Fries Map
日本語
Privacy Policy
Fries Map (the "app") helps people discover and review fried-potato spots around the world. This policy explains what we collect, why, who processes it, and the choices you have.
1. No sign-in required (but an anonymous account is created)
Every feature of Fries Map works without signing in. We never ask for your name or email address to use the app.
We do, however, create an anonymous account for you on first launch. It exists so the coins you earn and the reviews you write are not trapped on one device, and it contains nothing that identifies you — only a random identifier. You can later attach an email address to that same account if you want to (Settings → Keep your account), which is what makes your data recoverable on a new phone or after a reinstall.
Reviews and spots you post are public even from an anonymous account — that is the point of a shared map. See section 4 for what is visible to whom.
2. What we collect
| Data | Purpose | Notes |
|---|---|---|
| Account identifier (and your email address if you sign in with email) | Authentication, syncing your data across devices | Anonymous sign-in creates an identifier with no email attached |
| Reviews (score, comment, taste axes, price, photos) | The core of the shared map | Reviews, spots and photos are public |
| Photos you upload | Shown as information about the venue | EXIF metadata, including GPS, is stripped before upload |
| Location of spots you create | Placing the pin on the map | Coordinates are public. Spots created from device GPS are rounded to roughly 110 m |
| Approximate current location (while using the map) | Showing nearby venues and centring the map | Used in the moment only; never stored on your profile |
| Collections (My Best 5, wishlist, Potato Dex, follows) | Your personal lists, synced when signed in | Follow relationships are visible to other users |
| Fry Coin balance | So a reinstall does not wipe the coins you earned | A decorative in-app currency with no cash value |
| Number of ads watched today | Enforcing the daily limit of three | A per-day count only; we keep no record of which ads or what you viewed |
| Push notification token | Sending notifications, if you enable them | Removed when you turn notifications off, and when you sign out |
| Diagnostics and crash reports (when enabled) | Improving stability | Handled by Sentry |
| Advertising identifier (IDFA), approximate location and device information | Only when you choose to watch an ad: serving the rewarded ad and preventing fraud | Handled by Google AdMob. We ask for tracking permission first, and declining still lets you watch - the ad is simply not personalised. Nothing is sent if you never watch one |
We do not sell your data. Advertising is optional and rewarded only: an ad plays when you choose to watch one for Fry Coins, and no advertising is shown anywhere else in the app. If you never watch one, nothing reaches an ad network.
3. Processors
- Supabase — authentication, database, photo storage
- Google Maps Platform — map display and real-world place search (Places)
- OpenStreetMap / Nominatim — some geocoding and seed data (ODbL)
- Expo — push notification delivery
- Sentry (optional) — crash and error diagnostics
- Google AdMob (optional) — serves the rewarded ads you choose to watch for coins
4. How information is shared
- Publicly: spots, reviews, photos, nickname and icon, rank and follow counts are visible to all users.
- With processors: only as needed to run the service (section 3).
- When required by law: to respond to legal requests and to prevent fraud or abuse.
5. Retention and deletion
We keep your data for as long as your account exists. You can delete your account, reviews, photos and collections at any time from Settings → Delete account in the app. (Spots you created remain on the shared map, but are de-identified.) You can also request deletion from the web.
6. Your rights
Depending on where you live (for example the GDPR in the EU, the APPI in Japan, or the CCPA/CPRA in California), you may request access to, correction of, export of, or deletion of your data, and object to certain processing. Use the in-app deletion feature or contact us.
7. Children
The app is not directed to children under 13, or under the minimum age of digital consent where you live. We do not knowingly collect their information.
8. International transfers
Your data may be processed outside your country, in the region where our backend runs and by the processors listed above. We rely on appropriate safeguards for those transfers.
9. Security
Session credentials are stored in the device keychain/keystore, and access to shared data is restricted server-side with row level security (RLS). Photo metadata is stripped. No method is perfectly secure, but we take reasonable measures.
10. Changes to this policy
We may update this policy. We will announce material changes in the app or by updating the date above.