Privacy policy

What we collect

Your account. Your email address, the name and username you choose, and a profile photo if you add one. If you sign in with Google, we receive your name, email and Google profile picture from Google.

What you add. Meals, photos, dishes, ratings, notes, the restaurants you’ve been to or want to try, lists, groups, friends, people you tag, recommendations, events and feedback.

Where and when a photo was taken. When your phone records it, we read the time and location from a photo to suggest the restaurant and date. The location is kept with the photo for your own map and sorting. Other people never see a photo’s location; the map shows the restaurant’s address instead. Everything else stored in the photo file (camera details and other metadata) is removed when it’s uploaded.

Your hometown, if you add one, so Community can show what people near you like. It’s the place you type, not your live location; we never track where you are.

Receipts, if you use Split the check. The receipt photo is read automatically to list the items. The photo is deleted 7 days after a split is finalized, after 30 days if a draft sits untouched, or straight away if you cancel. The itemized bill stays with the split.

Technical basics. A sign-in cookie that keeps you signed in, your IP address for a short time to stop abuse (like too many sign-in attempts), the date you were last active, roughly how long you used the app each day (two counters — time and scrolling — never which pages or what you looked at), and error reports when something breaks. When someone acts on a recommendation (for example, saves a place after seeing it), we keep a record for 30 days to count how useful recommendations are.

Who can see what

You choose, for each meal and photo: only you, your friends, groups you share with, or everyone on MunchMiles. Your default is in Settings.

• Ratings are seen by your friends at most, never the public.
• A friend can only see what you’ve shared with friends after you both accept the friendship.
• If you share a list with a link, anyone with the link sees that list’s places and notes, and nothing else of yours.
• If you tag friends in a meal, they’re asked before it appears on their map.
• Blocking someone hides your content from each other.
• A server’s recommendation you share shows their first name only if you confirm they agreed to it, and it’s checked before it appears.

The app’s owner can see what’s needed to run it safely, for example reported content and recommendations waiting for approval.

Who we share data with

We don’t sell your data, and there are no ads. We use these services to run the app, and each only gets what its job needs:

• Railway hosts the app, its database and your photos.
• Google handles Google sign-in, and restaurant and address search (it receives what you type into search).
• Amazon Web Services reads receipt photos for Split the check.
• Resend sends our emails (sign-in links, invites, friend requests).
• Sentry receives error reports so we can fix problems.
• OpenFreeMap serves the map images your browser loads, so it sees your IP address.

We’d also share information if the law requires it, or to protect people’s safety.

Emails

We email sign-in links when you ask for one, and invitations when someone invites you. We also tell you about friend requests, which you can turn off in Settings. No marketing email.

Your choices, and deleting your account

• Change who sees any meal or photo at any time, in My photos or on the meal itself.
• Delete any meal, photo or rating.
• Delete your account in Settings. That permanently removes your meals, photos, ratings, friendships, lists and recommendations. A group you own passes to another member so they don’t lose it. Restaurants you added stay for others, without your name. Copies in our database backups are overwritten as the backups roll over.

To ask what we hold about you, or for anything else about your data, send us a message through Feedback.

If you’re in the UK or EU

You have extra rights under the UK and EU GDPR. You can ask to see the personal data we hold about you, correct it, get a copy of it, have it deleted, or object to how we use it. Send the request through Feedback and we’ll answer within a month.

We use your data to provide the service you signed up for, and, for things like stopping abuse and fixing errors, because we have a legitimate interest in keeping MunchMiles safe and working. Our service providers are in the United States. If you’re unhappy with how we handle your data, you can complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

Children

MunchMiles isn’t for children under 13, and we don’t knowingly collect their information. If you think a child has an account, tell us and we’ll delete it.

Changes

If we change this policy, we’ll update the date at the top. For a change that matters to how your data is used, we’ll tell you in the app first.

See also our Terms of use.