DishCue

A. Information You Provide Directly

• Account information: display name, username, email address, and password when you register.
• Profile content: any profile photo or bio you choose to add.
• Food content: dish names, restaurant names, photos you upload, badge selections, written reviews, and ratings.
• Communications: messages or feedback you send to us.

B. Information Collected Automatically

• Location data: approximate or precise GPS coordinates when you use features that require location (e.g., nearby dish discovery, restaurant tagging). We request permission before accessing location and you may deny or revoke this at any time in your device Settings.
• Device information: device model, operating system version, unique device identifiers, and app version.
• Usage data: features you interact with, screens you view, actions you take (e.g., badges dropped, dishes saved), and crash logs.
• Photos: the App accesses your camera and photo library only when you initiate a photo upload. We do not scan your photo library in the background.

C. Information from Third Parties

• Google Firebase Authentication, Firestore, and Firebase Storage (Google LLC): we use these services to manage accounts, store data, and host photos. Your data is stored on Google’s servers subject to Google’s privacy practices.
• Firebase Cloud Messaging (FCM): we use FCM to deliver push notifications to your device. FCM may receive your device’s push token, which we store in our database to route notifications. You can disable push notifications at any time in iOS Settings.
• Google Analytics for Firebase: we use Firebase Analytics to collect anonymized usage data to understand how users engage with the App and to improve it. This data is not linked to personally identifiable information.
• Google Places API: when you search for a restaurant, your query may be sent to Google’s Places API to return autocomplete results.
• Apple: if you sign in with Apple, we receive a name and email (or relay address) from Apple per their guidelines.

We use the information we collect to:

• Create and manage your account.
• Display your dish reviews, badges, and taste profile to you and, where you have made content public, to other users.
• Power social features: following, follower counts, and the friend activity feed.
• Generate your personalized taste profile and recommendations.
• Improve and debug the App (crash reports, performance monitoring).
• Send you push notifications about activity relevant to your account (e.g., new followers, favorites) — only if you grant permission.
• Respond to your support requests.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your information to serve third-party advertising inside the App.

• With other users: Your display name, username, rank, dishes, badges, and taste profile are visible to other users of the App. Your email address and precise location are never shared with other users.
• With service providers: We share data with Google (Firebase, Places) solely to operate the App as described above. These providers are contractually required to protect your data and may not use it for their own purposes.
• For legal reasons: We may disclose information if required by law, court order, or to protect the rights, property, or safety of DishCue, our users, or the public.
• Business transfers: If DishCue is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you via the App or email before your data becomes subject to a different privacy policy.
• We do not share your personal data with any other third parties without your explicit consent.

We retain your account data and content for as long as your account is active or as needed to provide you the App’s services.

If you delete your account, we will delete your personal information and user-generated content within 30 days, except where we are required to retain it for legal or legitimate business purposes.

Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics purposes.

Depending on where you live, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate information.
• Deletion: Request that we delete your account and associated data. You can initiate deletion from within the App (Profile → Delete Account) or by contacting us.
• Data portability: Request your data in a portable format.
• Opt-out of notifications: Manage or disable push notifications at any time via your device Settings.
• Location permissions: Grant or revoke location access at any time via iOS Settings → DishCue → Location.
• Camera / Photo Library: Grant or revoke access at any time via iOS Settings → DishCue.
• California residents (CCPA): You have the right to know what personal information we collect, to delete it, and to opt out of its sale. We do not sell personal information.
• European / UK residents (GDPR / UK GDPR): Our lawful basis for processing is contract performance and legitimate interests. You may lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at: support@dishcue.app

The App is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us immediately at support@dishcue.app and we will delete it promptly.

We implement industry-standard technical and organizational measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS).
• Firebase Security Rules restricting database and storage access to authenticated users.
• Passwords hashed via Firebase Authentication (we never see your password in plain text).
• No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

The App may display links to third-party websites or services (e.g., restaurant websites). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this policy and, where required by law, by providing additional notice.

Your continued use of the App after any changes constitutes your acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

DishCue
Email: support@dishcue.app

We aim to respond to all privacy-related inquiries within 30 days.