Privacy Policy

1. Information We Collect

Information you provide:

• Account information: name, username, email address, phone number, and password.
• Profile information: bio, avatar, social links, dietary preferences, taste preferences, and selected city or metro.
• Content you create: posts, comments, restaurant reviews, lists, photos, videos, polls, recommendation requests, and user-submitted restaurant media.
• Social activity: follows, likes, saves, plan invites and RSVPs, Foodmate-related taste signals, and business subscriptions.
• Personal visit and booking notes you save in the app.
• Messages you send to other users, including group messages and shared restaurant, post, and list references.
• Messages you send to our Flavi AI assistant and to our support team.
• Business account information, if you create, claim, or manage a restaurant or venue on Flavr: business name, category, address, contact details, hours, menu items, photos, videos, fulfillment options (pickup, delivery, dine-in), verification documents you submit, and related business profile content.

2. Information Collected Automatically

• Precise location (foreground): when you grant permission, Flavr uses your device GPS while the app is in use to show restaurants and recommendations near you, determine your current city or metro, calculate distances, and personalize Discover, maps, and location-based features. You can also browse by manually selecting a city without granting location access.
• Location storage and processing: if you use GPS-based features, your coordinates and a human-readable location label may be saved to your Flavr profile on our servers to keep your preferences across sessions. Coordinates may also be sent to our geocoding and mapping service providers (such as Google and Mapbox, through our secure proxy) to reverse-geocode your position, power address search, and support map features.
• Location (background, optional, iOS only): if you separately grant background location permission on iOS, Flavr may use geofencing to send local proximity alerts when you are near a restaurant on your saved Want To or My Spots lists. This permission is optional, requires a separate in-app opt-in, and can be denied or revoked at any time in your device settings. The Android app currently requests foreground location only.
• Contacts (optional): if you choose to invite friends, Flavr may access your device contacts so you can select people to invite. We do not upload your full address book to our servers unless you explicitly choose contacts to invite.
• Usage analytics: the screens you view and actions you take in the app (for example opening a restaurant or saving a list), linked to your Flavr account ID so we can understand how the app is used and improve it. We do not send your name, email, phone number, or message content to our analytics provider, and IP addresses are discarded rather than stored.
• Diagnostics: crash reports and performance data (device model, OS and app version, error details), linked to your Flavr account ID so we can fix problems. Personal details are scrubbed before reports are sent.
• Identifiers used to deliver push notifications.
• Subscription and purchase status for Flavr+ (processed via the app stores and our subscription provider).
• App version and platform information used for support, security, and mandatory update checks.

3. Information From Third Parties

• Restaurant listings, photos, hours, ratings, and related venue data from third-party mapping and listings providers.
• Subscription and entitlement information from the app stores and our subscription provider.
• Business-provided listing information submitted by restaurant owners or authorized representatives who create, claim, or update venue pages on Flavr.

4. How We Use Information

Flavi AI and other AI features (restaurant summaries and importing places from links you share) are powered by third-party AI providers, currently OpenAI and Anthropic. When you use them, we send the request you write, relevant taste and dietary preferences, your approximate location context, and the restaurant data needed to answer. We ask for your consent in the app before Flavi is used for the first time. These providers process the data through their business APIs to return a response; under their API terms, this data is not used to train their models. Do not share sensitive personal information in AI chats.

If you choose to translate a post, review, or comment, that text is sent to Google Cloud Translation to produce the translation.

• Provide, operate, personalize, and improve the Service across all supported cities and metros.
• Display your content to other users on feeds, profiles, plans, and restaurant pages.
• Deliver direct messages and group messages between users, including notifications for new messages.
• Power Flavi AI suggestions, Foodmate taste matching, leaderboards, and AI-generated restaurant lists. Flavi may use your active location context (when available) with service providers to calculate proximity and travel times.
• Process Flavr+ subscriptions and personal booking notes you save in the app.
• Operate business profiles: publish venue information, verification status, business posts, and subscriber notifications.
• Send notifications and service communications, including plan invites, RSVP updates, proximity alerts, and business updates you subscribe to.
• Maintain safety, run moderation, prevent fraud and abuse (including false business claims), and enforce our Terms.
• Comply with legal obligations in the jurisdictions where we operate.

5. Your Content and the License You Grant

You retain ownership of the content you upload. Flavr does not claim copyright ownership of your photos, videos, posts, comments, reviews, lists, or user-submitted restaurant media.

When you post content, you grant Flavr a non-exclusive, worldwide, royalty-free, perpetual, irrevocable, transferable, and sublicensable license to host, store, cache, use, reproduce, modify (for formatting and display), adapt, publish, translate, publicly display, and distribute that content in connection with operating, providing, and promoting the Service. This lets us show your posts in feeds, your reviews on restaurant pages, and feature content in promotion. Full terms are in our Terms of Service.

If you manage a business profile, the same license applies to business photos, menu content, and other materials you upload for that venue.

6. How We Share Information

• Public content: posts, comments, reviews, publicly shared media, follows, likes, public lists, and business profile information are visible to other users.
• Direct and group messages: message content and shared attachments are visible only to the participants of a given conversation, protected by industry-standard access controls and encryption in transit. We do not use message content for advertising.
• Plan invites and RSVPs: invite details and your response status are shared with the plan host and other invited participants as needed to run the plan.
• Business subscribers: if you subscribe to a verified business, you may receive notifications about that business’s posts and updates.
• Service providers: we share data with vendors who help us operate the Service, under agreements that limit their use of the data to providing services to us. They currently include: Supabase (database, authentication, and server functions), Cloudflare (media storage and delivery), Redis (server-side caching), Google (maps, places, geocoding, and translation), Mapbox (maps and address search), OpenAI and Anthropic (AI features), RevenueCat (Flavr+ subscription management), Apple and Google Play (payments), PostHog (product analytics), Sentry (crash and performance monitoring), Expo (push notification delivery), and KLIPY (GIF search).
• Legal and safety: to comply with law, enforce our Terms, or protect the rights and safety of users. This may include reviewing reported content, messages, business claims, or account activity as part of investigating abuse, fraud, or a violation of our Terms.
• We do not sell your personal information.

7. International Data Transfers and Multi-City Operation

Because Flavr is available in Canadian and U.S. cities, your information may be processed in Canada, the United States, and other countries where we or our service providers operate. Those countries may have different data-protection laws than your jurisdiction. We take reasonable steps to protect your information in line with this Policy.

If you are in Quebec, another Canadian province, the United States, the European Economic Area, the United Kingdom, or another region with privacy rights, you may contact us to exercise those rights as described below.

8. Account Deletion and Anonymization

You may delete your account at any time from within the app. Flavr uses an anonymization model rather than full content erasure.

We remove your personal identity and private data: authentication credentials and login access, email address, phone number, profile information, private account settings, notification preferences, follower and following relationships, saved restaurants, personal booking notes, plan RSVP private details, and other private personal data.

We retain your public contributions in anonymized form: posts, comments, restaurant reviews, publicly shared media, and likes/interactions. After deletion, this content is no longer attributed to you; it is shown as authored by “Deleted User” with a default avatar and no accessible profile.

If you manage a business profile, deleting your personal account does not automatically remove the public restaurant listing. Contact support@flavr.ca to transfer ownership or request removal of a business profile you control.

Your email address and phone number are released so they may be used to register a new account in the future. This preserves the integrity of public conversations and restaurant review history while severing the link between that content and your identity. If your jurisdiction grants a right to erasure of specific public content, contact us and we will evaluate the request under applicable law.

9. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service. After account deletion we retain only anonymized public content (as described above), business listing records needed to keep venue pages accurate, and records we are legally required to keep. Backup copies are purged on a rolling schedule.

10. Your Rights

Depending on your jurisdiction (including Quebec privacy law, other Canadian privacy laws, and applicable U.S. state privacy laws), you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing. You can exercise many of these rights directly in the app (editing your profile, deleting your account). For data export or other requests you cannot complete in the app, contact support@flavr.ca.

11. Children’s Privacy

The Service is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal data from them.

12. Changes & Contact

We may update this Policy and will notify you of material changes; continued use after changes take effect constitutes acceptance.

For privacy questions or requests, contact support@flavr.ca.