Josiah Eats App Privacy Policy

2. Information We Collect

We aim to collect only what the App needs to function. We collect information in three ways: information collected automatically, information you provide, and information from third-party services.

2.1 Information Collected From All Users (Including Without an Account)
Information	How It's Collected	Why	Where It's Stored
Push notification token	Automatically when the App launches, if you grant notification permission	To deliver push notifications	Our server
Device identifier	Generated on first launch and stored on your device	To link an anonymous push token and identify your device	On your device; reference stored on our server
Device platform (iOS/Android)	Detected automatically	To format notifications correctly	Our server
Approximate location	Only when you grant location permission	To show nearby restaurants and center the map	Used in real time only — not stored on our server
City preferences	You select them	To filter content by area	On your device
Notification preferences	You set them	To control which notification categories you receive	On your device
2.2 Information We Collect From Account Holders

If you create an account, we also collect:

Information	How It's Collected	Why	Where It's Stored
Name and email	From your authentication provider (Manus OAuth) when you sign in	To identify your account	Our server
Saved restaurants	When you save or favorite a restaurant	To maintain your favorites	Our server
Custom lists (names and items)	When you create lists	To organize your saved restaurants	Our server
Notification read status	When you open your notification feed	To show unread counts	Our server
Subscription status	From RevenueCat when you subscribe	To enable premium features	RevenueCat and a local cache on your device

We do not store your password. Sign-in is handled by our authentication provider.

2.3 Information We Do NOT Collect

To be clear about what we don't do, the App does not collect:

Precise GPS tracking or location history stored on our servers;
Your contacts, photos, camera, or media library;
Browsing history outside the App;
Health, fitness, or financial data;
Credit card or payment details (payments are handled by Apple or Google);
Social media account links;
User-generated reviews, ratings, comments, or uploads.

Note: the free, ad-supported version of the App does use advertising identifiers and works with an advertising network (Google AdMob) to display ads. This is described in Section 5A (Advertising) below.

3. How We Use Information

We use the information we collect to:

Provide, operate, and maintain the App and its features;
Authenticate you and manage your account;
Save your favorites, custom lists, and preferences;
Show you nearby restaurants and center the map (when you allow location);
Send push notifications you've opted into, including new restaurants, events, deals, guides, recommendations, and announcements;
Manage and validate subscriptions and premium access;
Understand how the App is used so we can improve it (see Section 4);
Detect, prevent, and address technical issues, security incidents, and abuse;
Comply with legal obligations.
4. Analytics

We use internal, first-party analytics to understand how the App is used. We may record events such as restaurant profile views, reservation/RSVP link clicks, guide views, event views, and notification opens, along with associated identifiers (your account ID if signed in, or an anonymous device-based ID), city, and the screen the action came from.

These analytics are used only for our own internal dashboards and product decisions. We do not use third-party analytics SDKs (such as Google Analytics, Firebase Analytics, Amplitude, Mixpanel, or Segment), and we do not share analytics data with third parties for their own purposes.

5. How We Share Information

We do not sell your personal information for money. We share information with the service providers that make the App work, and — in the free, ad-supported version — with our advertising provider (Google AdMob) to show ads, as described in Section 5A. Depending on your ad settings, sharing data with an advertising network may count as "sharing" or a "sale" under some state privacy laws; see Sections 11 and 13 for your choices and opt-outs.

Service Provider	Purpose	Information Shared
Manus OAuth	Authentication	Email and name from your OAuth identity
Expo Push Notifications (exp.host)	Deliver push notifications	Push tokens and notification content
RevenueCat	Subscription and in-app purchase management	Anonymous app user ID and purchase receipts
Google AdMob	Display ads in the free version	Advertising identifier, IP address, and ad-interaction data
Sentry	Error monitoring and crash reporting	Error stack traces and request metadata (no personal information)
Apple App Store / Google Play	Payment processing	Handled entirely by Apple/Google under their terms
Manus Cloud Storage	Hosting restaurant photos	Restaurant images only (no user data)
Apple Maps / Google Maps (via react-native-maps)	Display the interactive map	The map region currently visible to you

Each provider handles data under its own privacy policy. We encourage you to review them: Expo · RevenueCat · Google AdMob · Sentry · and the applicable Apple, Google, and Manus platform terms.

We may also disclose information if required by law, to enforce our agreements, to protect the rights, safety, or property of users or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will provide notice as required by law).

5A. Advertising (Google AdMob)

The free version of the App is supported by ads served through Google AdMob. To show and measure ads, AdMob and Google may collect and use your device's advertising identifier (the Advertising ID on Android or, with your permission, the IDFA on iOS), your IP address, general location, and information about how you interact with ads. Depending on your settings, ads may be personalized (based on this data) or non-personalized.

On iOS, before any tracking for personalized ads, we present Apple's App Tracking Transparency (ATT) prompt. If you decline, you will still see ads, but they will be non-personalized.
On Android, you can limit ad personalization or reset your Advertising ID in your device settings.
Subscribers to the paid ad-free version do not see ads and are not subject to this ad-related data collection.

Google's use of data from apps that use its services is described here: How Google uses information from sites or apps that use our services. You can learn about your ad choices at Google Ads Settings.

6. External Links

The App links to third-party platforms for reservations, menus, ordering, ticketing, and search — for example, Resy, OpenTable, Tock, SevenRooms, Yelp, DoorDash, Uber Eats, Eventbrite, your phone's dialer, and web search. These are standard links that open the third-party service; the App does not send your personal information to them. Once you leave the App, the third party's own privacy policy governs your interaction with it.

7. Push Notifications

If you grant permission, we send push notifications through Expo. Anonymous devices receive notifications by default; account holders can customize which categories they receive within the App. You can turn off push notifications at any time in your device's operating system settings.

8. Location

We request access to your approximate location only to center the map and show nearby restaurants. Location access is optional, and the map works without it. Location is used in real time and is not stored on our servers, and is not used for background tracking, geofencing, or building a location history. You can revoke location permission at any time in your device settings.

9. Data Retention
We retain account information and account-related data (saved restaurants, custom lists, preferences, notification status) for as long as your account remains active.
When you delete your account, we permanently remove your user record, saved restaurants, custom lists, notification and location preferences, and push tokens.
Push tokens are marked inactive when delivery repeatedly fails.
Anonymous device identifiers persist on your device until you uninstall the App.
We may retain limited information where required to comply with legal obligations, resolve disputes, or enforce our agreements.
10. Data Security

We take reasonable measures to protect your information:

Session tokens are stored securely in the iOS Keychain or Android Keystore;
Account data is stored in a managed cloud database, and our API enforces server-side authentication so you can only access your own data;
The admin panel is protected by separate administrative authentication;
Error monitoring captures diagnostic data without personal information.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. You can exercise many of these directly in the App:

Access / update: Your name and email come from your OAuth identity; manage them through your OAuth provider.
Delete your account: Use the Account tab to permanently delete your account and associated data (see Section 9). This action is irreversible.
Notifications: Turn off push notifications in your device settings, or customize categories in the App.
Location: Revoke location permission in your device settings at any time.
Advertising: Decline the App Tracking Transparency prompt on iOS, limit ad personalization or reset your Advertising ID in your Android settings, or subscribe to the ad-free version to stop seeing ads and the related data collection. See Section 5A.

To make a request that you can't complete in the App, contact us using the details in Section 16. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

12. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will delete it. We configure our advertising to treat the App as not child-directed and do not knowingly serve personalized ads to children.

The App may reference dining establishments that serve alcohol but does not sell, promote, or facilitate the purchase of alcohol.

13. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect, to request access to or deletion of it, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information.

We do not sell your personal information for money. However, when the free version shows personalized ads through Google AdMob, our sharing of advertising identifiers with Google may be treated as "sharing" (or a "sale") for cross-context behavioral advertising under California law. You can opt out of this by declining the App Tracking Transparency prompt on iOS, limiting ad personalization in your Android settings, subscribing to the ad-free version, or contacting us using Section 16. We do not use or disclose sensitive personal information for purposes requiring an opt-out, and we will not discriminate against you for exercising your rights.

14. European Economic Area, United Kingdom, and Other Regions

If you are in the EEA, the UK, or a similar jurisdiction, we process your personal information under the following legal bases: performance of our contract with you (to provide the App and your account), our legitimate interests (to operate, secure, and improve the App), your consent (for example, push notifications and location access, which you can withdraw at any time), and compliance with legal obligations.

You have the right to access, correct, delete, restrict, or object to processing of your personal information, and to data portability. You may also lodge a complaint with your local data protection authority. Where we transfer information internationally, we rely on appropriate safeguards as required by applicable law.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and may provide additional notice through the App. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

16. Contact Us

If you have questions or requests regarding this Privacy Policy or your information, contact:

Cafiero Media LLC Email: josiah@josiaheats.com Address: 3800 S Ocean Drive, Hollywood, FL 33019