Privacy Policy
Last updated: April 9, 2026This Privacy Policy describes how the FoodMatch app ("we", "our", or "app") collects, uses, stores, and protects user information ("you") when using our service.
1. Information We Collect
1.1 Registration and Authentication Data
When you create an account, we collect:
- Email address
- Full name (display name)
- Unique user identifier (generated internally by Firebase)
If you use social login, we collect information provided by the platform:
- Google Sign-In: name, email address, and profile photo from your Google account
- Apple Sign-In: name and email address linked to your Apple ID (may be a private relay email provided by Apple)
1.2 Location Data
When you use the restaurant search feature, we collect:
- City name or address you enter
- Geographic coordinates (latitude and longitude) derived from the provided location
- Search radius (distance in kilometers or miles you define)
- Device location (only while the app is in use, if you grant permission)
Location is used solely to find restaurants near the region selected for the voting session. We do not track your location in the background.
1.3 Group and Voting Data
When using social and voting features, we store:
- Groups you created or belong to
- Your role in the group (admin or member)
- Voting session history
- Cuisine and restaurant preferences (positive and negative votes)
- Timestamps for joining groups and participating in voting sessions
1.4 Device Usage Data
- Camera: used exclusively to scan QR codes when joining groups. No images are stored or transmitted.
- Network connectivity: we monitor connection status to ensure the app works properly.
2. How We Use Your Information
We use the collected data to:
- Create and manage your user account
- Allow you to create and join voting groups
- Find restaurants near the location provided for the voting session
- Sync votes in real time among group members
- Display previous voting history
- Ensure the security and proper functioning of the app
We do not use your data for advertising, marketing, or selling to third parties.
3. Third-Party Data Sharing
To provide our features, we use the following third-party services:
Firebase (Google LLC)
- Firebase Authentication: account management and authentication
- Firebase Realtime Database: real-time storage of groups, members, voting sessions, and restaurants
Data stored in Firebase is subject to Google's Privacy Policy.
Foursquare Places API (Foursquare Labs, Inc.)
- Used to find restaurants based on location, cuisine, and distance you provide
- Searches are performed using the location data you supply when creating a voting session
See the Foursquare Privacy Policy.
Photon / Komoot
- Used to convert city names into geographic coordinates (geocoding)
See the Komoot Privacy Policy.
4. Data Retention
Your data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. After deletion:
- Your authentication data is removed from Firebase Authentication
- Your votes and group information are deleted from the database
- Groups where you were the sole admin may be terminated
5. Data Security
We take the following measures to protect your information:
- Server communication via HTTPS/TLS
- Authentication managed by Firebase with industry-standard security
- Database access rules that restrict reading and writing to authenticated users and group members only
- No sensitive information stored locally beyond session data required for the app to function
6. Children's Privacy
FoodMatch is not intended for children under 13 years of age. We do not knowingly collect data from children. If we identify that an account belongs to a child under 13, we will remove the information immediately.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you
- Correction: request correction of inaccurate or incomplete data
- Deletion: request deletion of your personal data
- Portability: request your data in a machine-readable format
- Objection: object to processing of your data under certain circumstances
To exercise any of these rights, contact us as indicated in Section 8.
8. Contact
If you have questions, requests, or concerns about this Privacy Policy or how your data is handled, contact us:
9. Changes to This Policy
We may update this Privacy Policy periodically. When significant changes occur, we will notify you through the app or by email. Continued use of the app after changes constitutes your acceptance of the updated policy.
This policy was drafted in accordance with Brazil's General Data Protection Law (LGPD – Law No. 13,709/2018) and, where applicable, the European Union's General Data Protection Regulation (GDPR).