Privacy Policy
The short version
PlateMap is a map of dishes. We collect what we need to run the app — your account info, the photos and ratings you choose to post, and your phone's location while you're using the map. We don't sell data. We don't use third-party advertising trackers. You can export or delete everything any time from Settings → Privacy & Data.
Data we collect
Account data
- Email and name from your Google or Apple sign-in. Email is never shown publicly.
- Display name, handle, avatar, and bio that you set in the app. These are public.
- Your home city, set during onboarding to personalize your map.
Activity data
- Dish photos you upload — public by default.
- Ratings, notes, dish names, lists, follows — public by default.
- Reports you file for moderation — never public.
Location
- While you're actively using the app, we read your phone's location to center the map on dishes near you and to suggest the venue when you pin a plate.
- We do not track your location in the background or between sessions.
- Pins store the venue's coordinates, not your exact capture coordinates. Public timestamps are shown at day resolution ("Tuesday afternoon"), not minute resolution.
Diagnostics
- Crash reports and basic performance metrics through Firebase. We use this only to fix bugs and keep the app stable.
What we don't collect
- Your phone contacts.
- Microphone, accelerometer, or health data.
- Browsing history outside the app.
- Advertising IDs (IDFA). We have no third-party ads.
- Payment data — there is no payment in PlateMap.
How we use your data
- To run the app — sign you in, show your map, store your pins.
- To moderate content and prevent abuse.
- To improve the app — measure crashes, performance, and overall usage at an aggregate level.
We do not sell your data. We do not share it with advertisers. We do not use it to train external AI models.
Who we share data with
- Google Firebase hosts our database, file storage, authentication, and analytics. Standard Google Cloud data-processing terms apply.
- Anthropic processes anonymized photo bytes and dish-name strings via our Cloud Functions to help canonicalize dish names. Photos and text are not retained or used for training.
- MapTiler renders our map tiles. They see anonymous tile-load requests from your device.
- Apple and Google handle sign-in. They see what you authorize them to share with us.
How long we keep data
- Account data: until you delete your account.
- Pin photos: until you delete the pin or your account. Deleted pins are purged within 30 days.
- Crash and performance data: 90 days, then aggregated.
- Account deletion: a 30-day grace period in case you change your mind. After that, your profile is hard-deleted. Pins are anonymized (your username becomes a placeholder) so the public dish map stays intact, unless you ask us to delete the photos too.
Your rights
You can do all of these from Settings → Privacy & Data in the app:
- Export your data — JSON of your profile, pins, ratings, follows, and reports, plus a zip of your photos.
- Delete a single pin — immediate.
- Delete your account — two-step confirm, 30-day grace period.
- Block another user — they can't follow you or appear in your feed.
- Edit or hide pins — change the rating, note, or visibility on a pin you posted.
Under the GDPR (if you're in the EU/EEA) and the CCPA (if you're in California), you also have the right to access, correct, restrict processing of, port, and erase your data. The controls above honor those rights. You can also email us directly at privacy@platemap.pl.
Children
PlateMap is not for children under 13. If you discover a child under 13 has signed up, please email privacy@platemap.pl and we'll delete the account.
Changes to this policy
If we make material changes, we'll update the "last updated" date above and notify you in the app. Small clarifications happen without notice; substantive changes don't.
Contact
Questions or requests: privacy@platemap.pl. Operator: PlateMap, Warsaw, Poland.