Foodies — Privacy Policy

Foodies

Foodies is a social network. What you publish is stored on our servers in France so that other people can see it. Your direct messages are end-to-end encrypted and we cannot read them.

Foodies ("the app") is published by Hugo Moriceau ("we", "us"), the data controller for the purposes of the EU General Data Protection Regulation (GDPR). This policy explains what we store, why, for how long, and what you can require of us. Contact: hugomoriceau@icloud.com.

1. What we store, and why

Data	Why	Legal basis
Account — a Sign in with Apple identifier (or a guest identifier), display name, username, bio, avatar, creation date.	To create your account, sign you in, and show you to other people.	Performance of our contract with you, Art. 6(1)(b).
Content you publish — photos, videos, dish titles, captions, hashtags, comments, collections, events, and the likes, saves and follows you make.	This is the service: publishing it to other users is the point of the app.	Performance of our contract with you, Art. 6(1)(b).
Approximate location — the free-text city you type on your profile, and, only if you open the "Nearby" feed and allow it, a coarse coordinate from your device. We ask iOS for reduced accuracy, request a single reading rather than tracking you, and round it to two decimal places (about 1 km) before it leaves your device. We never receive a precise position, and we do not store the coordinate — it is used to rank that one request.	To show where you cook, and to rank the "Nearby" feed around you.	Your consent, given in the iOS permission prompt, Art. 6(1)(a). Refuse it and every other part of Foodies still works; only "Nearby" is unavailable.
Device token for notifications — an Apple-issued identifier for your device, stored only if you allow notifications.	To send you a notification when someone follows you, likes or comments on your dishes, or messages you.	Your consent, given in the iOS permission prompt, Art. 6(1)(a). Decline, or turn it off later, and it is deleted.
Subscription status — whether your account has an active Foodies Pro entitlement.	To unlock the features you paid for. We receive no payment details and no receipt data.	Performance of our contract with you, Art. 6(1)(b).
Direct messages — ciphertext only, plus your device's public key.	To deliver messages between you and the person you are writing to.	Performance of our contract with you, Art. 6(1)(b).
Safety data — reports you file, accounts you block, and content refused by our automated moderation filter.	To keep the network usable and to meet our platform obligations.	Our legitimate interest in a safe service, Art. 6(1)(f).
Profile visits — which accounts opened your profile, and a visit count.	To show you who viewed your profile. You can switch this off in Settings.	Our legitimate interest in a social feature you can disable, Art. 6(1)(f).

We do not store your email address: Sign in with Apple gives us an opaque identifier and we keep only that. We run no analytics or telemetry, no crash-reporting SDK, no advertising network, no advertising identifier (IDFA), and we do not track you across other apps or websites.

2. End-to-end encrypted messages

Direct messages are encrypted on your device before they are sent, using Apple's CryptoKit (X25519 key agreement, HKDF-SHA256, ChaCha20-Poly1305). The private key never leaves your device; it is held in the iOS Keychain. Our server stores and relays only ciphertext and cannot decrypt it. If you lose the device, past messages cannot be recovered — not by you, and not by us.

3. Where your data is, and who else receives it

Our servers are operated by Contabo GmbH in Lauterbourg, France (European Union), acting as our processor. Your data is stored in the EU and we do not transfer it to a third country.

Other recipients:

Apple — for Sign in with Apple, and for every purchase. Payments are handled by Apple under its own terms; we never see your payment details.
Other users — anything you publish is visible to them. While your account is public, it can be seen by anyone using the app.

We do not sell, rent or otherwise share your personal data, and we do not use it to train machine-learning models.

4. How long we keep it

Your account and content: until you delete them, or until you delete your account.
Deleting your account erases your profile, posts, media, comments, messages, follows, collections and profile visits immediately and permanently.
Database backups are kept on a rolling 7-day basis for disaster recovery and then overwritten, so deleted content also disappears from backups within that window.
Reports and blocks may be kept after deletion where we still need them to enforce a safety decision.

5. Your rights

Under the GDPR you may ask us to:

Access the personal data we hold about you and receive a copy in a portable, machine-readable format. You can do this yourself at any time: Profile → menu (top right) → Settings → Download my data produces a JSON file of your profile, posts, comments, likes, saves, follows, blocks, collections, events and profile visits. Direct messages are included as the encrypted text we hold, which only your device can read (Art. 15 and 20).
Correct anything inaccurate — most of it you can edit yourself in the app (Art. 16).
Erase your account and content. You can do this yourself at any time: Profile → menu (top right) → Delete account. It is immediate and permanent (Art. 17).
Restrict or object to processing based on our legitimate interests, including profile visits (Art. 18 and 21).
Withdraw consent for location at any time — clear the city on your profile, and turn off location for Foodies in the iOS Settings app (Art. 7(3)).

Write to hugomoriceau@icloud.com and we will answer within one month. If you are not satisfied with how we handle your request, you may lodge a complaint with your national data protection authority — in France, the CNIL.

6. Children

Foodies is rated 12+ and is not directed at children under 13, who may not create an account. If you believe a child has provided us with personal data, contact us and we will delete it.

7. Security

All traffic between the app and our servers uses HTTPS/TLS. Direct messages are additionally end-to-end encrypted, as described above. Server access is restricted to the publisher. No system is perfectly secure; if a breach is likely to affect your rights we will notify the competent authority and you, as required by Art. 33 and 34.

8. Changes to this policy

If we change what we collect or why, we will update this page and the App Store privacy label before that change ships, and revise the effective date above.

9. Contact

Hugo Moriceau — hugomoriceau@icloud.com