Privacy Policy

1. Introduction

Welcome to Fudi, a social platform dedicated to celebrating and exploring local food culture. This Privacy Policy describes how Fudi ("we," "us," or "our") collects, uses, discloses, and protects information when you use our mobile application (the "App") and related services (collectively, the "Services").

By using Fudi, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

We collect several types of information to provide and improve our Services:

2.1 Account Information

When you create an account or sign in to Fudi, we collect:

• Email address
• Display name
• Profile photo (optional)
• Phone number (optional, for business accounts)
• Account type (customer, vendor, or admin)
• Authentication credentials (encrypted passwords or third-party authentication tokens)

2.2 Google Sign-In Information

If you choose to sign in using Google, we receive:

• Your Google account email address
• Your display name from Google
• Your Google profile photo
• A unique identifier from Google

We do not receive your Google password. Authentication is handled securely through Google's servers.

2.3 Location Information

To help you discover food businesses nearby, we collect and process:

• Real-time device location when you use location-based features
• Location permissions status from your device
• Map interactions including searched areas and viewed locations
• Business locations that you create or manage (for vendors)

You can control location permissions through your device settings. Some features may be limited if location access is disabled.

2.4 User-Generated Content

When you interact with Fudi, we collect content you create, including:

• Posts (text and images) about food experiences
• Comments and replies on posts
• Likes on posts and comments
• Photos uploaded to posts or your profile
• Following relationships with other users and businesses

2.5 Business Information (For Vendors)

If you register as a vendor and create a business listing, we collect:

• Business name and category
• Business address and geographic coordinates
• Operating hours and schedule
• Menu information (items, descriptions, prices)
• Contact details (phone, email, website, social media)
• Business photos and featured images
• Staff member information and access permissions
• Ownership and co-ownership details

2.6 Device Information

We automatically collect certain device information, including:

• Device type and model
• Operating system version
• Unique device identifiers
• Mobile network information
• App version and settings

2.7 Usage Data

We collect information about how you use the App:

• Features and functions you access
• Time and duration of your sessions
• Search queries and filters applied
• Interactions with other users and businesses
• Error logs and crash reports

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Provide and Maintain Services

• Create and manage your account
• Authenticate your identity when you sign in
• Display nearby food businesses based on your location
• Enable you to create and share posts, photos, and comments
• Allow you to follow other users and businesses
• Process and display business information for vendors

3.2 Improve and Personalize Services

• Analyze usage patterns to improve app functionality
• Customize your feed based on your preferences and activity
• Recommend relevant businesses and content
• Develop new features and services

3.3 Communication

• Send you service-related notifications
• Respond to your inquiries and support requests
• Notify you about updates to our Services or policies
• Send promotional content (with your consent, where required)

3.4 Safety and Security

• Protect against fraud, abuse, and illegal activity
• Enforce our Terms of Service
• Investigate and resolve disputes
• Maintain the security and integrity of our Services

3.5 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests from authorities
• Protect our legal rights and interests

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Public Information

Certain information is visible to other users by design:

• Your display name and profile photo
• Posts, comments, and likes you create
• Business listings and information (for vendors)
• Your following list (depending on privacy settings)

4.2 Service Providers

We share information with trusted third-party service providers who help us operate our Services:

• Firebase (Google Cloud Platform): Authentication, database, and file storage
• Google Maps: Location services and map display
• Cloud infrastructure providers: Hosting and data storage

These providers are bound by confidentiality obligations and may only use your information to perform services on our behalf.

4.3 Business Transfers

If Fudi is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.4 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Legal processes or government inquiries
• To protect our rights, property, or safety
• To prevent harm or illegal activity

5. Data Storage and Security

We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction.

5.1 Security Measures

• Encryption of data in transit using industry-standard protocols
• Secure authentication through Firebase Authentication
• Regular security assessments and updates
• Access controls limiting employee access to personal data
• Secure cloud storage through Firebase Cloud Firestore and Storage

5.2 Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account information: Retained until you delete your account
• Posts and comments: Retained until you delete them or your account is closed
• Business listings: Retained until removed by the business owner
• Usage data: Typically retained for analytical purposes for up to 12 months

After account deletion, some information may be retained in backup systems for up to 90 days before permanent deletion.

6. Your Privacy Rights and Choices

You have several rights and choices regarding your personal information:

6.1 Access and Update

You can access and update most of your information through your account settings in the App, including:

• Display name and profile photo
• Email address and phone number
• Account type and preferences
• Business information (for vendors)

6.2 Delete Your Account

You may delete your account at any time through the App settings. Upon deletion:

• Your profile and posts will be removed from public view
• Your personal information will be permanently deleted within 90 days
• Some information may be retained in backup systems temporarily
• Anonymized usage data may be retained for analytical purposes

6.3 Location Permissions

You can control location access through your device settings:

• Allow location access only while using the app
• Allow location access always (not recommended)
• Deny location access (some features will be limited)

6.4 Marketing Communications

You can opt out of promotional communications by:

• Following the unsubscribe link in emails
• Adjusting notification settings in the App
• Contacting us directly

Note: You cannot opt out of service-related communications necessary for account management.

6.5 Additional Rights (Based on Your Location)

Depending on your location, you may have additional rights, including:

• Right to request a copy of your data (data portability)
• Right to rectify inaccurate information
• Right to object to certain data processing
• Right to restrict processing in specific circumstances
• Right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the information provided below.

7. Children's Privacy

Fudi is not intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our systems.

8. Third-Party Services

Our App integrates with third-party services that have their own privacy policies:

8.1 Google Services

• Google Sign-In: Google Privacy Policy
• Google Maps: Google Privacy Policy
• Firebase (Google Cloud): Firebase Privacy Policy

8.2 Third-Party Links

Our App may contain links to external websites or services (such as business websites). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

We use Firebase services, which may store and process data in various locations globally. Firebase complies with applicable data protection frameworks and implements appropriate safeguards for international data transfers.

By using our Services, you consent to the transfer of your information to countries outside your country of residence, including the United States.

10. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt out of the sale of your personal information (note: we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, please contact us using the information provided below. We will respond to your request within 45 days.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your personal data based on:

• Consent: When you provide explicit consent (e.g., location access)
• Contract: To fulfill our contract with you when you use our Services
• Legitimate Interests: To improve our Services and protect against fraud
• Legal Obligation: To comply with applicable laws

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify you through the App or via email for significant changes
• Your continued use of the Services after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Anonymous Users

Fudi offers anonymous sign-in functionality that allows you to use the app without providing an email address. If you choose to sign in anonymously:

• A unique identifier is created for your account
• You can later link your anonymous account to an email address
• Location and usage data is still collected to provide Services
• Your posts and interactions are still visible to other users

You can convert your anonymous account to a permanent account at any time through the App settings.

14. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify affected users promptly (within 72 hours where required by law)
• Describe the nature of the breach and information affected
• Outline steps we are taking to address the breach
• Provide recommendations for protecting your information
• Notify relevant supervisory authorities as required by law

15. Contact Us