Privacy Policy
THE 92118 COLLECTIVE
Effective date: October 20, 2026 Last updated: October 20, 2026
How the Collective handles the information that makes local life more connected.
This Privacy Policy explains how The 92118 Collective (“Collective,” “we,” “us,” or “our”) collects, uses, discloses, protects, and retains personal information in connection with our website, mobile app, business dashboard, The Key, QR or tap check-ins, Unlocks, Cora AI concierge, event RSVPs, gigs, community features, alerts, subscriptions, and communications (collectively, the “Services”).
The Collective is operated by 92118 Essentials LLC, 1111 6th Street, Suite 550, San Diego, CA 92101. Questions and privacy requests: privacy@92118collective.com.
Participating businesses have limited, read-only access to records of check-ins at their own businesses, as described in Section 3. Email addresses, phone numbers, SMS consents, and residential addresses are not part of that roster. Other user-directed activities (including an RSVP or a direct application) may involve separately disclosed sharing.
Personal information means information that identifies, relates to, describes, or could reasonably be linked to a person or household. We collect different information depending on which Services you use.
We collect information you give us when registering or maintaining an account, such as first and last name, email address, mobile number if provided, password or other authentication credentials, account type, optional profile photo, account preferences, and relevant membership or account status. We may store your preferences concerning marketing and account/activity email and SMS.
Residents may supply a Coronado address and, when reasonably necessary, proof of residency or eligibility information. Residency-verification documents are used to determine eligibility and are not displayed to participating businesses through the check-in roster. We seek to limit the collection and retention of verification documents and do not collect precise device GPS location simply because a person checks in.
We collect the business or location at which a check-in is recorded; the time and date of the check-in; the user account associated with it; participation, referral, and Key progress; eligibility level; Resident/Visitor status; Unlock redemptions; and information necessary to verify and prevent duplicate or fraudulent activity. The date of a check-in may be retained internally even where it is not displayed as a separate field in the business roster.
We collect information you provide when you submit or RSVP to events, send inquiries, apply for gigs, upload community content, add photos, post comments, submit business information, report issues, complete surveys, use support chat, or otherwise communicate with us. These submissions may include names and contact details for organizers or applicants when needed for their requested activities.
We process questions, prompts, conversation history, account preferences, and relevant context that you choose to provide or that is needed to answer your questions about the Services. Please do not provide passwords, payment-card numbers, health records, government identifiers, or other unnecessary sensitive information in conversations.
For participating businesses, we may process business name, address, descriptions, hours, contact and billing information, owner or representative details, account authority verification, logos, photos, profile edits, listed offers, events, gig postings, business communications, and subscription information.
We and payment service providers process subscription status, purchases, plan and billing information, amounts, dates, transaction references, refunds, and related accounting records. Payment processing may be performed by Stripe or another disclosed payment processor. We do not need to store full payment-card numbers in the Collective’s own application databases for normal payment processing.
Depending on the website, app, device settings, and provider configuration, we collect IP address, approximate location inferred from IP, device or browser type, operating system, cookie or device identifiers, website and app interactions, time and date stamps, error logs, authentication events, security diagnostics, and analytics information. Any collection of precise GPS, contact lists, photos, or other protected device resources requires an applicable in-app request and disclosure where used.
We may obtain business and event details from participating organizations, public calendars, approved listings, public sources, connected accounts authorized by users, and service providers engaged to host, secure, measure, or operate the Services. We do not use third-party advertising lists to enrich identifiable check-in profiles for targeted advertising.
We use personal information to: register and manage accounts and verify residency; provide The Key, check-ins, levels, Unlocks, and redemptions; display eligible business roster information for operational verification; provide Cora and relevant local information; operate events, RSVPs, gigs, and communications selected by the user; administer business subscriptions, payments, and billing; manage user-submitted content, listings, and support; send optional marketing and activity messages according to independent preferences; send essential security and transactional messages; generate operational and aggregate community/business metrics; detect fraud, protect accounts, maintain security, debug, improve Services, and comply with law.
We do not treat an ordinary check-in as consent for an individual business to add the person to a marketing database or send the person independent promotional messages.
When you check in at a participating business, authorized personnel of that specific business may view your first name, last name, Key level, Resident/Visitor status, and confirmation that you checked in. This is a limited operational display for check-in verification, administration of Unlocks and loyalty benefits, prevention of misuse, and internal reporting.
The check-in roster is read-only. Businesses are not provided with a roster export, CSV download, CRM synchronization, or marketing-list integration. Email addresses, telephone numbers, residential addresses, residency proof, Cora conversations, and email/SMS permissions are not visible through the roster.
The Collective's Business Terms prohibit staff from photographing, copying, scraping, transcribing, combining, or otherwise extracting the identifiable roster for their own customer databases, advertising audience matching, resale, independent marketing, or unauthorized onward disclosure. Technical controls cannot prevent every unauthorized manual act, but we restrict authorized access and may suspend businesses for reported misuse.
Our Terms describe check-in information sharing as follows:
“When you check in, this business can view your name, Key level, and Resident/Visitor status to manage check-ins and benefits. Your email and phone number remain private. By confirming your check-in, you agree to this limited sharing.”
To exercise a privacy choice or raise a concern about a business viewing or misusing check-in information, please contact privacy@92118collective.com.
Different information may be needed when you register for a particular event, RSVP, apply for a gig, contact a business, submit a listing, or request a reservation. The recipient and categories of information to be provided should be identified in that interaction, with permission obtained when required. This is separate from the restricted business check-in roster.
A business, event organizer, or service provider that receives information you provide directly may act as a separate controller of its own interactions and information, subject to its privacy policy and applicable law. The Collective cannot control information you independently disclose outside the Platform.
Publicly submitted material—such as business listings, events, public gigs, photos, and community posts—may be visible to visitors, indexed by search engines, or reshared by others depending on the feature's visibility settings. Avoid including private personal information in public posts.
The Collective offers separate optional Marketing SMS and Account & Activity SMS preferences. Neither option is preselected, required for membership, or a condition of purchasing goods or services. Marketing SMS covers messages from the Collective about local events, news, Unlocks, and offers at participating businesses. Account & Activity SMS covers non-marketing updates about accounts, memberships, RSVPs, check-ins, and Unlock activity. Optional email preferences are separately controlled.
Mobile opt-in data and SMS consent collected by The 92118 Collective will not be sold or shared with third parties or affiliates for their independent marketing or promotional purposes. We do not give participating businesses subscribers' mobile numbers or Collective SMS-consent records through the check-in dashboard or a business marketing export. Contracted messaging providers may process mobile information and consent records solely to deliver communications for us under applicable contractual protections.
Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for assistance. We honor applicable opt-outs, suppression records, and other reasonable legally valid methods of revocation. Where messages use a shared sending number, an opt-out may suppress more than one message category as required by law or provider rules. The Collective's SMS consent does not authorize an independent business to send text marketing.
The Collective may offer two separately selectable, optional email categories: Marketing Email (including Collective updates, events, Unlocks, and participating-business offers) and Account & Activity Email (non-marketing updates relating to RSVPs, check-ins, and participation). Users may unsubscribe from these optional categories without losing access to the Platform.
We may still send strictly necessary account communications, such as verification, password resets, security, billing, receipts, and required policy or renewal notices. Marketing emails include an appropriate unsubscribe process and legally required sender details. Offers featured in Collective emails are sent by the Collective, not independently by businesses through member contact lists.
Cora helps answer community questions using your submitted requests, relevant account and participation context where available, approved Collective content, public sources, and AI models or related infrastructure operated by contracted providers, which may include OpenAI.
Providers may receive prompts and context necessary to generate responses or deliver this feature. We seek to limit such disclosures to necessary information and require appropriate privacy and security protections. We may review relevant conversation data for support, reliability, safety, abuse prevention, and Service improvement under access restrictions.
Cora messages and conversation history are not displayed to participating businesses through their check-in rosters or identifiable business analytics. Cora responses may be inaccurate; verify material decisions and time-sensitive information independently. Do not submit information you would not want processed for this service.
Depending on the feature, we may disclose personal information to:
Contracted vendors may include Stripe for payments, AI service providers for Cora, cloud and authentication providers, operational analytics and performance tools, and email/SMS delivery providers. Such providers are engaged to perform services under appropriate restrictions on their use of information.
Businesses do not receive independent email/SMS marketing permissions simply because a member uses the Platform. We require recipients to protect information with safeguards consistent with this Policy and applicable app-store obligations.
We do not sell personal information to data brokers or transfer identifiable check-in rosters to businesses for marketing. We do not sell or “share” personal information for cross-context behavioral advertising as those terms are defined by California privacy law. We do not combine personal data collected through the app with other companies’ information for cross-company targeted advertising or advertising measurement.
If we change our practices to involve covered advertising sharing or cross-company tracking, we will first provide appropriate notices and choices, honor applicable opt-outs, and request Apple's App Tracking Transparency permission where required.
Where legally applicable, users may submit a request to opt out of sale or sharing via privacy@92118collective.com, even if our verified practices do not currently involve such activity. If cross-context advertising sharing is ever enabled, we will provide the required consumer-facing choices and honor recognized opt-out signals.
We and providers may use cookies, software-development kits, pixels, and similar technologies to operate login sessions, store preferences, secure accounts, monitor uptime, diagnose errors, and understand site or app use. The technologies actually deployed must be identified and configured according to their functions, privacy settings, and legal requirements.
Browser cookie controls and any in-site privacy controls may allow you to restrict nonessential technologies. Blocking necessary technologies may interfere with account access or check-ins. We honor Global Privacy Control or other legally recognized opt-out signals when required and applicable. A browser “Do Not Track” setting is not necessarily equivalent to a legally recognized opt-out.
We retain information only for reasonably necessary periods, taking into account the category, Service purpose, security, disputes, legal obligations, system backups, and requests to delete:
A verified account deletion request triggers a deletion workflow, but certain records may be retained where necessary to complete transactions, comply with law, prevent fraud, preserve security, resolve disputes, or exercise legal rights. Deidentified statistics may be kept longer under safeguards against reidentification. We can explain the applicable retention criteria upon request.
We implement administrative, physical, and technical safeguards designed to reduce unauthorized access, disclosure, and misuse, including appropriate staff and business access restrictions, authentication controls, service-provider protections, and monitoring. Security measures vary by data type and risk. No website or app is perfectly secure. Please protect your credentials and tell us promptly if you suspect unauthorized access.
You may review and update your profile where the Platform offers those controls. You may choose independently whether to receive optional Marketing Email, Account & Activity Email, Marketing SMS, and Account & Activity SMS. Optional preferences are initially unchecked and may be withdrawn without losing ordinary account access.
Use the unsubscribe mechanism in marketing email; reply STOP to SMS where supported; adjust other optional settings in your account where available; or contact privacy@92118collective.com. We do not use a separate account/activity preference to bypass an SMS opt-out.
You may request correction, access, or deletion of personal information and removal of public content, subject to lawful exceptions, by contacting privacy@92118collective.com. Where account creation is available in our mobile app, you can initiate an account-deletion request within the app. You may also contact privacy@92118collective.com for assistance. We may verify that the request comes from the account owner and will explain what is retained when necessary. Withdrawal of consent ordinarily stops future use; it cannot undo a disclosure already lawfully completed or a public repost made independently by another person.
You may disable device permissions for push notifications or precise location through device settings if those features are requested. You can manage browser cookies using browser settings and applicable site tools.
California law, including the California Consumer Privacy Act as amended, may grant eligible California residents rights depending on the Collective's legal obligations and the information involved. Where applicable, these may include the rights to know and access categories and specific pieces of information; obtain information about sources, uses, and disclosures; request deletion; request correction; opt out of sale or sharing for cross-context behavioral advertising; limit certain uses of sensitive personal information; and avoid discrimination or retaliation for exercising privacy rights.
You may submit a request to privacy@92118collective.com with sufficient details for us to identify the relevant account or information. We may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request on your behalf, subject to required verification and authority documentation. We will respond within legally required timelines and explain any applicable exception. You may contact California privacy regulators regarding privacy concerns.
We collect categories described in Section 1 from users, interactions, the Service, authorized connected sources, public records, and contracted providers; use them for purposes in Sections 2, 5–7, and 10; and disclose them to the categories of recipients described in Sections 3, 4, and 8. We do not knowingly sell or share children's personal information for cross-context behavioral advertising. This Policy does not represent that all possible privacy rights or notice obligations apply regardless of statutory scope.
The Services are not intended for children under 16, and people under 16 should not create accounts or submit personal information. We do not knowingly collect personal information from children under 16. If we learn that an under-16 person has registered or submitted personal information, we will take reasonable steps to delete it, subject to applicable law. Users aged 16 or 17 must have parental or guardian authorization where required, and certain activities may be restricted by age.
Parents and guardians with concerns may contact privacy@92118collective.com. Event or childcare listings do not indicate that the Collective conducts background checks on third parties.
Independent businesses, venue owners, event organizers, calendars, maps, social networks, and payment platforms may have their own privacy policies. A person who voluntarily provides information directly to a third party should review that recipient's notice.
The Collective may provide businesses with aggregate or deidentified trends about check-ins, levels, engagement, and Unlocks. We seek to prevent small-group reidentification and prohibit businesses from attempting to identify persons from deidentified reports. Aggregated insights are separate from the read-only identifiable check-in roster.
The Key and other membership benefits reward eligible participation; they are not offered in exchange for consent to marketing texts, marketing emails, or targeted advertising. Users who decline optional communication choices may still participate in eligible ordinary benefits. If we introduce a program that legally qualifies as a financial incentive for personal information, we will provide any specific required notice and choice.
The Services are operated from the United States and primarily intended for the Coronado community. If you access the Services from another jurisdiction, your information may be processed in the United States and elsewhere where our appropriately engaged providers operate, subject to applicable safeguards and rights.
We may update this Policy as law, technology, or the Services change. We will update the revision date and provide further notice or obtain permission where required by law, particularly before new uses of information incompatible with a prior consent. Revisions do not retroactively authorize unauthorized business marketing or Apple-defined tracking.
92118 Essentials LLC
Doing business as The 92118 Collective
1111 6th Street, Suite 550
San Diego, CA 92101
Privacy: privacy@92118collective.com
General support: hello@92118collective.com
Website: https://92118collective.com
For privacy questions, suspected business misuse of check-in details, data requests, deletion requests, or concerns about the handling of SMS consent, contact us using the addresses above.