchase permits a new submission. Submitted images are retained while your account exists unless removed through a supported privacy request; deleting your account removes its stored images. A limited purchase-linked record that a photo allowance was used may remain with separate membership records to prevent deletion and re-registration from bypassing that limit. Contact support for access, correction, deletion, or a photo-related safety concern. Privacy rights are not conditional on buying another card.
Sale, sharing, and advertising
Mark From Riverside Club does not sell personal information and does not use personal information for cross-context behavioral advertising. The current app does not use advertising cookies or third-party analytics cookies.
Browser privacy signals
The app does not change its behavior in response to the older Do Not Track browser signal. We do not operate advertising or sale-of-data tools that a Global Privacy Control signal would need to disable. External websites and verification services have their own practices; loading their content is not necessary to access your card or browse listings. See Cookies and device storage for controls.
Retention and protection
We retain account and membership information only while needed to operate the app, provide support, protect the service, and meet applicable recordkeeping obligations. Access is restricted and information is transmitted over encrypted connections. No system can guarantee absolute security.
Your choices and requests
You can update your name, submit a card photo under the purchase-linked photo rules, remove passkeys, disable authenticator MFA, and clear locally saved preferences. To request access, correction, deletion, or information about our handling of your data, email support@markfromriverside.com from your account address when possible. If you cannot access that address, contact support for another way to verify ownership. We may verify identity before completing a request and will not discriminate for making a privacy request.
California and other U.S. privacy rights
Depending on the law that applies to you and this business, you may have rights to know or access your information, obtain a portable copy, correct or delete it, opt out of covered sales, sharing, targeted advertising or certain profiling, and limit certain uses of sensitive information. Where applicable, an authorized agent may make a request with proof of authority. You can use the support address above to make a request or appeal a decision. We will explain any refusal or legally permitted retention and respond within applicable legal deadlines. You may also contact your state privacy regulator or attorney general. These statements do not limit rights provided by law.
Account deletion
You can permanently delete your account from Account → Delete account and app data. You can also use our public account-deletion page without installing or signing in to the app. This removes authentication identities, profile data, security methods, the profile photo, and account-linked favorites, saved events, and scheduled reminders. Saved places stored only in this browser are cleared on the device used for deletion; clear Mark From Riverside Club site data on any other device to remove its local copy. Separate purchase records, including the order reference, purchaser name, membership status, dates, and a one-way purchase-email hash, are retained for purchase support, recordkeeping, and matching. That hash is a matching identifier, not a guarantee of anonymity. An eligible, unexpired purchase may relink to a newly verified account with the same purchase email; complimentary access is not a purchase and is not guaranteed to return. Deletion does not cancel a separately purchased membership.
Deletion does not erase independent seller records, support correspondence, or provider logs and backups immediately. Those records follow their applicable retention arrangements. Contact support about a broader deletion request.
The purchase-contact email held by the app is cleared for purchase records linked to the deleted account; the separate matching hash remains. This does not erase the seller’s records or the limited account-safety register described above. Operational audit history and that safety register do not currently have a fixed automatic expiry. We review retention requests based on support, security, abuse-prevention, and applicable recordkeeping needs and explain any records that must remain.
We send a welcome email after account verification and a confirmation email after deletion. To deliver these messages, our restricted email queue temporarily stores the destination address. It is cleared after processing or within approximately 24 hours. Delivery-status records are kept for up to 30 days; account references are removed on deletion. Our email providers may retain delivery records under their own retention settings.
Some notification preferences and dismissed notices are stored on your device, while account announcement preferences and saved reminders sync with your account. Changing them does not stop essential verification, password-reset, account, or membership-service emails. See Cookies and device storage for device controls.
Features and bug reports
If you send feedback, we store the report, selected app area, expected behavior, browser/device information, submission time, optional screenshots you attach, and your account ID. Mark and authorized development administrators can see your current account name and email alongside the report and add internal notes. You can view your own reports and their status; other members cannot. Reports and internal notes are removed when your account is deleted or by a daily cleanup after 180 days. Do not include passwords, security codes, payment details, or another person’s private information in a report.
Member reviews, reports, and blocks
We store your account identifier, business identifier, star rating, review text, moderation status, and submission and update times. All signed-in users can read approved reviews, shown as “Club member”; your name and email are not displayed alongside them. Authorized administrators can read pending, approved, and hidden reviews to moderate the service. You can edit or delete your own review. Editing returns it for approval.
A report stores the review, your account identifier, a selected reason, time, and resolution status. Reports are visible to you and authorized moderators, not the reported member. Reports are removed after 180 days by daily cleanup, or earlier when the reporter account or related review is deleted. Do not put private information in review text; contact support for sensitive concerns.
Blocking stores your account identifier, the blocked member’s identifier, and the time. This choice syncs across your signed-in devices and hides that member’s reviews from you until you unblock them. Moderation suspensions store an account identifier and time and remain until lifted or the account is deleted. Reviews and related blocks and suspensions are removed when the associated account is deleted. You can manage blocks in the review section. These features are described in our community rules.
Children
Mark From Riverside Club is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided personal information, contact support so we can investigate and remove it as appropriate.
Changes and contact
The latest revision date appears at the top of this page. We post revisions here. For material changes, we will also provide a prominent in-app notice or email notice, as appropriate, and obtain consent when required before using information in a materially different way. Questions and requests can be sent to support@markfromriverside.com.