Privacy Policy
Last updated: 19 October 2026
Gourmap ("we", "us") is a mobile app for logging restaurant visits and sharing them with friends. This policy explains what data we collect, why, and what your rights are. It applies to the Gourmap app and to this website. Gourmap is operated from The Netherlands and follows the General Data Protection Regulation (GDPR).
Data we collect
Account data. Email address, display name, and an optional profile photo and short description. You sign in with Apple, Google, or a one-time code sent to your email, so we never store a password. If you sign in with Apple or Google, we receive the basic account details they share, such as your email address (with Apple this can be a private relay address). If you sign in with Apple we also keep a token that Apple issues for your account, only so that we can revoke Gourmap's access in your Apple ID settings when you delete your account.
Push notification tokens. If you allow notifications, we store a token that identifies your device (a device identifier issued by Apple), linked to your account, so we can deliver notifications such as a like, a comment or a follow request through the Apple Push Notification service. The token is removed when you sign out or when Apple reports it is no longer valid. A notification contains the name of the person who acted and, where relevant, the restaurant name; it never contains the text of a comment.
Content you create. Restaurant visits, including photos, rating, story, date, and the friends you tag as companions; comments and likes; your list of restaurants you want to visit; who you follow and your follow requests; and the notifications generated by these activities.
Location. Restaurant locations are stored as part of a visit. If you allow it, we use your device location to find nearby restaurants. When you search for a restaurant, your search text and approximate area are sent from your device to Apple Maps so the results are relevant to where you are; we do not store them. We do not track your location in the background.
Usage and diagnostics. We do not use analytics, advertising or crash-reporting services. Our hosting provider keeps standard server logs (such as IP address and request time) for security and troubleshooting.
Safety. If you block another account, we store who blocked whom so the block stays in effect. If you report content or a user (through the report form in the app or on this website), we store what was reported, a copy of the reported content as it was at that moment, the reason and details you gave, your email address if you provide one, and a one-way hash of your IP address that we use to limit abuse. We use this to review reports and take action.
How we use it
- To provide the app: your profile, visits, map, and notifications.
- To show your content to other users as described below.
- To send the one-time sign-in code if you sign in with email.
- To send you push notifications, if you allow them.
- To review reports and keep the service safe and secure.
We do not sell your data and we do not show ads.
Who can see your content
Your profile (display name, photo and description) is visible to other signed-in Gourmap users. Your visits, with their photos, ratings, stories and comments, are visible only to you, to people whose follow request you have accepted, and to friends you tag as companions on that visit. Likes and comments you leave on a visit are visible to everyone who can see that visit. You can remove a follower or block an account at any time in the app. Blocked accounts cannot follow you or see your visits, and you will not see each other's comments.
Service providers
We use these providers to run Gourmap. Each processes data only on our instructions.
- Supabase (EU, Ireland) – database, authentication, and file storage for photos.
- Apple – Sign in with Apple, the Apple Push Notification service (delivers notifications to your device), and Apple Maps for the map, address search and restaurant search.
- Google – Google Sign-In.
- Resend – sending the sign-in code and report notification emails.
Retention
We keep your data for as long as your account exists. When you delete your account, your profile, visits, photos, comments, likes, wanted restaurants, companion tags, follows, notifications, and push notification tokens are removed, and if you signed in with Apple we revoke Gourmap's access to your Apple ID. Copies in our provider's automatic backups are overwritten on its regular backup schedule and are not restored except to recover from a failure. Reports about content or accounts, and the copy of the reported content, are kept for as long as needed to handle them and to prevent abuse, even after the reported account is deleted.
Deleting your account
You can delete your account and all associated data at any time from within the app: open Settings, go to Account, and choose Delete My Account. Deletion is immediate and cannot be undone.
If you can no longer access the app, email info@gourmap.app from the address linked to your account and we will delete it within 30 days.
Your rights
Under the GDPR you can request access to, correction of, or deletion of your personal data, ask for a copy of it, or object to processing. Deletion is immediate and in your own hands (see above). You can download a copy of your data yourself at any time: open Settings, go to Storage and data, and choose Download all data. The app creates a zip file with your account details, visits, comments, likes, wanted restaurants, follows and blocked accounts in a machine-readable JSON file, together with your photos. The file is created on your device and is not encrypted, so keep it somewhere safe. If you can no longer access the app, email info@gourmap.app from the address linked to your account and we will send you a machine-readable export within 30 days. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Children
Gourmap is not intended for children under 16. We do not knowingly collect data from them; if you believe we have, contact us and we will delete it.
This website
This website is static, sets no cookies, and uses no analytics.
Changes
We may update this policy. Material changes will be announced in the app. The date at the top shows the current version.
Contact
Ambachtsherenpad 81, 2722BS Zoetermeer
Gourmap is registered with the Chamber of Commerce in the Netherlands under number 96004592. Our VAT number is 8674.24.746.B.01.
Email: info@gourmap.app