privacy policy

introduction

welcome to snackr. this privacy policy explains how we collect, use, and protect your information when you use the snackr mobile application ("app"). snackr is developed and operated by Alexander Jandl ("we," "us," or "our"), an individual developer established in the European Union.

we are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

data controller

Alexander Jandl
Established in Slovakia, European Union
Contact: support@snackr.food

information we collect

1. anonymous user identifier

when you first use snackr, we automatically generate a unique anonymous identifier (UUID) to enable core app functionality. this identifier is not linked to your personal identity and cannot be used to identify you personally.

legal basis (GDPR): legitimate interests (Art. 6(1)(f) GDPR) - necessary for app functionality

2. location data

snackr requires access to your device's location to provide restaurant recommendations near you.

• what we collect: your current geographic coordinates (latitude/longitude)
• how we use it: to find nearby restaurants and provide personalized recommendations
• retention: coordinates may be temporarily cached (up to 1 hour) for performance; not stored in database
• legal basis (GDPR): consent (Art. 6(1)(a) GDPR) - you explicitly grant location permission through your device settings

you can revoke location access at any time through your device settings. however, core app functionality requires location access and will not work without it.

3. food preferences (optional)

if you subscribe to snackr+, you may optionally provide:

• dietary preferences: vegetarian, vegan, or other dietary restrictions
• cuisine preferences: your likes and dislikes for different cuisine types
• preferred price range: budget preferences for restaurant recommendations

legal basis (GDPR): consent (Art. 6(1)(a) GDPR) and contract performance (Art. 6(1)(b) GDPR) for subscription features

you are not required to provide dietary preferences. these are entirely optional features available through the subscription.

4. subscription information

if you subscribe to snackr+, we collect:

• subscription status: active/inactive, subscription tier, expiration date
• purchase receipts: processed through Apple App Store or Google Play Store (we do not have access to your payment details)

legal basis (GDPR): contract performance (Art. 6(1)(b) GDPR)

5. usage analytics

we collect limited usage data to improve the app:

• app interactions (swipes, button clicks)
• feature usage
• error logs and crash reports
• device type and OS version (for compatibility)

legal basis (GDPR): legitimate interests (Art. 6(1)(f) GDPR)

this data is anonymized and cannot be linked to your personal identity.

information we do not collect

we do not collect:

• your name
• email address
• phone number
• photos or media
• contacts
• payment card details (handled entirely by Apple and Google)
• browsing history outside the app
• precise location history (we only use current location)

how we use your information

we use collected information for:

1. providing core functionality: finding and recommending nearby restaurants
2. subscription management: tracking subscription status and features
3. app improvement: analyzing usage patterns to improve recommendations
4. technical support: diagnosing and fixing bugs
5. compliance: meeting legal obligations

we do not use your information for:

• advertising or marketing to third parties
• selling your data
• profiling for purposes other than restaurant recommendations
• tracking you across other apps or websites

third-party services

restaurant data providers

we use third-party services to retrieve restaurant information such as names, ratings, addresses, and photos. when you use snackr, your location coordinates may be shared with these services to find nearby restaurants.

• purpose: restaurant search and information retrieval
• data shared: location coordinates

app store (apple & google)

subscription purchases are processed through Apple's App Store (iOS) or Google Play Store (Android). Apple and Google handle all payment processing.

• apple's privacy policy: https://www.apple.com/legal/privacy/
• google play privacy policy: https://policies.google.com/privacy
• data shared: purchase information, subscription status
• we do not have access to: your payment details, credit card numbers

supabase (database hosting)

we use Supabase to store app data securely.

• supabase privacy policy: https://supabase.com/privacy
• location: data stored in EU region
• data stored: anonymous user ID, preferences, subscription status
• security: encrypted in transit and at rest

vercel (api hosting)

our backend API is hosted on Vercel.

• vercel privacy policy: https://vercel.com/legal/privacy-policy
• data processed: API requests, anonymous user IDs
• purpose: app functionality

data retention

international data transfers

we are based in the EU. your data is primarily stored in EU data centers (Supabase EU region). however, some services may involve transfers to:

• United States: third-party data providers, Vercel API hosting

these transfers are protected by:

• standard contractual clauses (SCCs)
• adequate safeguards under GDPR Art. 46

your rights under GDPR

as a user in the EU, you have the following rights:

1. right to access (Art. 15 GDPR)

you can request a copy of all personal data we hold about you.

2. right to rectification (Art. 16 GDPR)

you can correct inaccurate data through the app settings.

3. right to erasure / "right to be forgotten" (Art. 17 GDPR)

you can request deletion of your data by contacting us at support@snackr.food.

note: deleting the app only removes local data from your device. to delete server-side data (anonymous user ID, preferences, etc.), you must contact us directly.

4. right to restriction of processing (Art. 18 GDPR)

you can request we limit how we process your data.

5. right to data portability (Art. 20 GDPR)

you can request your data in a machine-readable format (JSON).

6. right to object (Art. 21 GDPR)

you can object to processing based on legitimate interests.

7. right to withdraw consent

you can withdraw consent at any time for:

• location access (through device settings)
• dietary preferences (contact us to delete)

how to exercise your rights

contact us at: support@snackr.food

we will respond within 30 days as required by GDPR.

data security

we implement appropriate technical and organizational measures to protect your data:

• encryption in transit: all API communications use HTTPS/TLS
• encryption at rest: database encrypted
• access controls: limited access to data
• anonymization: user IDs are anonymous UUIDs
• minimal data collection: we only collect what's necessary

however, no system is 100% secure. if you discover a security vulnerability, please contact us immediately.

children's privacy

snackr is rated for ages 4 and up. we do not knowingly collect personal information from children. our app uses anonymous identifiers and does not require children to provide any personal information. if you are a parent or guardian and have concerns about your child's data, please contact us.

changes to this policy

we may update this privacy policy from time to time. we will notify you of material changes by:

• updating the "last updated" date at the top
• displaying a notice in the app
• for significant changes: requiring re-consent

your continued use of snackr after changes constitutes acceptance.

complaints and supervisory authority

if you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection supervisory authority.

EU supervisory authorities: https://edpb.europa.eu/about-edpb/board/members_en

contact us

if you have questions, concerns, or requests about this privacy policy or your data:

email: support@snackr.food

we will respond within 30 days.

note: this privacy policy is provided in english. if you require a translation, please contact us.