Privacy Policy

Overview

Carte. is a restaurant-saving app. This policy explains what information Carte. collects, why, and how it's used. We built Carte. to store as little as possible, and to keep what we do store on your device wherever we can.

Information we collect

• Saved places — the restaurants you save, along with any notes, ratings, tags, and visit history you add.
• Location data — used to power proximity nudges (notifying you when you're near a saved place), the "Decide for me" picker, and to generate walking directions. Location is processed on your device and is not sold or shared with advertisers.
• Shared content — if you use the Carte. share extension from another app (e.g. Instagram, TikTok, Safari), Carte. reads the link or text you chose to share, to help you search for and save that place. Nothing is sent to our servers until you tap Save.
• Account information — if you create an account, we store the minimum needed to sync your data (e.g. an email address or device identifier).
• Purchase information — if you buy Carte. Premium, the transaction is handled entirely by Apple and our payments provider, RevenueCat. Carte. never receives or stores your card details — we only receive confirmation of what you're entitled to.

How we use your information

We use your data solely to provide Carte.'s features: saving places, sending nudges and reminders, generating directions, powering "Decide for me," and maintaining your dining history. A nudge about a nearby or forgotten place may include the note you saved for it, to help jog your memory. We do not sell your data or use it for third-party advertising, and we don't use analytics or ad-tracking SDKs of any kind.

We process your information on the following legal bases: performance of our contract with you (providing the features you've signed up to use), your consent (e.g. background location access, which you can withdraw at any time), and our legitimate interest in keeping the App secure and working correctly (e.g. crash reporting).

Location permissions

Carte. requests background location access so it can alert you when you walk near a saved restaurant. You can disable this at any time in your device's Settings, though real-time nudges and "Decide for me" distance ranking won't work without it.

Data sharing

We don't share your personal data with third parties except where required to operate the app, or where required by law. The services we rely on to run Carte. are:

• Google — for place search, maps, and walking directions.
• Firebase (Google) — for account sign-in and storing your saved places. Your account and place data is hosted in Firebase's europe-west4 (Netherlands, EU) region.
• Apple & RevenueCat — for processing Carte. Premium purchases.
• Sentry — for crash and error reporting, so we can find and fix bugs. Sentry receives technical crash data only, not your saved places or account details.

International data transfers

Your saved-place and account data is stored in the EU (see above). Some of our service providers — including Google, Apple, RevenueCat, and Sentry — are based in, or may process data in, the United States or other countries outside the UK/EEA, typically to provide search, payment processing, or error-monitoring infrastructure. Where this happens, we rely on those providers' own compliance mechanisms (such as Standard Contractual Clauses or their certification under the UK/EU-US Data Privacy Framework, where applicable) to ensure your data remains protected to UK/EU standards.

Data retention & deletion

We keep your account and saved-place data for as long as your account is active. If you delete your account, your data is removed from our live database immediately; any short-term technical backups retained for disaster-recovery purposes are automatically purged on a rolling basis and are not used for any other purpose. Crash reports sent to Sentry are retained according to Sentry's own standard retention period before automatic deletion.

Your rights

Depending on where you live, you have rights over your personal data, including the right to: access the data we hold about you; correct inaccurate data; erase your data; restrict or object to our processing of it; and receive a copy of it in a portable format. You can exercise most of these directly in the App (editing or deleting places, or deleting your account), or by emailing [email protected]. If you're in the UK or EEA and you believe we haven't handled your data properly, you also have the right to lodge a complaint with your local data protection authority — in the UK, this is the Information Commissioner's Office (ICO).

Children's privacy

Carte. is not directed at children and is not intended for use by anyone under 13. We don't knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at [email protected] and we'll delete it.

Data controller & contact

Carte. is operated by Ayaan Khan, trading as Carte., who is the data controller responsible for your personal data under this policy. Questions about this policy, or requests to access, correct, or delete your data, can be sent to [email protected].