Privacy Policy

1. Information We Collect

Information you provide

• Account information: you can browse the App without an account. To save favourites or submit reviews, you need to create an account. If you sign up with an email address, we collect your name, email address, and password. Passwords are handled by our authentication provider (Supabase Auth) and are never stored by us in plain text. If you use Sign in with Apple or Sign in with Google, we receive your name, email address, and a unique account identifier from that provider. Apple may give us a private relay email address in place of your real one.
• Favourite lists: the names of the lists you create and the restaurants you save to them. These are stored on our servers and linked to your account.
• Reviews and ratings: when you review a restaurant, we store your safety rating and your answers about the restaurant, such as whether it caters for gluten-free and coeliac diners, uses separate fryers, has knowledgeable staff, flags allergens, or has a separate gluten-free menu. Reviews are linked to your account.
• Dietary preference: during onboarding you may tell us whether you are coeliac, gluten intolerant, or just curious. This is stored only on your device and is used to tailor the App's welcome experience.
• Search queries: what you type into the search bar. Queries are sent to Google Places to suggest locations. Your recent searches are stored only on your device.
• Restaurant requests and contact messages: the "Request a Restaurant" and "Contact Us" forms open your device's email client with a message addressed to hungryforglutenfree@gmail.com. If you send it, we receive whatever you include in the email, along with your email address.

Information collected automatically

• Precise location data: with your permission, we access your device's GPS location to find nearby gluten-free restaurants, calculate distances, and improve search suggestions. Your coordinates are sent to our backend (Supabase) to look up nearby restaurants and to Google Places to prioritise suggestions near you. Your device's built-in geocoding service (provided by Apple or Google) may also convert coordinates into place names. We do not store your location history. You can disable location access at any time in your device settings, though some features may not work without it.
• Recently viewed restaurants: stored only on your device and automatically cleared over time.
• Usage and analytics data: we use PostHog to collect information about how you use the App, such as the screens you view and the buttons you tap, so we can improve the product. PostHog identifies your device with a random identifier. We do not link this data to your account, name, or email address, and PostHog stores it in the European Union.
• Session recordings: PostHog may also record some of your sessions as replays, which are screenshots of the App's screens as you use it. These help us find confusing screens and bugs. Maps are always hidden in recordings, so your location is never captured. On Android, text is also hidden, although pictures such as restaurant photos may still appear. On iOS, recordings can show what is on screen, so we pause recording on screens where you enter or view personal details, such as signing in, creating an account, your account page, and the contact and request forms. Recordings do not include your network traffic or device logs.
• Crash and diagnostic data: we use PostHog to collect crash reports and error reports so we can find and fix bugs. These may include your device model, OS version, App version, the technical details of the error, and, where a session recording was running, the recording of what led up to it. Like our analytics data, they are not linked to your account.
• Subscription and purchase data: if you buy a premium subscription, RevenueCat processes and stores purchase data such as subscription status and transaction identifiers for us. Your subscription is tied to your app store account and is not linked to your Hungry account. The Apple App Store or Google Play Store handles payment directly, and we never receive or store your payment card details.
• Map and image requests: maps are displayed with Google Maps, and restaurant photos are loaded from Google Places. Your device connects to Google directly for these, so Google receives standard request information such as your IP address.

2. How We Use Your Information

We use the information we collect to:

• Provide the App's core features, including finding nearby gluten-free restaurants, showing maps, and displaying safety ratings;
• Create and manage your account, sign you in, and send account emails such as email confirmation and password resets;
• Save your favourite lists and reviews to your account and sync them across the devices you sign in on;
• Show community ratings built from user reviews;
• Respond to restaurant requests and support inquiries;
• Process and manage premium subscriptions;
• Monitor, maintain, and improve the App, including analysing usage trends and diagnosing crashes;
• Contact you about updates, support, or changes to this policy;
• Comply with legal obligations and enforce our Terms and Conditions.

3. How We Share Your Information

We do not sell your personal information. We share information only with the following third parties, and only to operate the App:

Reviews: your review answers contribute to the community ratings that other users see. We do not show your name or email address alongside them.

We may also disclose information if the law requires it, to protect our legal rights, or as part of a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

4. Data Retention

We keep your account information, favourite lists, and reviews for as long as you have an account. You can delete a review or favourite list in the App at any time. If you delete your account, we delete your account and its associated data, unless we have to keep certain information to meet a legal obligation.

Information stored only on your device, such as your dietary preference, recent searches, and recently viewed restaurants, stays there until you clear the App's data or uninstall it. Our analytics, crash reporting, and subscription providers keep data according to their own retention policies.

5. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict how we process it. In the App, you can:

• Update your name or password from the Account screen;
• Delete your reviews and favourite lists at any time;
• Delete your account from the Account screen, which permanently removes your account and its associated data;
• Withdraw location permission at any time in your device settings;
• Manage or cancel your subscription in your Apple ID or Google Play account settings.

For any other request, including access to the personal information we hold about you, or anything you have sent us through the "Contact Us" or "Request a Restaurant" forms, email hungryforglutenfree@gmail.com. We will respond within the time required by applicable law.

6. Children's Privacy

The App is not directed at children under 13 (or the applicable age of digital consent in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

7. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. These include encrypted transmission, secure authentication, and access controls that restrict each account's favourite lists and reviews to that account, all provided through our infrastructure partner Supabase. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Please use a strong, unique password for your account.

8. International Data Transfers

Your information may be processed and stored outside your country, wherever our service providers (such as Supabase, Google, Apple, RevenueCat, and PostHog) operate their servers. Where applicable law requires it, we take steps to put appropriate safeguards in place for these transfers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" above, and for material changes we will also give notice in the App. If you keep using the App after the changes take effect, you accept the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at: