Privacy Policy · Whatever

Whatever helps couples decide what to have for dinner. This policy explains what we collect, why, who helps us run the app, how long we keep it and what you can do about it. We wrote it to be read, not to hide things.

Who we are

The controller of your data is Northbound Digital, a trading name of José Pedro Almeida Brás, Coimbra, Portugal ("we"). Contact for anything about your data: whateverapp.help@gmail.com.

What we collect and why

Account. Your email address, or the identifier and email that Apple or Google give us when you sign in with them, and when you created the account and last signed in. We need it to give you an account (contract).

Profile. The name you choose, language, country, the dishes and cuisines you do not like, your preferred delivery apps and the dishes you liked or skipped in the warm-up. We use them to build your deck of dinner ideas (contract).

Diet and allergens (optional). If you tell us you are vegetarian or vegan, or which of the 14 EU allergens you avoid, this can reveal information about your health or beliefs. We use it only to keep unsuitable dishes out of your deck, and only with your explicit consent, which you give by selecting them and can withdraw at any time by clearing them in Settings.

Your couple. Who you are linked with, the invite code, when you joined and left, and failed attempts at entering a code (to stop people guessing codes). Your partner sees your name, that you voted (not your vote until you have both voted), your swipe progress, the dinners you decided together and the photos added to them.

Dinner nights. Votes (Home, Out, Whatever), swipes, the deck of each night, the dinners decided, how they were decided, the photos you add to a dinner and the places and dishes you save. This is the core of the app (contract).

Location. Only when you start a night with "Out" or "Whatever" and allow location. Your phone rounds your position to about 110 metres and asks public OpenStreetMap servers (see below) for restaurants open nearby. We do not store your position on our servers. We do store the restaurants that end up in your deck, your saved places and your dinners (name, cuisine and their coordinates). When you tap "Order it" and location is already allowed, your phone's own map service (Apple or Google) turns your position, rounded to about 1 km, into a country, so you see the delivery apps of the country you are in. That position never reaches our servers.

Menu photos (Premium). When you use "Read a menu", the photo goes through our server to Anthropic, whose AI lists the dishes. We do not store the photo, and you choose which dishes to save.

Notifications. If you turn on dinner nudges, a push token for your device and the notifications we send you (for example "your partner started a night").

Purchases. If you subscribe, your subscription status, product, store and expiry date, and the purchase events our payment partner sends us. We never see your card or bank details: Apple or Google handle payment.

Security and technical data. Our hosting provider records technical logs (such as IP address, time and the request made) to keep the service secure and working, and the sign-in captcha checks that you are a person (legitimate interest).

We do not use advertising, ad trackers or analytics SDKs, we do not sell or share your personal information for advertising, and we do not build profiles of you for anyone else.

Who helps us (processors and third parties)

Supabase (database, sign-in, file storage, server functions), hosted in the United States (North Virginia, AWS us-east-1). Holds everything described above.
Expo (650 Industries), delivers push notifications: your push token and the text of the notification.
Apple: Sign in with Apple, App Store purchases and notifications on iPhone.
Google: Sign in with Google, Google Play purchases and notifications on Android. Google Places: when you open a matched restaurant, our server sends Google that restaurant's name and position (never yours) to show its photo and rating; we only keep Google's place identifier. Opening directions or Google search hands you over to Google, under Google's own policy.
Cloudflare (Turnstile): checks at email sign-in that you are not a bot, using technical signals from your device.
RevenueCat: manages subscriptions: your user identifier and purchase information. When you delete your account we ask RevenueCat to delete your customer record.
Anthropic: reads menu photos (Premium). Under its commercial terms Anthropic does not use this data to train its models and keeps it only for a limited time.
OpenStreetMap / Overpass: public servers run by independent operators (overpass-api.de, operated by FOSSGIS e.V. in Germany, overpass.kumi.systems and overpass.private.coffee) receive your approximate position (about 110 m) and your device's IP address when your phone looks for restaurants nearby.
Wikimedia Commons: the dish photos come from Wikimedia Commons, used under their licences and credited. The app loads them from our own file storage (Supabase) and keeps a copy on your phone; nothing about you is sent to Wikimedia. Credits are in Settings.
Delivery apps and recipe search: when you tap "Order" or "Cook", the app opens the delivery app or a web search with the dish name. What happens there is covered by their own policies.

Some of these providers are outside the European Economic Area (mainly in the United States). Where that happens, transfers rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

How long we keep data

Your account, profile, tastes and push tokens: until you delete your account (push tokens also go when you sign out or the device stops accepting them).
Nights, dinners, photos and saved places: they belong to the couple. While you are in a couple they stay. If you leave, your partner keeps the shared history. If you delete your account, your partner keeps the shared dinners and the places, now in their name; if you were alone, everything goes, photos included.
Failed invite code attempts: 30 days. Notifications already sent: 90 days. Our record of purchase events: as long as tax and accounting law requires (up to 10 years), without anything else about you.
Technical logs: kept by our hosting provider for a short period (days), then deleted.
Without Premium, the app shows the last 30 days of dinners; older ones are kept and appear again if you subscribe, until you delete them with your account.

Your rights

You can, at any time:

Download your data: Settings, "Export my data" gives you a file with everything about you.
Correct it: change your name, tastes, country and language in Settings.
Delete your account: Settings, "Delete account". It deletes your account and data straight away, as described above. Cancel your subscription in the App Store or Google Play first: deleting the account does not stop the store from charging.
Withdraw consent for diet and allergens by clearing them, and turn off location or notifications in your phone's settings.
Object to processing based on legitimate interest, ask us to restrict it, or ask any question, by writing to whateverapp.help@gmail.com. We answer within one month.
Complain to a data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (www.cnpd.pt); you can also go to the authority where you live.

California residents. You have the right to know, delete and correct your personal information, and to not be discriminated against for using these rights. We do not sell or share personal information, and we use sensitive personal information (diet and allergens) only to provide the service you asked for. Use the in-app tools above or write to whateverapp.help@gmail.com.

Children

Whatever is not meant for anyone under 16, and we do not knowingly collect data from them. If you think a child has given us data, write to us and we will delete it.

Security

Data travels encrypted (HTTPS). On your phone, your sign-in session is kept in the iOS Keychain or Android Keystore. On our servers, each couple can only reach its own data, enforced by the database itself, and dinner photos are private files. If a breach ever puts your data at risk, we will tell the authority within 72 hours and tell you without undue delay when the law requires it.

Changes

If we change this policy in a way that matters, we will tell you in the app before it applies.