Privacy Policy
Effective date: September 15, 2026
The short version
- No account. No sign-up, no email, no password.
- Your taste and your history live on your phone. Unlinked, nothing about them ever leaves it.
- Your rough position goes to the restaurant list through our own proxy, only when you roll, rounded to about 110 metres before it is sent, and it is never stored.
- Linking a partner shares exactly three things, with exactly one person. Unlinking deletes all of it for both of you, immediately.
- No ads, no ad networks, no analytics SDK, no tracking across apps or websites.
What stays on your phone
Your taste weights, every thumbs up and thumbs down, the raw log of what you tapped, your “we went” history, your never-again list, your profile names, your filters and your settings are stored in a database on the device. You can export the whole thing to a JSON file and restore it on another phone. Deleting the app deletes all of it.
Location
The App asks for coarse location at your first roll, and shows you why before it asks. Your position is used for one thing: to ask our proxy for restaurants near you. It is rounded to three decimal places (about 110 metres) on the phone before it is sent, the proxy rounds it again before calling Google, and neither the proxy nor we store it. If you decline, you can set a home area by name instead and the App works normally.
Restaurant data (Google)
Nearby places come from the Google Places API, requested by our own server-side proxy so that no key and no request ever comes from your device with your identity attached. The proxy sends Google a rounded coordinate, a radius, a language and the kinds of place to return. It does not send anything about you. It keeps one thing: a counter of how many fresh searches an anonymous install id has made today, so the daily cap can be enforced; counters are deleted after seven days. Your use of place data is also subject to Google’s terms, and the App shows the attribution Google requires.
Linking a partner (optional)
If you link another phone, an anonymous identity is created at that moment — not at install — with no email, name or password. From then on, and only between the two of you:
| What syncs | Why |
|---|---|
| Your taste snapshot: the learned weights, and per-place thumbs up/down and bans | so either phone can roll for both of you when the other person is not there |
| Your “we went” history: a place id, a date and each person’s verdict | so you share one record of where you have been |
| An open veto round: the four cards and the votes | so both phones can see the same round; closed rounds are deleted after 24 hours |
What never syncs: your location or any coordinate, the restaurant lists you were shown, your filters, your settings, and the raw log of what you tapped. A row is readable only by the two members of that pair, enforced by the database itself.
A pair with no activity for 180 days is deleted automatically. Either person can unlink at any time, which deletes the pair and everything under it for both of you, immediately — see Delete synced data.
Purchases
Purchases are handled by the App Store or Google Play and processed through RevenueCat, which receives an anonymous install id (a random UUID generated on your phone) and your purchase status so your Pro access survives a reinstall. We never see or store payment-card details. When two phones are linked, our backend asks RevenueCat whether either install has Pro, so that one purchase can cover the pair.
Invite a Friend (Optional)
If you use Invite a friend, the entire payload is: your app install id, your RevenueCat customer id and the invite code. That is all that is ever sent. No email address, no contacts, no name, no device fingerprint, no location. The code exists so both sides can be granted 30 days of Pro; the install id exists so a code cannot be redeemed twice on the same phone. Nothing about your restaurants, your taste or your history is involved.
Children
I’m Not Picky is not directed to children under 13 and we do not knowingly collect personal information from them.
Your rights
Because there is no account, most of your data is already entirely in your hands: export it, delete it, or delete the app. For anything synced to a pair, unlink in the App or write to us. Where the GDPR or the CCPA applies, you have rights of access, correction, deletion and portability; we do not sell personal information and never have.
Changes & contact
We may update this policy; material changes will be reflected by a new effective date here. Questions or requests: dev@adelyons.com.