Fries Map (the "app") helps people discover and review fried-potato spots around the world. This policy explains what we collect, why, who processes it, and the choices you have.
You can use Fries Map as a guest. In that case your data stays on your device only and is never sent to our servers. Everything below applies when you sign in.
| Data | Purpose | Notes |
|---|---|---|
| Account identifier (and your email address if you sign in with email) | Authentication, syncing your data across devices | Anonymous sign-in creates an identifier with no email attached |
| Reviews (score, comment, taste axes, price, photos) | The core of the shared map | Reviews, spots and photos are public |
| Photos you upload | Shown as information about the venue | EXIF metadata, including GPS, is stripped before upload |
| Location of spots you create | Placing the pin on the map | Coordinates are public. Spots created from device GPS are rounded to roughly 110 m |
| Approximate current location (while using the map) | Showing nearby venues and centring the map | Used in the moment only; never stored on your profile |
| Collections (My Best 5, wishlist, Potato Dex, follows) | Your personal lists, synced when signed in | Follow relationships are visible to other users |
| Push notification token | Sending notifications, if you enable them | Removed when you turn notifications off |
| Diagnostics and crash reports (when enabled) | Improving stability | Handled by Sentry |
| Advertising identifier (IDFA), approximate location and device information | Only when you choose to watch an ad: serving the rewarded ad and preventing fraud | Handled by Google AdMob. We ask for tracking permission first, and declining still lets you watch - the ad is simply not personalised. Nothing is sent if you never watch one |
We do not sell your data. Advertising is optional and rewarded only: an ad plays when you choose to watch one for Fry Coins, and no advertising is shown anywhere else in the app. If you never watch one, nothing reaches an ad network.
We keep your data for as long as your account exists. You can delete your account, reviews, photos and collections at any time from Settings → Delete account in the app. (Spots you created remain on the shared map, but are de-identified.) You can also request deletion from the web.
Depending on where you live (for example the GDPR in the EU, the APPI in Japan, or the CCPA/CPRA in California), you may request access to, correction of, export of, or deletion of your data, and object to certain processing. Use the in-app deletion feature or contact us.
The app is not directed to children under 13, or under the minimum age of digital consent where you live. We do not knowingly collect their information.
Your data may be processed outside your country, in the region where our backend runs and by the processors listed above. We rely on appropriate safeguards for those transfers.
Session credentials are stored in the device keychain/keystore, and access to shared data is restricted server-side with row level security (RLS). Photo metadata is stripped. No method is perfectly secure, but we take reasonable measures.
We may update this policy. We will announce material changes in the app or by updating the date above.