CravePath Privacy Policy

Data Storage

All data you create in CravePath — including cuisine preferences, dish selections, taste profiles, and session history — is stored temporarily on your device using AsyncStorage so your session can be recovered in case of a crash.

CravePath does not require an account and does not store personal information in the cloud. Anonymous, non-personal algorithm performance data is sent to Firebase (see "Anonymous Algorithm Analytics" below).

Information You Provide

• Cuisine and meal type selections — stored locally to personalize your experience
• Dish selections and rejections per round — stored locally to build your taste profile
• Taste profile data (richness, spice, warmth, crunch, sweetness, and other attributes) — calculated from your selections and stored locally

Information Collected Automatically

Advertising data: The App uses Google Mobile Ads to display banner advertisements. Google's ad SDK may collect device identifiers, advertising IDs, and usage data in accordance with Google's Privacy Policy. The App declares the AD_ID permission for this purpose. No advertising data is collected until you have completed the consent flow (see "Ad Consent and Your Choices" below).

Anonymous Algorithm Analytics

CravePath collects anonymous, non-personal data to track how well our recommendation algorithms perform and which options score highest amongst our users. This data includes:

• Session identifiers (randomly generated, not linked to you or your device)
• Dish selections, rejections, and cuisine choices per session
• Which recommendation engine produced each result and how it was rated (thumbs up/down)
• Navigation actions taken on the result screen (e.g. search locally, find a recipe)

This data is sent to Google Firebase (Firestore) and contains no personal identifiers — no names, emails, device IDs, IP addresses, or location data. It is used solely to evaluate and improve our recommendation algorithms.

Region Detection and Delivery Services

CravePath uses your device's system locale and timezone settings to determine which food delivery services are available in your region. This is used to show relevant options such as Uber Eats, DoorDash, Grubhub, Deliveroo, and other regional services.

The App does not request or access your GPS location, and no precise geolocation data is collected or transmitted. Region detection is based entirely on device settings that are already available to any app without special permissions.

When you choose to find food or order delivery, the App opens a link or deep link to the relevant third-party app or website. CravePath does not transmit any personal data to these services. Your interaction with those services is governed by their respective privacy policies.

Information We Do Not Collect

Ad Consent and Your Choices

CravePath obtains your consent before collecting any advertising data. The App delays all ad-related data collection until you have completed the consent flow.

• Google User Messaging Platform (UMP): If you are located in the European Economic Area (EEA) or a regulated US state, a consent form is displayed when you first open the App. This form allows you to choose whether to allow personalized advertisements or to receive non-personalized ads only.
• App Tracking Transparency (iOS only): On iOS, the App requests your permission via Apple's App Tracking Transparency framework before allowing cross-app tracking for ad personalization. If you decline, you will still see ads — they just won't be personalized.

Based on your choices, ads are served as either personalized or non-personalized. The App works the same regardless of your selection.

Managing Your Preferences

• GDPR regions: You can change your ad preferences at any time from Settings > Manage Ad Preferences, which reopens the Google consent form.
• iOS tracking: You can change your tracking permission at any time in your device's Settings.

Advertisements

CravePath displays banner ads powered by Google Mobile Ads (AdMob). Google may use cookies, device identifiers, and advertising IDs to serve and measure ads. For more information, see How Google uses information from sites or apps that use our services.

Third-Party Services

Permissions

Data Retention and Deletion

• Local data: Session data is stored temporarily on your device for crash recovery. Uninstalling the App removes all local data permanently.
• Algorithm analytics: Anonymous performance data stored in Firebase is retained indefinitely to support ongoing algorithm improvement. This data contains no personal identifiers and cannot be linked back to you.
• Ad-related data: Data collected by Google's ad SDK is governed by Google's data retention policies. You can manage your ad personalization preferences at any time from the App's Settings.

Children's Privacy

CravePath is not directed at children under 13 and does not knowingly collect personal information from children. The App displays advertisements served by Google AdMob, which may collect device information as described in this policy. If you believe a child has provided personal information through the App, please contact us so we can take appropriate action.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of the App after changes are posted constitutes acceptance of the revised policy.

Contact

If you have questions about this privacy policy, please contact us at:
cravepath@goobdevelopment.com