Privacy Policy

Last updated: 21 July 2026

We Recommend ("we", "the app") is a private restaurant-list app for you and the friends you invite. This page explains what we store, why, and what you can do about it. If anything is unclear, email privacy@werecommend.online.

The short version. We collect the minimum needed to run your list: your account identifier, the restaurants you save, and the invite links you share with friends. We do not sell your data, do not run ads, and do not track you across other apps or websites.

Data we collect

Account identifier — depending on how you sign in: your Apple user ID, your Google user ID and email, or an email and password you choose. Guest ("no account") sessions collect only an anonymous ID with no personal details.
Display name — only if Apple or Google shares it, or if you set one yourself. Used solely to label your invites so friends recognise you.
Your list — the restaurants you add, the status you set (Tried / Want to try), your one-line notes, price levels, tags, and booking flag.
Your friend graph — the mutual connections created when you or someone else redeems an invite link.
Diagnostic data — Supabase (our backend) logs standard request metadata (timestamps, IP address, user-agent) for security and abuse-prevention. This is retained per Supabase's own policy.

Data we do NOT collect

Location data. The app never asks for location permission.
Contacts. We do not read your address book.
Advertising identifiers. There is no ad tracking.
Photos or camera. The app does not access them.

Third parties

Supabase hosts our database and handles authentication. See supabase.com/privacy.
Google Places API provides restaurant details (name, address, opening hours, photos, ratings). We send the restaurant's Google Place ID; we do not send anything about you. See Google's privacy policy.
Apple / Google Sign-In — used only if you choose those sign-in methods, to verify the ID token they issue.

What friends can see

The lists you create are private by default. A friend can see your list only after both of you have redeemed each other's invite link, forming a mutual connection. If you remove the connection or block a user, your list becomes invisible to them again.

Data retention

We keep your data for as long as your account is active. When you delete your account, we remove your profile, list items, invite codes, and friendships within 30 days. Aggregated, non-identifying counts (e.g. "N users signed up in Q1") may be retained indefinitely.

Your rights

You can:

Access or export — email us and we will send you your data as JSON.
Delete — end your session in the app and email privacy@werecommend.online from your account address requesting deletion. We complete the request within 30 days.
Correct — you can edit your display name, list items, and notes directly in the app.

Children

We Recommend is not directed to children under 13. If you believe a child has provided data to us, please contact us and we will remove it.

International transfers

Data is stored on Supabase infrastructure and may be processed in the European Union, the United Kingdom, or the United States. By using the app, you consent to this processing.

Changes to this policy

If we make material changes, we will update the "Last updated" date above and, where required, notify you inside the app before the change takes effect.

Contact

Email privacy@werecommend.online. Postal address available on request.