Privacy Policy
Last Updated: July 9, 2026
Introduction
Chomp ("we", "our", or "the App") helps you discover restaurant dishes in the Saratoga Springs, NY area. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Information We Collect
Account information: your email address and login credentials when you create an account (credentials are handled by our authentication provider and never stored in plain text). If you sign in with Apple or Google, we receive the identifier and email those services share. Your name and phone number are collected only if you choose to provide them during onboarding.
Activity in the app: dish ratings you submit (combined into anonymous community averages), taste preferences you pick during onboarding, your monthly dining budget and meals you log to it, taps on the Order button (which dish and restaurant), and any feedback or restaurant suggestions you send us.
Saved on your device: favorites, your own ratings, and a cached copy of the restaurant catalog are stored locally so the app works quickly and offline.
Usage analytics: we use PostHog to collect app-usage events — such as app opens, searches performed, and filters used — along with basic device information (model, OS version). This helps us understand what to improve.
What We Don't Collect
Your location. Chomp shows the Saratoga Springs area without requesting location access.
Contacts, photos, microphone, camera, or health data.
We show no third-party ads and use no advertising trackers.
How We Use Your Information
To provide the app: accounts, favorites, ratings, budget tracking, and syncing across sessions
To compute anonymous community rating averages
To understand usage and improve features
To produce aggregated, anonymized dining insights (see Data Sharing)
To respond when you contact us or submit feedback
We do not sell, rent, or trade your personal information.
Data Storage & Security
Your account data is stored with Supabase, our cloud database and authentication provider (hosted in the United States). Access to user data is restricted by row-level security so each account can only read and write its own records. Authentication tokens are stored in your device's secure Keychain.
Third-Party Services
Supabase — database, authentication, and storage
PostHog — usage analytics
Apple Sign In / Google Sign In — optional login methods
When you tap Order, the restaurant's own website or ordering service (e.g. Toast, DoorDash) opens in an in-app browser. Anything you do there — including placing an order or entering payment details — is governed by that site's own privacy policy, not ours. We never see your payment information.
Data Sharing
Community averages: your ratings contribute to the average scores shown to other users; they are never displayed with your name or email.
Aggregated insights: we may share or sell aggregated, anonymized statistics — such as dish popularity, rating trends, order interest, and search demand — with restaurants and business partners. These insights are compiled across many users and never include your name, email, or anything else that identifies you personally.
Restaurant offers (opt-in only): if you turn on "Email me local restaurant deals", we share your email address with participating restaurants so they, or Chomp itself, can send you offers; under California law this sharing may be considered a "sale" of personal information. If you turn on restaurant deal texts, the texts are sent by Chomp itself; your phone number is never given to restaurants. Both settings are off by default and you can turn either off at any time in Profile → Deals & offers, which stops the sharing going forward.
Legal: we may disclose information if required by law or to protect our legal rights.
Other than the opt-in email program above, we do not sell your personal information.
Your Rights & Choices
Access or correct your account details in Profile → Account
Turn restaurant offers (email sharing) and deal texts on or off anytime in Profile → Deals & offers — turning email sharing off is how you opt out of that sale of your information ("Do Not Sell")
Delete your account and its data in Profile → Account → Delete Account — this removes your personal data from our systems
Logging out clears synced personal data from the device
You may contact us to request a copy of your data
Data Retention
We keep your data while your account is active. When you delete your account, your personal data is removed from our systems; anonymous, aggregated data (such as community rating averages) may persist because it no longer identifies you.
Children's Privacy
Chomp is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy as the app evolves. We will update the date at the top and, for significant changes, notify you in the app. Continued use after changes means you accept the updated policy.
Contact Us
Questions about this policy or your data: