Peckish ("we", "us", "our") operates the Peckish mobile app and peckisheats.app. This policy explains what we collect, why we collect it, and your choices.
Information we collect
- Account information. When you sign in with Google or Apple, we receive your email address and, if provided by the provider, your name. Authentication is handled by Supabase Auth on our behalf.
- Saved restaurants. When you save a spot, we store the restaurant details you create or import (name, address, cuisine, notes, and related metadata) in your account.
- Instagram URLs. If you share or paste an Instagram post or reel URL, we send that URL to our parser service to extract restaurant information. We do not store your Instagram credentials.
- Usage data. We log parse requests for rate limiting and abuse prevention (for example, timestamps and your user ID). We do not sell this data.
How we use information
- Provide sign-in, sync your saved restaurants, and operate core app features.
- Parse Instagram links you choose to share and save extracted restaurant details.
- Protect the service through authentication, rate limits, and fraud prevention.
- Respond to support requests and legal obligations.
Third-party services
We use trusted providers to run Peckish:
- Supabase — authentication and database hosting (United States).
- Google — sign-in (Google Sign-In) and optional Maps links opened in the Google Maps app or browser.
- Apple — sign-in on iOS (Sign in with Apple).
- Vercel — hosts our Instagram URL parser API.
- Google Gemini— processes caption text from Instagram URLs on our parser server to suggest restaurant details. Instagram content is not used to train models on your behalf beyond what those providers' terms allow.
Data retention
We keep your account and saved restaurants while your account is active. Parse cache entries may be retained to reduce duplicate processing. You may request deletion at any time (see below).
Your choices
- Access and deletion. Email hello@peckisheats.app to request a copy of your data or account deletion. We will confirm by email before deleting production data.
- Sign out. You can sign out in the app at any time.
Security
Data is transmitted over HTTPS. API access requires a valid user session. Database access is restricted by row-level security so users can only read and write their own restaurants.
Children
Peckish is not directed at children under 13, and we do not knowingly collect personal information from children.
Changes
We may update this policy. We will post the revised version on this page and update the "Last updated" date.
Contact
Questions about privacy? Email hello@peckisheats.app.