Privacy & Security
This page is maintained by the EatLists team to answer common privacy and security questions about the app. It describes app-visible controls and current practices, and is not an independent certification.
Accounts and access
EatLists uses email and password sign-in. Your session is stored locally in your browser and is required to read or modify your saved restaurants. You can sign out from the account menu at any time.
What we store
When you save a restaurant we store the data needed to show it on your map: name, address, coordinates, cuisine tags, the original source link (Instagram or TikTok URL you provided), the creator's public handle, your personal notes and ratings, and whether you've visited or favourited it.
We do not store your contacts, your camera roll, or content from any account you haven't explicitly shared with us.
Location
Location access is optional and only used in your browser to sort nearby spots and estimate walking time. Your live location is not sent to our servers or stored. You can change this at any time in your browser's site permissions.
Data isolation
Your saved restaurants are private to your account. Database-level row policies prevent other signed-in users from reading or modifying your data through the API.
Sharing a restaurant
When you share a restaurant, EatLists creates a one-off link with a random token. Anyone with the link can see only the fields you chose to include for that single restaurant — never your full list, your notes, or your account.
Third-party services
EatLists relies on a small set of providers to operate: Lovable Cloud (Supabase) for authentication, database, and serverless functions; Google Maps and Places for map tiles, geocoding, and address verification; Apify and Anthropic Claude to read a public social post URL you paste in and extract the restaurant name. We do not sell your data to advertisers.
Cookies and analytics
EatLists uses only the storage required to keep you signed in and remember your app preferences. We do not use third-party advertising cookies.
Deleting your data
You can delete individual restaurants from your list at any time. To delete your account and all associated data, email us at the address below and we will remove it.
Security contact
If you believe you've found a security issue, please email security@eatlist.app. We appreciate responsible disclosure and will respond as quickly as we can.
This page describes current app behaviour and is updated as the product changes. It is not legal advice and is not a substitute for a formal Privacy Policy or Terms of Service where one is required.