Privacy Policy
CraveBite helps people discover restaurants, remember places they like, and make restaurant choices with friends. This policy explains the information CraveBite processes and the choices available to you.
Information We Process
- Account information: email address, username, display name, account identifier, authentication records, profile photo, and onboarding choices.
- Location: your current coordinates when you choose nearby discovery, or the city or location you select manually. Precise coordinates are used to answer the current request and are not kept as a location history.
- Taste and restaurant activity: restaurant impressions, likes, passes, undo actions, detail opens, directions, visits, ratings, reviews, tags, featured restaurants, your ordered restaurant Rankings, and recommendation signals derived from those choices.
- Group and social activity: friendships, Group Crave invitations and votes, social feed activity, comments, reactions, reports, and blocked accounts. Group votes are stored for the group session and do not train your personal taste profile.
- Contact invitations: if you choose Invite from Contacts, Apple's system contact picker gives CraveBite only the contact name and phone number you select so Messages can prepare an invitation. CraveBite does not request full address-book access, upload your contacts, or store the selected name or phone number.
- Photos and other content: profile photos and restaurant photos you submit. Uploaded photos may be checked for safety before they are approved or displayed. During onboarding, you choose whether future visit-photo uploads may also be considered for CraveBite's public restaurant catalog after review. That choice is recorded with each future upload and can be changed in Profile.
- Diagnostics and analytics: app version, device and operating-system information, pseudonymous app or website session identifiers, feature and waitlist-funnel events, request outcomes, error codes, performance records, and security signals.
- Waitlist and support information: waitlist and emailed support requests can include your name, email address, broad location, referral information, consent records, and what you send us. Signed-in feedback submitted through the app includes only your CraveBite username and message, not your account email or display name; guest feedback is labeled as a guest submission.
How We Use Information
- Operate the app, authenticate accounts, and sync your choices.
- Personalize Discover and create fair Group Crave recommendations using accepted members' preferences.
- Show your selected activity and recommendations to friends, and—when enabled—show your ordered Rankings, average rating, and visit count to signed-in CraveBite users.
- Moderate photos and social content, respond to reports, and enforce safety rules.
- Measure reliability, understand waitlist interest and conversion, improve recommendations, prevent abuse, and control service costs.
- If sponsored restaurant profiles are introduced in a future release, measure their aggregate performance without giving a restaurant access to an individual user's identity or private taste profile. Sponsored profiles and paid placement are disabled in the current release.
- Respond to support, privacy, and beta-access requests.
Service Providers
CraveBite uses service providers to operate the app. These may include Supabase for authentication, database, and storage; Google Cloud for backend hosting; Google Maps Platform for restaurant information and directions; Resend for account and beta-request email delivery; hCaptcha for abuse prevention; and Apple for app distribution and notifications. These providers process information under their own terms and privacy policies as needed to provide their services. When an account action is protected by hCaptcha, hCaptcha may process network, device, browser, timing, and interaction signals—including an IP address and touch or challenge responses—to distinguish people from automated abuse.
Google Maps Platform
Some restaurant information and photos come from Google Maps Platform. Use of Google-provided features and content is subject to the Google Maps/Google Earth Additional Terms and Google Privacy Policy.
Sharing and Advertising
We share information with service providers only as needed to operate, secure, measure, and improve CraveBite, or when required by law. When Rankings sharing is enabled, signed-in CraveBite users can see your ordered restaurants, average rating for each restaurant, and total visit count. Exact visit dates, private notes, and full visit records are not included in Rankings. Rankings are not published as open web pages or intended for search-engine indexing. Restaurants participating in a promotion may receive aggregated campaign results. We do not sell personal information or share it for cross-app tracking.
Retention and Deletion
Account information and user content are kept while your account is active. You can initiate account deletion from Profile in the app. Deletion removes the account and associated personal data from active systems, including reviews and uploaded photos, unless limited retention is required for security, fraud prevention, dispute resolution, or law. Deletion requests are processed immediately when the service is available; residual encrypted backups age out under provider backup schedules.
Your Choices
You may use a manually selected location, deny or revoke device location permission, control notifications in iOS Settings, turn Rankings sharing on or off, change whether future visit-photo uploads may be considered for restaurant profiles, manage social visibility through friendship and blocking tools, remove uploads, and delete your account in the app. Changing the future-photo setting does not by itself remove an upload that already recorded your permission; delete that visit photo or use Data Choices to request removal. Data Choices also explains access, correction, export, and deletion requests.
Security
We use HTTPS, access controls, restricted server credentials, rate limits, and other safeguards designed to protect information. No storage or transmission method can guarantee absolute security.
Children
CraveBite is not directed to children under 13. Contact us if you believe a child has provided personal information.
Changes
We may update this policy as CraveBite changes. The current version and effective date will remain available here.
Contact
Privacy questions: privacy@cravebite.app
General support: support@cravebite.app