Privacy Policy

Effective 13 November 2026

This policy explains what personal data the Foodie Ranking mobile app ("Foodie Ranking", "the app") collects, why, who it is shared with, and the choices and rights you have. We've tried to keep it short and plain.

1. Who we are

Foodie Ranking is operated by Ivemia Labs, the data controller responsible for your personal data. You can reach us at ivemia.labs@gmail.com for any privacy question or request.

2. What we collect

Information you give us

• Account details: your email address, your name and the @username you choose. If you sign up with email and password, we store your password only as a secure one-way hash, never in readable form.
• Google Sign-In: if you sign in with Google, Google shares your name, email address, Google account identifier and profile picture with us. We never see your Google password.
• Sign in with Apple (iPhone): Apple shares an Apple account identifier and an email address with us, which can be a private relay address if you choose "Hide My Email", plus your name the first time you sign in, if you share it. We never see your Apple ID password. We also keep a token from Apple solely so we can end the app's access to your Apple ID when you delete your account.
• Profile photo (optional): an image you choose to upload.
• Content you create: rankings and their descriptions; the places you add, with their name, address, map location and opening hours (public information from Google); your votes and scores; photos you add to a place; friend requests and friendships; ranking invitations and member roles.
• Your "Want to go" list: places you save to try later (name, address, map location and opening hours, public information from Google), the optional note you write on each one, and whether you've been there. To tell you when a saved place has closed, we check its open or closed status with Google Places from time to time, sending only Google's identifier for the place, never anything about you. Ranking places are checked the same way.
• Reports and blocks: when you report a person, place or photo, the reason and any details you add; and the list of people you have blocked.
• Settings: your notification preferences.

Information collected automatically

• Push notification token, app language and time zone: if you allow notifications, your device gives us a token so we can send you alerts (for example, a friend request or a new vote) in your language, along with its time zone so reminders arrive at a sensible local hour and show times in your clock.
• Approximate location (optional): when you search for a place to add, the app can use your device's approximate location, if you've allowed it, so nearby results appear first. It is sent with that search to Google Places and is not stored by us. The app works without it.
• Technical data: like any online service, our servers process your IP address and basic request details to deliver the service and to protect it against abuse (for example, limiting repeated login attempts). We don't store your IP address in your account.
• Share counts: when you open the share options for a ranking's recap or share card, the app tells us only which of the two it was. We add it to a daily total that isn't linked to you, your account or your device, and we don't see what you share or who you share it with.

We do not collect your contacts, precise background location, advertising identifiers, or any payment information.

3. How we use it

• To create and secure your account and sign you in.
• To provide the app's features: rankings, voting, maps, photos, friends and invitations.
• To send the notifications you've enabled, and service emails such as password-reset codes.
• To keep the service safe, prevent abuse, and fix problems.
• To review reports and enforce our Terms of Use, including removing content or accounts that break them.

Our legal bases under the GDPR are: performance of our contract with you (providing the app you signed up for); your consent for optional features controlled by device permissions (notifications, location, photo access), which you can withdraw at any time in your device settings; and our legitimate interest in keeping the service secure.

4. Who can see your information

• Members of a ranking you belong to can see your name, profile photo, the places you add, your votes and the photos you upload to that ranking.
• The owner's friends, if the ranking's owner makes it visible to friends (it's private by default; a public link includes friends too), can open it read-only in the app: its name and description, the places with their scores, number of votes, photos and "what to order" notes, and how many judges it has. They never see who voted what, who wrote a note, or anyone's email or username, and judges' first names appear only if the owner chooses to show them. Every member is told when the owner makes a ranking visible, and can leave it. People you've blocked, or who blocked you, never see it.
• Anyone with a ranking's public link, if the ranking's owner turns one on (it's off by default), can see that ranking's leaderboard without an account: its name and description, the places with their town, scores, number of votes and most recommended dish, and how many judges it has. It never shows emails, usernames, profile photos, place photos, who wrote a note or who voted what. Judges' first names appear only if the owner chooses to show them. The owner can switch the link off at any time, and the page then stops working.
• Your friends can see your name and profile photo.
• Your "Want to go" list and its notes are seen only by you. A place becomes visible to a group only when you add it to one of your rankings, and then it leaves your list.
• Reports are seen only by us. We never tell the reported person who reported them, and blocking someone doesn't notify them.
• Other Foodie Ranking users can find your account by your @username, or open it from your invite link, and see your name, @username and profile photo so they can send you a friend request. They never see your email address, and they can't find you by name unless you're already friends. Someone still using an app version older than 1.3.4 can also find your account by its exact email address, if they already know it.
• Photos (profile and place photos) are served from our storage provider through links that are long and hard to guess. Anyone who obtains such a link could view that image.

5. Service providers

We don't sell or rent your data. We share it only with the providers that run parts of the service for us, under contracts that require them to protect it:

Some of these providers process data outside the European Economic Area, mainly in the United States. Where they do, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.

We may also disclose information if required by law or to protect the rights and safety of our users.

6. How long we keep it

• Your account data is kept for as long as your account exists.
• Password-reset codes expire after 15 minutes.
• A ranking or a spot you delete can be restored for 30 days, then it's removed for good, with its votes and photos. A spot removed by moderation is kept hidden for 90 days in case the decision is appealed, then removed for good.
• Notifications in your Alerts are deleted automatically 90 days after they're sent.
• Places on your "Want to go" list stay until you remove them. When you move a place into a ranking it leaves your list straight away; a hidden copy is kept for 7 days so the move can be undone shortly after, then deleted.
• Each ranking keeps a history of what happened in it (spots added or removed, votes, members joining), shown in its Activity tab, for as long as the ranking exists.
• Reports are kept for as long as needed to review them and keep a record of moderation decisions.
• When you delete your account, we delete your profile, sign-in details, "Want to go" list, friendships, blocks, reports you made or that concern you, push tokens and notifications, and any ranking you own that has no other members. See Delete your account for exactly what is removed and what stays.

Contributions to shared rankings owned by someone else, meaning votes, places added and place photos, remain part of that group's ranking so its results don't change, but they are no longer linked to your account.

7. Your rights

You have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. You can edit your name and photo and delete your account directly in the app; for anything else, email ivemia.labs@gmail.com. We'll reply within 30 days.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the data protection authority where you live.

8. Security

All traffic between the app and our servers is encrypted (HTTPS). Passwords are stored only as hashes, access to data is restricted to what each part of the service needs, and sign-in sessions are revoked when you change or reset your password. No system is perfectly secure, but we work to protect your information.

9. Children

Foodie Ranking is not intended for children under 14, and we don't knowingly collect their data. If you think a child has created an account, contact us and we'll delete it.

10. Changes to this policy

If we change this policy, we'll update the date at the top. For significant changes we'll also let you know in the app before they take effect.

11. Contact

Ivemia Labs · ivemia.labs@gmail.com