Privacy policy
Last updated 12 October 2026
This policy explains what Munchl ("we") collects when you use the Munchl app, the browser version at app.munchl.com and this website, why we collect it, and the choices you have. In short: we collect what's needed to show you places, let you post, and send your orders, and we've built the app to collect less wherever we can.
What we collect
- Account: your email, display name, and optionally a profile photo, cover photo, bio and position title. If you sign in with Google, we receive your name and email from Google.
- What you post and do: posts (photos, videos, captions, recipes, tags), comments, likes, your bucketlist, "I made this", reviews, reports you file and edit suggestions.
- Orders and reservations: the items, the place, table number, pickup or delivery details, your notes, and the allergies and diets you chose to include.
- Health and dietary needs: only if you add them in Settings. They're used to filter suggestions and to add them to your orders, which you can switch off per order.
- Location: only if you allow it, to show places near you. Learning your recurring places (for example "usually near work at lunch") needs both location consent and personalisation consent. Coordinates are rounded to about 11 metres before they're stored.
- Chats: messages between people are end-to-end encrypted on your device. We store the encrypted text and media, but can't read them. Your private key never leaves your device. Messages with the Munchl assistant are not end-to-end encrypted, because the assistant has to read them to answer.
- Device and diagnostics: a push notification token, the app version, crash reports (error details, the page you were on and recent app activity), and basic usage events such as which place pages are viewed.
- A one-way fingerprint of your email (a salted hash), used only to spot duplicate accounts.
How we use it
- To run Munchl: your feed, the map, posts, bucketlists, chats, orders and reservations.
- To pass orders to places, including the notes and allergies you chose to send.
- To keep Munchl safe: automated checks on new posts and photos, rate limits, and reviewing reports.
- To personalise suggestions, such as nearby places and the timing of deals from places you saved, when you've allowed it.
- To fix crashes and improve the app.
What places see
When you order or book, the place sees your order, the name on it, your notes and allergies, and your table or pickup details. If you saved a place and later get a deal from it, the place only knows that a Munchl user who saved it received the deal. It never sees your location or movement patterns. Places that connect their own systems through our Partner API never receive your email or location.
Who we share it with
We don't sell your personal data. We use these service providers to run Munchl, and they only process data for that purpose:
- Supabase: database, sign-in and file storage.
- Google: maps, Street View images of storefronts, Google sign-in and push notifications (Firebase Cloud Messaging).
- Stripe: payments, where offered. We never see your full card number.
- AI providers (currently DeepSeek, with Anthropic as a backup, and a hosted open model for the Munchl assistant): checking new posts for harmful content, reading menu and recipe photos, and answering questions you ask the assistant.
- Netlify: hosting for this website and the browser app.
We may also disclose data if the law requires it, or to protect people's safety.
Who can see your content
One setting decides whether everyone or only your friends can see your profile and posts. Your bucketlist has its own visibility setting, and you can hide your friends and followers lists. Posts tagged to a place also appear on that place's Tagged tab, for whoever can see the post.
How long we keep it
We keep your data while your account exists. When you delete your account, your profile and the data linked to it are deleted. Crash reports and usage events are kept for as long as they're useful for fixing problems.
Your rights
Depending on where you live (including under the GDPR in the EU and UK), you can ask to access, correct, export or delete your data, object to or restrict some uses, and withdraw consent at any time. Location and personalisation can be switched off in Settings. To make a request, use the contact form and choose "Privacy request". You can also complain to your local data protection authority.
Children
Munchl isn't meant for children under 13, or under the minimum age in your country, and we don't knowingly collect their data.
Changes
If we change this policy in a meaningful way, we'll tell you in the app before the change takes effect.