Privacy Policy

Draft of October 25, 2026, for review before launch. Not yet in effect.

GoodEats is a private log of the restaurants you care about. It is made by Kearny Holdings LLC ("we"). This policy says what leaves your device, why, and how long we keep it.

The short version

  • Your log is yours. It is private unless you share a list, and a list shows only what you choose.
  • We don't sell your data, show ads, or track you across apps and websites. The app contains no analytics, advertising or tracking code from anyone else.
  • Without an account, your log stays on your device. With an account, it is stored on our server so it can sync between your devices and so you can share lists.
  • You can export everything at any time, free, and you can delete your account from the app.

Without an account

Everything you log stays on your device: places, visits, ratings, prices, notes, tags, people, photos and lists. Some things still have to reach our server:

  • Finding a place. When you search for a restaurant, the text you type and the area you are looking in are sent to our server, which answers with matching places. When you look for places near you, or GoodEats looks up where a photo was taken, only the location is sent: not the photo, and not when it was taken. We use these to answer the request and don't keep them.
  • Device check. To stop other software from using our place search, the app proves it is the real GoodEats app using Apple's App Attest. That creates a key for your device. We keep the key and when it was last used. It is not linked to your name or your log.
  • Abuse limits. To limit how often a device can call us, we count requests per device key, and briefly per network address. The counts reset within an hour for the device check and within a day for place search.

With an account

You sign in with Apple. Apple gives us your name and an email address. If you choose Hide My Email, the address is one Apple creates that forwards to you.

When you are signed in, your log is stored on our server so it can sync between your devices:

  • the places you have saved, with the details you added
  • your visits and Want to Go entries: dates, ratings, prices and notes
  • your tags and lists
  • the names of the people you dined with. If you picked someone from your contacts, only the name is saved. The link to the contact card stays on your device.
  • your photos, as image files

It is sent over encrypted connections and stored with our hosting provider, which encrypts stored data.

Subscription

Apple handles payment. We never see your card or your Apple account details. To know whether your subscription is active, we keep what Apple tells us about it: the product, its status, when it renews or expires, whether it came through Family Sharing, and Apple's transaction numbers.

Sharing

Only a list can be shared. Your log itself is never shared. A shared list shows its places and your name as its owner. On a list you keep together with others, each person's name is shown on what they added. Your ratings, the notes you wrote for the list, and your photos of its places are shown only if you turn on Show My Ratings, Show My Notes or Show My Photos for that list. They are all off until you turn them on. A photo shown on a list is a copy we make with its location and other details removed.

These are never shared: who you dined with, the dates and history of your visits, the notes on your visits, and where you found a place.

Anyone with a list's link can read it, in the app or on the web, without an account. You can turn a link off at any time. For a public list, you see how many devices follow it. You never see who.

Places from your photos

If you ask GoodEats to find restaurants in your photo library, it reads where and when your photos were taken, on your device. Only the locations are sent to our server, to find nearby places, and we don't keep them. The suggestions it finds are stored on your device only.

Contacts, location and the camera

GoodEats asks before it uses your contacts, location, camera or photos, and works without any of them. Your location is used to show nearby places and your position on the map. It is sent only as described in "Finding a place".

Maps

The map is drawn by Apple Maps. Apple's privacy policy covers what the map sends to Apple.

Who processes your data

  • Supabase hosts our database, file storage and server functions, in the United States (AWS, Ohio).
  • Cloudflare runs our website, including the web pages for shared lists.
  • Apple provides Sign in with Apple, payments, App Attest and the map.

They process data only to provide these services to us.

How long we keep it

  • Your account and log: until you delete them.
  • The Trash: entries you delete stay in the Trash for 30 days and are then removed.
  • Deleted items: after something is removed, a record of its ID and deletion date, with no content, is kept for up to 18 months so your other devices learn it is gone.
  • Deleting your account (Settings › Account › Delete Account) erases your log, your photo files, your lists and their links, and your subscription record from our server, and revokes GoodEats' access to your Apple ID. We keep a record that the deletion happened for 30 days. The copy on your device is yours, and you can remove it too.

Your choices

  • Export: Settings › Your Data › Export gives you everything, including photos, as a file. It is always free.
  • Correct or delete: edit or delete anything in the app, or delete your account.
  • Questions or requests: write to us at the address below. Depending on where you live, you may have further rights to access, correct, delete or move your data. We honor them.

Children

GoodEats is not directed to children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, we will post the new version here with its date. If a change affects how your data is used, we will also say so in the app before it applies.

Contact

Kearny Holdings LLC. Email: admin@goodeats.menu.