Privacy Policy

Effective date: July 22, 2026

1. Who we are

Local Take (localtake.app) is operated by Open Form LLC, a company based in San Francisco, California ("Open Form," "we," "us," or "our"). This Privacy Policy explains what information we collect when you use Local Take, how we use and share it, and the choices you have. If you have any questions, contact us at [email protected].

By using Local Take, you agree to the collection and use of information as described in this policy.

2. Information we collect

Information you provide

• Chat messages and conversation history. The messages you type to the assistant, along with recent conversation history so the assistant can follow the thread.
• Your preference profile. As you chat, the assistant builds a profile of what you're looking for. This may include your life stage, your budget (monthly rent), the vibe you want, your must-haves, the general area where you work (matched to a coarse neighborhood code — not an exact address), cultures or communities you'd like nearby, whether you own a car, your noise tolerance, and free-text notes the assistant records from your conversation (for example, "we have a dog").
• The city you're exploring.
• Saved neighborhoods (favorites).
• Account information (optional). If you create an account, we collect your name, email address, a unique user ID, and profile photo URL, provided through the sign-in method you choose (Google, Apple, or email and password).

Information collected automatically

• IP address. Our infrastructure provider (Cloudflare) passes your IP address to our server, which we may use for rate limiting and abuse prevention. For guests, the IP address Cloudflare reports is used as the key for a short-lived rate-limiting record.
• No analytics or tracking. Local Take does not use Google Analytics or any other analytics, advertising, or tracking service. We do not set analytics cookies, we do not build advertising profiles, and there is no third-party tracking tag on the site.

3. How we use your information

We may use the information we collect to:

• Generate your recommendations. When you send a message, your message, recent conversation history, your city, and your full preference profile are sent to our server (a Cloudflare edge function) and forwarded to OpenRouter (openrouter.ai), an AI routing service, which routes the request to Google's Gemini model to generate the assistant's response and neighborhood recommendations. This data is used to produce your recommendations — not for advertising.
• Sync your profile across devices. If you're signed in, your preference profile is stored in the cloud (see Section 4) so it follows you between devices.
• Operate and protect the service. We apply per-user and per-IP rate limits to keep the service available and prevent abuse.
• Communicate with you. We may use your email address to respond to your requests or send important service notices.
• Comply with law. We may use or retain information as needed to comply with legal obligations, enforce our terms, and protect our rights, users, and the public.

4. Where your data lives

If you use Local Take as a guest

Your preference profile, saved neighborhoods, and an anonymous message counter are stored only in your browser's local storage — they never leave your device except when sent to generate a response (Section 3). Guests are limited to a set number of messages (currently 10). Clearing your browser data removes this information. Note that your chat messages are still processed by our server and the AI providers described above while generating responses.

If you create an account

Accounts are powered by Firebase (a Google service). Firebase Authentication handles sign-in (Google, Apple, or email/password), and your full preference profile — along with your name, email, user ID, and profile photo URL — is stored in Google's Cloud Firestore database under your user record, so it can sync across your devices.

On our servers

We do not store your chat transcripts on our servers. Conversations are processed to generate responses and held in your browser (and sent as recent history with each request), but we keep no server-side archive of them. Our server does keep minimal rate-limiting records (in a Cloudflare D1 database) keyed to your account ID or, for guests, your IP address.

5. Third-party services

We rely on a small set of service providers to run Local Take. Each processes data on our behalf under its own privacy policy:

• OpenRouter (openrouter.ai) — AI request routing. Receives your chat messages, conversation history, city, and preference profile to generate responses. See the OpenRouter Privacy Policy.
• Google (Gemini) — the AI model that generates recommendations, reached via OpenRouter. See the Google Privacy Policy.
• Google Firebase — authentication and cloud database for accounts. Used only if you choose to sign in. The Firebase SDK is loaded from Google's servers and Firebase Authentication sets its own cookies and stores sign-in tokens in your browser to keep you signed in; Cloud Firestore makes network requests to Google to read and write your profile. These are strictly necessary to provide the account feature you requested — they are not used for analytics or advertising. See Firebase Privacy and Security.
• Cloudflare — hosting, edge functions, and rate-limiting storage. Cloudflare processes your IP address as part of serving the site. See the Cloudflare Privacy Policy.
• OpenFreeMap (tiles.openfreemap.org) — map tiles. Your browser makes standard web requests to load map imagery; we send no personal data with these requests.

6. Cookies and analytics

Local Take uses no analytics and sets no analytics cookies. We do not use Google Analytics or any comparable measurement, advertising, or tracking service, and there are no third-party tracking tags on the site. Because we set no analytics or advertising cookies, we do not show a cookie consent banner.

The only browser storage Local Take uses is strictly necessary to make features you ask for work:

• Local storage. If you use Local Take as a guest, your preference profile, saved neighborhoods, and message counter are kept in your browser's local storage (see Section 4). Clearing your browser data removes them.
• Sign-in cookies and tokens. If you choose to sign in, Firebase Authentication (a Google service) sets its own cookies and stores sign-in tokens in your browser so you stay signed in, and the Firebase SDK makes network requests to Google. This happens only because you asked to sign in; it is not used for measurement or advertising.

For completeness: our Firebase configuration includes a measurementId field, which is part of the standard Firebase config object. Firebase Analytics is never initialized in Local Take — we do not load the Firebase Analytics module and never call getAnalytics() — so that value is inert and no analytics beacon is ever sent.

7. How we share information

We do not sell your personal information, and we do not use your conversations or preference profile for advertising. We may share information:

• With the service providers listed in Section 5, to operate the service;
• To comply with law — for example, in response to a valid legal request;
• To protect rights and safety — ours, our users', or the public's;
• In connection with a business transfer, such as a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information; or
• With your consent or at your direction.

8. Data retention

We retain account information and cloud-stored profiles for as long as your account exists, and we may retain certain information longer where reasonably necessary — for example, for security, dispute resolution, or legal compliance. Guest data stored in your browser remains until you clear it. Rate-limiting records are short-lived operational data. Third-party providers retain data according to their own policies.

9. Your choices and rights

• Use Local Take as a guest. No account is required; guest data stays in your browser.
• Delete your account or data. There is currently no in-app deletion, but you can request deletion of your account and associated data at any time by emailing [email protected]. We'll process verified requests within a reasonable time.
• Access or correct your data. Email us and we'll help.
• Control cookies. See Section 6.

Depending on where you live (including California), you may have additional rights under applicable privacy laws, such as the right to know, delete, or correct personal information. To exercise any of these rights, contact us at [email protected]. We will not discriminate against you for exercising them.

10. Children

Local Take is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

11. Security

We use reasonable technical and organizational measures to protect your information, including transport encryption and access controls provided by our infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the effective date above and post the new version here. Material changes may be highlighted in the app. Your continued use of Local Take after changes take effect means you accept the updated policy.

13. Contact

Open Form LLC
San Francisco, California
[email protected]