Privacy Policy
1. Summary and who we are
Noshdex collects only what it needs to run a food diary and a social app, never sells your personal information, and lets you download or delete your data at any time.
Noshdex ("Noshdex", "we", "us") is a food-logging app operated by Lucas Nicholas, an individual based in Victoria, Australia. This policy explains what personal information we collect when you use the Noshdex app and website (the "Service"), how we use and share it, and the choices you have. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), and, where they apply to you, other privacy laws such as the EU and UK GDPR and Californian privacy law.
In short:
- We use your information to run your diary, show your logs to people you choose, suggest places and buds, and improve the app.
- Your logs, lists and profile are public by default; you can make your account private or lists private at any time.
- Spend, vibe, service, occasion and "would you go back" details are always private to you.
- We don't sell your personal information or share it for cross-app advertising.
- You can export your diary and delete your account in Settings.
Questions or requests: privacy@noshdex.com.
2. Information we collect
We collect information you give us, information created when you use Noshdex, and a small amount from the services you sign in with.
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email, Apple or Google account ID, username | You, and Apple or Google when you sign in |
| Profile | Photo, bio, home area (optional), Podium plates, lists | You |
| Your logs | Places, dates, star ratings, dishes and Again/Maybe/Skip, notes, tags, cuisine choices, photos | You |
| Private log details (Pro) | Spend per person, vibe and service ratings, occasion, would you go back | You (only you can see these) |
| Social activity | Who you follow and who follows you, likes, comments, mentions, saved places, copied lists, reports and blocks | You and other users |
| Location | Your precise location while the app is open, used for nearby places, distances and suggestions | Your device, only with your permission |
| Device and usage | Device type, iOS and app version, crash reports, sign-in times, basic in-app activity (through TelemetryDeck, which doesn't identify you personally) | Your device and the app |
| Purchases | Whether you have Pro, plan, trial and renewal status | Apple (and RevenueCat). We never see your card details. |
| Contacts (optional) | Contacts' details used only to find friends already on Noshdex | Your device, only if you allow it |
Location: we only access location while the app is in use, never in the background. We don't keep a history of where you've been; places you choose to log are saved as part of your diary. You can turn location off in iPhone Settings, and Noshdex will still work with manual search.
Photos: we only access the photos you choose to add. Photos you post on public logs can be seen by others.
3. How we use it and who we share it with
We use your information only to run, protect and improve Noshdex, and we share it only with the service providers that make the app work.
We use your information to:
- create and secure your account and keep your diary in sync across devices;
- show your logs, lists and profile to others as your privacy settings allow;
- find places, show distances and opening hours, and personalise "For you" suggestions, Taste Buds matches and suggested buds;
- produce your stats, recaps and insights;
- send notifications you've allowed (for example, new followers and follow requests);
- process Pro subscriptions and restore purchases;
- keep the community safe: review reports, enforce our Terms, and prevent spam, abuse and fraud;
- fix bugs and understand, in aggregate, how the app is used;
- comply with the law.
We don't use your information for third-party advertising, and we don't make decisions with legal or similarly significant effects about you by automated means.
Who we share it with:
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Database and file storage (Sydney region) | Your account, profile, logs, photos and activity |
| Rork | App platform and sign-in | Sign-in details |
| Apple | Sign in with Apple, App Store, payments, push notifications | Sign-in and purchase details |
| Sign in with Google; Google Maps Platform (Places) for place search, details and photos | Sign-in details; search text and approximate or precise location when you search | |
| TelemetryDeck | Privacy-friendly app analytics | Anonymised usage signals, app and iOS version |
| RevenueCat (when Pro launches) | Manages subscription status | An anonymous app user ID and purchase records |
These providers may only use your information to provide their services to us. Noshdex uses Google Maps Platform; Google's use of data is covered by the Google Privacy Policy.
Other sharing: we may share information if required by law, to protect someone's safety, to investigate abuse of the Service, or as part of a sale or restructure of Noshdex (in which case this policy would continue to apply). We may publish aggregated, de-identified insights (for example, "most-ordered dish in Fitzroy"), and, if a business tier launches, restaurants may see aggregated, anonymous statistics about their venue, never who said what.
4. Public content, storage, security and retention
What you post is public unless you make it private, your data is stored mainly in Australia, and we keep it only while your account is active.
What's public: by default, anyone using Noshdex can see your name, username, photo, bio, home area (if set), Podium plates, public lists, logs (place, rating, dishes, tags, notes and photos), likes and comments. Shared links (for example, to a review or list) can be opened by anyone with the link, including on the web. If you turn on Private account, only approved followers can see your logs, lists, Want to try and Must-orders; your name, photo, bio and counts stay visible so people can find and request to follow you. Private lists are only visible to you. Comments you leave on someone else's log are visible to whoever can see that log. Think before posting, because others can take screenshots.
Where it's stored: your data is stored with Supabase in Sydney, Australia. Some providers (such as Apple, Google, Rork, TelemetryDeck and RevenueCat) may process information in other countries, including the United States and the European Union. We take reasonable steps to make sure they protect it to a standard comparable to Australian law.
Security: we use encryption in transit, access controls and database rules so people can only read what they're allowed to and only edit their own content. No system is perfectly secure; if a data breach is likely to cause you serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC) as required by law.
How long we keep it: we keep your information while your account is active. If you delete your account, we delete your profile, logs, lists, photos, comments and private details within 30 days, except where we must keep limited information to meet legal obligations, resolve disputes or prevent abuse (for example, a record that an account was banned). Backups are overwritten within a further 30 days. Aggregated, de-identified statistics may be kept. Google place details are never stored beyond what Google's terms allow.
5. Your rights, children, changes and contact
You can see, correct, download and delete your information at any time, and Noshdex is only for people aged 16 and over.
Your choices in the app:
- Edit your profile and logs, or delete any log, comment or list.
- Turn on Private account, or make individual lists private.
- Block or report other users.
- Turn location, photos, contacts and notifications on or off in iPhone Settings.
- Export your diary (Settings → Export my diary).
- Delete your account (Settings → Delete account), which permanently removes your data as described above.
Your rights: you can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live (for example, the EU, UK or California), you may also have rights to object to or restrict certain processing, to data portability, and not to be discriminated against for exercising your rights. Email privacy@noshdex.com and we'll respond within 30 days. We may need to verify your identity first.
Complaints: contact us first and we'll try to resolve it. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner or your local privacy regulator.
Children: Noshdex is not for anyone under 16. We don't knowingly collect information from children under 16, and if we learn we have, we'll delete the account. If you believe a child is using Noshdex, please contact us.
Changes: we may update this policy. If we make significant changes, we'll tell you in the app before they take effect. The date at the top shows when it was last updated.
Contact: Lucas Nicholas (Noshdex), Victoria, Australia · privacy@noshdex.com