What we collect

• •Account data: when you sign up: your name, email address, and profile photo (if you use Google sign-in). Stored in Firebase.
• •Usage data: restaurant upvotes/downvotes, check-ins, and submissions you make. Linked to your account.
• •Leaderboard: your display name and profile photo may be shown publicly on the got2eat leaderboard to recognize top contributors. You can opt out at any time in your Profile settings.
• •Onboarding survey: optional: city, student status, age range, cultural background, cuisine preferences. Stored in your user profile in Firebase. Never shared or sold.
• •IP addresses: logged temporarily to enforce rate limits and prevent vote manipulation. Not linked to your account.
• •Device / browser data: we use Vercel Analytics (anonymous page views, no cookies) and Google Analytics to understand how the app is used. Google Analytics sets a cookie and collects standard usage data such as pages viewed, approximate location, and device/browser type. You can opt out of Google Analytics with the Google Analytics opt-out add-on.

What we don't collect

• •We do not sell your data to third parties.
• •We do not use advertising trackers or third-party ad networks.
• •We do not store precise GPS location. Geolocation is used only in-browser to center the map and is never transmitted to our servers.

Third-party services

• •Firebase (Google): authentication and database. Your account data is stored in Firebase Firestore, governed by Google's privacy policy.
• •OpenStreetMap / OpenFreeMap: map tiles are served by OpenFreeMap from OpenStreetMap data. Tile requests come from your device and include the map area you are viewing, but no account or personal data.
• •Geoapify: used server-side for restaurant name and address search when you add a spot or a deal. Only the text you type is sent — never your account details.
• •Nominatim (OpenStreetMap): used server-side to turn coordinates into a neighborhood name. Coordinates are rounded to roughly a 1 km cell before lookup, and results are cached.
• •Google Places API: used server-side to look up restaurant opening hours. Lookups run on a scheduled job against our restaurant list, not in response to your activity. Your personal data is not sent to this API.
• •Google Analytics: used to measure app usage and performance, governed by Google's privacy policy.
• •Vercel: our hosting provider. Handles web traffic and anonymous analytics. See Vercel's privacy policy.

Data retention

Your account and profile data is retained as long as your account exists. You can delete your account and personal data at any time from got2eat.app/delete-account or in the app under Profile → Delete account. You can also email jaison@tangible.trade; we'll remove your account and associated data within 30 days.

Vote logs and IP-based rate limit records are automatically pruned after 90 days.

Your rights

You can request access to, correction of, or deletion of your personal data at any time. Contact us at jaison@tangible.trade.

Changes to this policy

We may update this policy as the app evolves. Material changes will be noted with an updated effective date at the top of this page.