Privacy Policy
Last updated 9 November 2026
The short version:
- Your posts, username and profile are public in EatScout. Your email is never shown to other users.
- We use your location to find your city and nearby food, and to check that a post was made at the restaurant. Other people only see the restaurant and how far away it is. The exact spot is deleted after 90 days.
- We remove location and camera details (EXIF) from photos on your phone before they are uploaded.
- We don’t sell your data, show ads or use advertising trackers.
- You can delete your account and posts at any time.
1. Who is responsible
EatScout is operated by Mohsin Ali, based in Pakistan, who decides how your data is used. Contact: support@geteatscout.com.
2. What we collect
When you create an account
- Email and sign-in: your email address, and a password stored only in hashed form. If you use Google or Apple, we receive your email and the account ID they give us.
- Profile: username, display name, profile photo (if you add one), home city, and the country and time zone your account belongs to.
- Agreement: the date you accepted these terms, and that you confirmed you are 13 or older.
When you use EatScout
- Posts: dish photos, dish names, prices, the restaurant, ratings and captions.
- Activity: follows, reactions, comments, battle votes, “Had this” ratings, favourite foods, points, streaks, badges, blocks and reports.
- Invites: your invite code and who joined with it.
- Notifications: a push notification token for your phone, and your notification settings.
- Security logs: our hosting providers record IP addresses and request details to keep the service safe and working.
Location
- While browsing, if you allow it, your phone’s location is used to find your city and show food near you. It is sent with the request and not saved to your account.
- When you post, we record where your phone was, how accurate the reading was, and whether it looked faked, to check that the dish was eaten at that restaurant and to stop cheating. Other users only see the restaurant and the distance. The exact point is deleted after 90 days.
You can use EatScout without location: choose your city instead, and it will show food there.
Camera and photos
EatScout only uses the photos you choose to post or set as your profile photo. Before upload, the app resizes them and removes their metadata (EXIF), including any GPS location.
What we don’t collect
We don’t collect your phone number, contacts, payment details, or advertising IDs, and we don’t use third-party analytics or advertising trackers.
3. Why we use it
| Purpose | Data | Basis |
|---|---|---|
| Running your account and showing your posts | Account, profile, posts, activity | Needed to provide EatScout (our contract with you) |
| Nearby food, local rankings, city battles | Location, home city | Your permission for location; otherwise your chosen city |
| Checking posts are real and stopping cheating | Post location, accuracy, faked-location signal | Our legitimate interest in fair points and honest prices |
| Notifications | Push token, settings | Your permission; you can turn them off any time |
| Safety and moderation | Reports, blocks, content, security logs | Our legitimate interest in a safe community; legal duties |
| Account emails (verification, password reset) | Email address | Needed to provide EatScout |
We don’t sell your personal data, and we don’t use it for advertising.
4. Who can see it
- Other users see your username, display name, profile photo, home city, posts, points, level, badges, comments, reactions, and who you follow and who follows you. Battle votes are shown as totals.
- Our team can see what’s needed to review reports and keep EatScout safe, including the email on an account. Admin access needs two-step sign-in, and every action is logged.
- Service providers (below) process data for us, only to run EatScout.
- Authorities, if the law requires it or it’s needed to protect someone’s safety.
5. Service providers
| Provider | What they do |
|---|---|
| Supabase | Database, sign-in and server functions |
| Cloudflare | Photo storage and delivery (R2), and this website |
| Sign in with Google, Google Maps, and Google Places restaurant search | |
| Apple | Sign in with Apple and iPhone notifications |
| Expo and Firebase Cloud Messaging | Sending push notifications |
| Our email provider | Sending verification and password-reset emails |
These providers may store data outside your country, including in the United States, the European Union and India. We choose providers that protect data with encryption in transit and at rest.
6. How long we keep it
| Data | How long |
|---|---|
| Account, profile, posts, comments | Until you delete them or your account |
| Posts and comments deleted by you or removed by moderators | Hidden at once; permanently wiped after 30 days |
| Exact location of a post | 90 days, then deleted |
| Notifications in your inbox | 90 days |
| Delivery logs and rate limits | 30 days |
| Google place IDs from restaurant searches | 30 days |
| Reports and moderation records | As long as needed for safety and legal reasons |
| Backups | Overwritten within 30 days |
7. Deleting your account
Delete your account in the app under Profile → Settings → Delete account, or see our account deletion page. We immediately remove your sign-in and profile details, notification settings and phone tokens, hide your posts and comments, and start deleting your photos. Your posts and comments are permanently wiped after 30 days. Your battle votes stay in the totals but are no longer linked to you. Reports and moderation records are kept as long as needed for safety and legal reasons, and backups are overwritten within 30 days.
8. Your choices and rights
- Edit your profile, or delete posts and comments, in the app.
- Turn off location and notifications in your phone’s settings or in EatScout’s notification settings.
- Ask for a copy of your data, or ask us to correct or delete it, by emailing support@geteatscout.com from the email on your account. We reply within 30 days.
- You can complain to the data protection authority where you live.
9. Children
EatScout is for people aged 13 and over. If we learn that someone under 13 has an account, we will delete it. If you think a child under 13 is using EatScout, email us.
10. Security
Data is encrypted in transit and at rest. Access to the database is limited by strict per-user rules, and our admin tools need two-step sign-in. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
11. Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows the latest version.
12. Contact
Privacy questions or requests: support@geteatscout.com.