Privacy policy

What we collect

Your email address and display name, so accounts are real and hosts and recipients can recognise one another. Your dietary preferences, if you choose to set any, so the feed can be filtered to food you actually eat. The posts, claims and ratings you create. Photos you attach to a post. A push notification token for the device you sign in on, so we can tell you when your food is claimed or your pickup is confirmed.

Location

Location is used for two things, both only while the app is open.

When you write a post and tap Pin my location, the coordinates you pin are stored and attached to that post, so people can see how far away the food is and get directions to it.

When you browse the feed, your device's approximate location is sent with the request so listings can be sorted and filtered by distance. It is used to answer that request and is not stored against your account or written to our logs. You can decline the location permission and still use the app — only the distance sorting becomes unavailable.

This app never reads your location in the background.

What we never do

We do not sell your data, we do not share it with advertisers, and there is no analytics or advertising SDK in this app. Crash reporting, if enabled, records technical diagnostics only.

Who can see what

Your display name and rating are visible to people who interact with your posts or claims. Your email address is not shown to other users.

Who we share it with

Only the service providers the app needs to run, and only for that purpose:

• Google Firebase Authentication — sign-in and email verification
• Our hosting and database providers — account, listing and claim records
• Cloudinary — storage and delivery of the photos you attach to a post
• Expo — delivery of push notifications to your device
• Sentry — crash and error diagnostics, configured not to send personal information

These are processors acting on our instructions, not partners buying data. Each is required to protect your data to a standard at least equivalent to this policy, and none is permitted to use it for its own purposes. We do not sell your data and we share it with no one else, other than where the law requires it.

How long we keep it

Listings and claims are kept while your account exists, so your history and a host's rating stay meaningful. Expired listings are retired from the feed but the record remains until the account is deleted.

Deleting your account removes your data as described below. Crash diagnostics are held by Sentry on its own retention schedule, normally 90 days, and contain no personal information. Backups may retain data for a short period after deletion before they age out.

Deleting your account

Settings has a Delete account option. It removes your profile, your posts, your claims, your ratings and your notifications, and deletes your sign-in identity so the account cannot be used again. If you signed in with Apple, your Apple authorization is revoked at the same time. Deleting a host account also removes that host's posts, including any claims other people have made on them.

No email, no form and no waiting — it happens in the app, immediately.

Your choices

Location and notification permissions are yours to grant or withdraw at any time in the iOS Settings app, under EcoEats. The app keeps working without either; you lose distance sorting and pickup alerts respectively.

You can edit your display name and dietary preferences in Profile at any time. For a copy of your data, or any question about how it is handled, email hello@ecoeatsapp.com.

Children

You must be at least 13 years old to use this app, and anyone under 18 needs a parent or guardian's permission. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, email hello@ecoeatsapp.com and we will remove it.

Changes to this policy

If this policy changes materially we will ask you to accept the new version in the app before you continue using it. The date of the version you accepted is recorded against your account.