DropBag privacy policy

Effective October 2, 2026. DropBag is operated by LBHR LLC. Contact dropbagceo@gmail.com about privacy or your data.

Your tracker

We store a private account identifier, optional display name, preferences, your reported cash positions, casino visits, games, wins, losses, plans, and session history so the tracker works across sessions. A private credential identifies your account. In the iPhone app that credential is kept in the iPhone Keychain. A copy of your ledger and unsynced entries is saved on your device for offline use.

Voice and AI

The iPhone app uses Apple speech recognition. It uses on-device recognition when supported; Apple speech services may process audio online when on-device recognition is unavailable. The app listens only during a voice recording that you start and stops when you finish or leave the app. DropBag does not save raw microphone audio.

The iPhone app asks permission before sending messages, recent conversation, and tracker context to OpenAI for AI replies. You can turn AI replies off in Your profile. Basic commands and local tracking still work. The browser version’s live AI voice sends audio and conversation context to OpenAI when you connect its voice feature. Conversation text is held on the current screen; money entries you confirm are stored in your ledger. OpenAI and Apple handle requests under their applicable service and privacy terms.

Payments and the bag store

Stripe processes payments and stores billing information. For web passes, DropBag stores the purchase email, transaction identifiers, payment status, and access dates. For subscriptions it stores customer/subscription identifiers and selected price; it does not store your card details. When you add app access to a bag order, the store verifies the order using a private access token. The app stores the order and payment identifiers, payment status, and access dates to provide the purchased access. It does not copy the bag shipping address or card details into your tracker. The physical DropBag store has its own checkout and privacy practices.

Referrals

If you join the referral program, we store your name, contact email, code, attributed order identifiers, commissions and payment references. Hashed customer email identifiers help detect duplicate app rewards and self-referrals. Bag referrals use a 30-day cookie at the bag store. Verifying the bag-owner subscription rate uses your private order key and order email; the key is not saved in your tracker. Your casino ledger is never shared with ambassadors. Commission and payment records may be retained for accounting after account deletion; your ambassador name is removed and the account is closed. See our referral terms.

Circle

Your full ledger is private. Circle receives only session summaries you choose to share, your display name, notes, comments, and reactions. Circle members can report content and block people. Reports include the reported shared content and are available to the DropBag operator for safety review. Reports are removed after 90 days when the review inbox is opened, or sooner when an involved account is deleted. Text filters restrict abusive, explicit, threatening, and promotional material.

Service providers and security

The app uses OpenAI for requested AI replies, Stripe for billing, and OpenAI Sites and Cloudflare for hosting and database operations. Network requests and technical errors may generate security and diagnostic logs. We use private credentials, encrypted network connections, access checks, and request limits. We do not sell your ledger, use advertising identifiers, or track you across unrelated apps and websites.

Retention and deletion

Your ledger remains until you clear it or delete your account. Account deletion removes your purchase email and disables old purchase access. Transaction identifiers and payment event records may remain for payment reconciliation, dispute handling, and legal recordkeeping. You can export records in Your profile. Delete my account removes your stored ledger, access credentials, shared content, circle memberships, and circles you own, and cancels an existing DropBag Stripe subscription before removing the account. Your current device’s cached ledger is then removed. Exported files and copies on other devices must be removed separately. Stripe may retain financial records for its legal obligations. Operational backups and service-provider logs may remain under their retention policies.

Your choices

Use typed commands, revoke microphone or speech access in iPhone Settings, turn AI replies off, leave Circle, export records, clear your ledger, or delete your account. Contact us for access or deletion help. The app is intended for adults 21 and older.