Privacy Policy

Version 2026-07-28

This page is maintained by the WhereWeEat team to answer common privacy questions about the app. It describes our own practices and is not an independent certification or audit.

Who is responsible

The WhereWeEat team is the data controller for personal data processed in this app. Contact us at privacy@whereweeat.net.

What we collect

Account data — your email address, and, if you sign in with Google, the name and profile picture Google shares with us.
Content you create — restaurant reviews, ratings, notes, costs and the photos you upload (including receipt photos).
Location — if you allow it, your device location is used in your browser to sort places near you and to centre the map. We do not store it.
Technical data — basic logs needed to run and secure the service.

Why we use it and on what basis

To provide your account and publish your reviews — performance of our terms with you.
To show community review pages and summaries — our legitimate interest in running a useful review app.
To use your device location — your consent, which you can withdraw in your browser or phone settings at any time.
To send optional product emails — your consent, withdrawable at any time.

What is public

Reviews, ratings, notes, uploaded photos and your display name and avatar are visible to anyone using the app. Your email address is never shown publicly. Please do not include personal information in your notes or photos that you do not want to be public.

Who we share it with

Lovable Cloud — hosting, database, authentication and photo storage.
Google — Google Sign-In (if you use it), Google Maps and Places for maps, place lookup and place photos.
AI provider — receipt photos and review text are sent to an AI model to suggest costs and generate place summaries.

We do not sell your personal data.

How long we keep it

We keep your account and content until you delete them or ask us to delete your account. After account deletion, we remove your profile and content within 30 days, except where we must keep something to comply with the law.

Your rights

Under the GDPR you can request access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interests. You may also withdraw consent at any time and complain to your local data protection authority. To exercise a right, email privacy@whereweeat.net from your account email address.

Cookies & local storage

We only use storage that is necessary to keep you signed in and to remember app preferences. We do not run advertising or third-party analytics trackers.