Privacy Policy

1. What we collect

Account information

When you create an account, we collect:

• your email address
• your chosen handle
• optional profile details such as avatar and bio

Authentication is handled by Firebase Authentication (Google), which processes your login credentials.

Your content

When you use the App, we collect the content you submit, including:

• photos
• ratings
• written notes
• burger and restaurant details (such as name, address, city, country, and coordinates)

This content is visible to other users of the App.

Usage data

We collect the minimum technical data needed to operate the App, including:

• session data (via a first-party cookie)
• basic interaction data (e.g. actions within the App)
• location information you provide when adding a restaurant

We do not use third-party tracking pixels or advertising cookies.

2. How we use your information

We use your data to:

• provide and operate the App
• authenticate users and maintain accounts
• display your content to other users
• generate aggregated insights (e.g. average ratings, rankings)
• improve and develop the App

We do not sell your personal data and we do not use it for targeted advertising.

3. Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

• Contract, to provide the App and its features to you
• Legitimate interests, to improve the App, prevent abuse, and ensure it functions properly
• Consent, where required (for example, if we introduce optional features that rely on it)

4. Who we share your data with

We share data with trusted service providers who help us operate the App:

• Firebase Authentication (Google), user authentication
• Google Cloud Storage, storage of uploaded photos
• Mapbox, mapping and location services

These providers process data on our behalf and only as necessary to deliver their services.

5. International transfers

Some of our service providers may process data outside the UK.

Where this happens, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations, or
• standard contractual clauses

6. Data retention

We keep your data only for as long as necessary to operate the App and comply with legal obligations.

If you delete your account:

• your profile data will be deleted
• your content may remain in anonymised or aggregated form where it is part of rankings or statistics

7. Your rights

Under UK data protection law, you have the right to:

• access the personal data we hold about you
• request correction of inaccurate data
• request deletion of your data
• object to or restrict certain processing
• request a copy of your data (data portability)

To exercise these rights, contact us using the details below.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

We use a single first-party cookie called userSession to keep you signed in.

We do not use:

• advertising cookies
• third-party tracking cookies

9. Children

The App is intended for users aged 16 and over.

If you believe a child under 16 has created an account, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time.

If changes are significant, we will notify you within the App.

11. Contact

If you have questions about this policy or your data, contact us:

Email: contact@pattyoapp.com
Company: Harroworks Ltd