Foodie RankPrivacy Policy
This policy explains what personal data the Foodie Rank mobile app ("Foodie Rank", "the app") collects, why, who it is shared with, and the choices and rights you have. We've tried to keep it short and plain.
In short: we collect only what the app needs to work. That means your account, the rankings, votes and photos you create, and the technical details needed to send you notifications. We don't show ads, don't use analytics or tracking tools, and never sell your data. You can delete your account at any time from inside the app.
1. Who we are
Foodie Rank is operated by Ivemia Labs, the data controller responsible for your personal data. You can reach us at ivemia.labs@gmail.com for any privacy question or request.
2. What we collect
Information you give us
- Account details: your email address and name. If you sign up with email and password, we store your password only as a secure one-way hash, never in readable form.
- Google Sign-In: if you sign in with Google, Google shares your name, email address, Google account identifier and profile picture with us. We never see your Google password.
- Profile photo (optional): an image you choose to upload.
- Content you create: rankings and their descriptions; the places you add, with their name, address, map location and opening hours (public information from Google); your votes and scores; photos you add to a place; friend requests and friendships; ranking invitations and member roles.
- Settings: your notification preferences.
Information collected automatically
- Push notification token and app language: if you allow notifications, your device gives us a token so we can send you alerts (for example, a friend request or a new vote) in your language.
- Approximate location (optional): when you search for a place to add, the app can use your device's approximate location, if you've allowed it, so nearby results appear first. It is sent with that search to Google Places and is not stored by us. The app works without it.
- Technical data: like any online service, our servers process your IP address and basic request details to deliver the service and to protect it against abuse (for example, limiting repeated login attempts). We don't store your IP address in your account.
We do not collect your contacts, precise background location, advertising identifiers, or any payment information.
3. How we use it
- To create and secure your account and sign you in.
- To provide the app's features: rankings, voting, maps, photos, friends and invitations.
- To send the notifications you've enabled, and service emails such as password-reset codes.
- To keep the service safe, prevent abuse, and fix problems.
Our legal bases under the GDPR are: performance of our contract with you (providing the app you signed up for); your consent for optional features controlled by device permissions (notifications, location, photo access), which you can withdraw at any time in your device settings; and our legitimate interest in keeping the service secure.
4. Who can see your information
- Members of a ranking you belong to can see your name, profile photo, the places you add, your votes and the photos you upload to that ranking.
- Your friends can see your name and profile photo.
- Someone who already knows your exact email address can find your account (name and photo) to send you a friend request. Your account isn't listed or searchable by name for people who aren't your friends.
- Photos (profile and place photos) are served from our storage provider through links that are long and hard to guess. Anyone who obtains such a link could view that image.
5. Service providers
We don't sell or rent your data. We share it only with the providers that run parts of the service for us, under contracts that require them to protect it:
| Provider | Purpose |
|---|---|
| MongoDB Atlas (MongoDB, Inc.) | Database hosting |
| Railway (Railway Corp.) | Server hosting |
| Amazon Web Services | Photo storage (S3) and service emails (SES) |
| Google Sign-In, maps, and place search (Google Places) | |
| Expo, with Apple Push Notification service and Firebase Cloud Messaging | Delivering push notifications |
Some of these providers process data outside the European Economic Area, mainly in the United States. Where they do, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.
We may also disclose information if required by law or to protect the rights and safety of our users.
6. How long we keep it
- Your account data is kept for as long as your account exists.
- Password-reset codes expire after 15 minutes.
- When you delete your account, we delete your profile, sign-in details, friendships, push tokens and notifications, and any ranking you own that has no other members. See Delete your account for exactly what is removed and what stays.
Contributions to shared rankings owned by someone else, meaning votes, places added and place photos, remain part of that group's ranking so its results don't change, but they are no longer linked to your account.
7. Your rights
You have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. You can edit your name and photo and delete your account directly in the app; for anything else, email ivemia.labs@gmail.com. We'll reply within 30 days.
If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the data protection authority where you live.
8. Security
All traffic between the app and our servers is encrypted (HTTPS). Passwords are stored only as hashes, access to data is restricted to what each part of the service needs, and sign-in sessions are revoked when you change or reset your password. No system is perfectly secure, but we work to protect your information.
9. Children
Foodie Rank is not intended for children under 14, and we don't knowingly collect their data. If you think a child has created an account, contact us and we'll delete it.
10. Changes to this policy
If we change this policy, we'll update the date at the top. For significant changes we'll also let you know in the app before they take effect.
11. Contact
Ivemia Labs · ivemia.labs@gmail.com