Spinion

Welcome to Spinion ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and share your information when you use our mobile application ("App").

By using Spinion, you agree to the collection and use of information in accordance with this policy.

What We Collect:

• Precise Location (GPS): We collect your device's precise location (latitude and longitude) when you use the restaurant discovery feature.
• Approximate Location: If precise location is not available, we may use approximate location based on your IP address or network.

How We Use It:

• To find restaurants near your current location
• To provide distance calculations and directions
• To improve search results based on your geographic area

Permission Required:

• You must grant location permission for the app to access your location
• You can revoke this permission at any time in your device settings
• The app will continue to work with manual location search if you deny location permission

Data Retention:

• Location data is used in real-time and not permanently stored on our servers
• We cache location data temporarily (30 minutes) to improve performance

What We Collect:

• Search queries (e.g., "Italian restaurants", "pizza near me")
• Custom location searches (addresses or place names you enter)
• Search filters (cuisine type, price range, dietary restrictions, search radius)

How We Use It:

• To provide relevant restaurant recommendations
• To personalize your experience
• To improve our search algorithm

Data Retention:

• Search history is stored locally on your device
• You can clear your search history in the app settings

What We Collect:

• Restaurants you've spun to
• Date and time of spins
• Excluded restaurants (if you choose to hide them)

How We Use It:

• To show you your spin history
• To prevent duplicate restaurant recommendations (if enabled)
• To provide statistics about your usage

Data Retention:

• Spin history is stored locally on your device and backed up to your Google/iCloud account (if backup is enabled)
• You can delete individual spins or clear all history at any time

What We Collect:

• Search radius preference
• Dietary restrictions and preferences
• Filter settings (cuisine types, price levels)
• Consent preferences for analytics and ads

How We Use It:

• To customize your experience
• To provide relevant recommendations
• To respect your privacy choices

Data Retention:

• Stored locally on your device and backed up to cloud (if enabled)
• Persists until you uninstall the app or manually clear data

What We Collect (only if you consent):

• App opens and session duration
• Features used (search, spin, filters)
• Errors and crashes (anonymized)
• Device information (OS version, device model, app version)

How We Use It:

• To improve app performance and stability
• To understand which features are most popular
• To fix bugs and crashes
• To make data-driven product decisions

Third-Party Service:

• We use Firebase Analytics and Firebase Crashlytics (Google)
• Data is collected according to Google's privacy policy: https://policies.google.com/privacy

What We Collect:

• Ad interactions (views, clicks)
• Advertising ID (if not disabled in your device settings)

How We Use It:

• To show relevant advertisements
• To support the free version of our app

Third-Party Service:

• We use Google AdMob for advertising
• Ads are personalized based on your interests (if you haven't opted out)
• Google's advertising privacy: https://policies.google.com/technologies/ads

Your Choice:

You can opt out of personalized ads in your device settings:

• Android: Settings → Google → Ads → Opt out of Ads Personalization
• iOS: Settings → Privacy → Tracking → Disable "Allow Apps to Request to Track"

What We Collect:

• App install events and attribution data
• App usage events for ad campaign measurement
• Device information (device model, OS version, app version)
• Advertising ID (if not disabled in your device settings)

How We Use It:

• To measure the effectiveness of our advertising campaigns
• To understand which marketing channels bring users to the app
• To optimize our advertising spend and targeting

Third-Party Service:

• We use Facebook SDK / Meta SDK for ad campaign tracking
• Data is collected according to Meta's Data Policy: https://www.facebook.com/privacy/policy
• This SDK is used even if you don't have a Facebook account

Your Choice:

You can limit ad tracking in your device settings:

• Android: Settings → Google → Ads → Delete Advertising ID
• iOS: Settings → Privacy & Security → Tracking → Disable "Allow Apps to Request to Track"

What We Collect:

• Push notification token (FCM token for Android, APNs token for iOS)
• Device information (OS, app version, timezone)
• Notification engagement data (opens, dismissals)

How We Use It:

• To send you important app updates and announcements
• To notify you about new features or promotions (optional)
• To improve notification relevance and timing

Third-Party Service:

• We use Firebase Cloud Messaging (FCM) for Android and Apple Push Notification Service (APNs) for iOS
• Firebase privacy: https://firebase.google.com/support/privacy

Your Choice:

• You will be asked for notification permission when you first launch the app
• You can enable/disable notifications at any time in your device settings
• Disabling notifications does not affect core app functionality

Data Retention:

• Push tokens are securely stored and excluded from device backups
• Tokens are automatically deleted when you uninstall the app

What We Collect:

• Session identifiers: Room codes used to join group spin sessions
• Participant list: Firebase user IDs of users who join a group spin room
• Restaurant selection results: Winning restaurant metadata (name, address, provider, photos, phone, external URL) stored in Firestore for the session
• Host country/region code: Used to determine the restaurant data provider for the session, ensuring all participants see consistent results

How We Use It:

• To coordinate real-time restaurant selection among group participants
• To display the winning restaurant to all participants
• To lock the data provider to the host's region for session consistency

Data Storage:

• Group spin session data is stored in Firebase Firestore
• Sessions are scoped to the active room and cleaned up automatically after the session ends
• You can leave a group spin room at any time, which removes your active participation

Who Can See It:

• Session data is visible only to participants in the same group spin room
• Room data is not publicly accessible outside the active session

What We Share:

• Your search location (coordinates or address)
• Search parameters (cuisine, radius, filters)

Purpose:

To retrieve restaurant data (names, ratings, photos, reviews, contact info)

Privacy Policy: https://www.yelp.com/yelp_privacy

Attribution: Restaurant data is provided by Yelp. Yelp logo and attribution are displayed in the app as required.

What We Share:

• Your search location (coordinates)
• Search parameters (cuisine category, radius)

Purpose:

To retrieve restaurant data when Yelp is unavailable. Foursquare provides venue names, ratings, photos, and contact information.

When Used:

Foursquare is used as a fallback provider when Yelp API is unavailable or returns no results for your search area.

Privacy Policy: https://foursquare.com/legal/privacy

Attribution: When displaying Foursquare data, "Powered by Foursquare" attribution is shown as required by their API license agreement.

What We Share:

• Your search location (coordinates)
• Search radius

Purpose:

To retrieve basic restaurant location data when other providers are unavailable. OpenStreetMap provides community-sourced venue names, locations, and basic contact information.

When Used:

OpenStreetMap (via the Overpass API) is used as a secondary fallback provider when both Yelp and Foursquare are unavailable.

Data Limitations:

• OpenStreetMap does not provide ratings or reviews
• Photo availability is limited
• Data quality varies by region

License: OpenStreetMap data is available under the Open Database License (ODbL). https://www.openstreetmap.org/copyright

Attribution: When displaying OpenStreetMap data, "© OpenStreetMap contributors" attribution is shown as required by the ODbL license.

Purpose:

AI-powered restaurant recommendations and conversational assistance (Premium feature only)

What We Share:

• Your chat messages and prompts
• Restaurant preferences you mention
• Location context (city/neighborhood, not precise GPS coordinates)
• Previous chat session context (if relevant)

AI Provider's Data Usage:

• Used to generate personalized recommendations
• Not used for model training (per OpenAI and Anthropic API terms)
• API data retention: 30 days maximum
• Data is processed in accordance with their privacy policies

Privacy Policies:

• OpenAI: https://openai.com/policies/privacy-policy
• Anthropic: https://www.anthropic.com/privacy

Your Control:

• AI chat is completely optional (not required for core features)
• Only available to Premium subscribers
• You can delete your chat history anytime in Settings
• Premium users can disable AI features entirely in Settings

Feature Availability:

This feature requires a Premium subscription. Free users do not interact with AI services and no data is shared with OpenAI or Anthropic unless you upgrade and actively use the AI chat feature.

Services Used:

• Firebase Analytics (optional, requires consent) — usage statistics
• Firebase Crashlytics — automatic crash reporting
• Firebase Performance Monitoring — app performance metrics
• Firebase Authentication — account sign-in (Google, Apple)
• Firebase Cloud Firestore — favorites, spin history sync, group spin session data, and user profiles
• Firebase Cloud Messaging (FCM) — push notifications (see §1.8)
• Firebase App Check — app integrity verification. Uses Apple App Attest / DeviceCheck (iOS) and Google Play Integrity (Android) to cryptographically verify that requests to our backend services come from authentic, unmodified instances of the Spinion app. No personal data is collected; only a device attestation token is generated and verified.

Privacy Policy: https://firebase.google.com/support/privacy

Purpose:

To provide directions to restaurants

How It Works:

• When you tap "Directions", we open your device's native maps app
• The maps app handles the request according to its own privacy policy
• We do not receive any data from the maps app

Services Used:

• Facebook SDK for ad campaign tracking and attribution
• Marketing analytics and conversion tracking

Purpose:

To measure advertising campaign effectiveness, understand user acquisition sources, and optimize marketing efforts

Data Shared:

• App install events
• Device information (device model, OS version)
• Advertising ID (if enabled)
• App usage events

Privacy Policy: https://www.facebook.com/privacy/policy

Data Policy: https://www.facebook.com/policy.php

We use your information to:

• Provide core functionality: Find restaurants, show results, spin the wheel
• Personalize your experience: Remember your preferences and filters
• Improve our services: Fix bugs, improve performance, develop new features
• Communicate with you: Respond to support requests and feedback
• Show advertisements: Support the free version of the app (if applicable)
• Comply with legal obligations: Respond to legal requests and prevent abuse

We share data only in these circumstances:

4.1 With Third-Party Services (as described above):

• Yelp (primary restaurant data provider)
• Foursquare (fallback restaurant data provider)
• OpenStreetMap (fallback restaurant location data)
• OpenAI/Anthropic (AI chat recommendations — Premium feature only)
• Firebase/Google (authentication, Firestore for favorites/group spin sessions, analytics, crash reporting, push notifications, and App Check integrity verification)
• AdMob (for advertising)
• Facebook/Meta (for ad campaign tracking and attribution)

4.2 Legal Requirements:

• To comply with applicable laws, regulations, or legal processes
• To protect our rights, privacy, safety, or property
• To enforce our Terms of Service

4.3 Business Transfers:

• If we are involved in a merger, acquisition, or asset sale, your data may be transferred
• You will be notified via email and/or prominent notice in the app

Security Measures:

• Encryption: All network communications use HTTPS/TLS encryption
• Local Storage: Data stored on your device is protected by your device's security
• Access Controls: Limited access to data on our backend systems
• Firebase App Check: We enforce Firebase App Check on all backend services. Using Apple App Attest (iOS 14+), DeviceCheck (iOS 13), and Google Play Integrity (Android), our servers cryptographically verify that every request originates from an authentic, unmodified Spinion app — preventing unauthorized API access and abuse.
• Regular Audits: We review our security practices regularly

• Location Data: Used in real-time, cached temporarily (30 minutes), not stored long-term
• Search History: Stored locally on your device until you delete it
• Spin History: Stored locally on your device until you delete it or uninstall the app
• AI Chat Sessions (Premium): Retained for 6 months, then automatically deleted. You can manually delete chat history anytime in Settings.
• AI Provider Data Retention: OpenAI and Anthropic retain API data for maximum 30 days per their privacy policies
• Analytics Data: Retained by Firebase according to their policies (typically 14-60 months)
• Crash Reports: Retained for 90 days

7.1 Access Your Data:

• View your spin history in the app
• View your preferences in Settings

7.2 Delete Your Data:

• Clear spin history (Settings → Clear History)
• Clear search history (Settings → Clear Search History)
• Delete AI chat history (Settings → AI Chat → Clear Chat History) - Premium only
• Uninstall the app to delete all local data

7.3 Control Analytics:

• Opt in or out of analytics collection at any time (Settings → Privacy)

7.4 Control Location Access:

• Grant or revoke location permission in device settings
• Use manual location search as an alternative

7.5 Control Advertising:

• Opt out of personalized ads in device settings
• Upgrade to remove ads entirely (if available)

7.6 Control Push Notifications:

• Enable or disable push notifications in device settings
• Android: Settings → Apps → Spinion → Notifications
• iOS: Settings → Notifications → Spinion
• You can also manage notification preferences within the app (Settings → Notifications)

7.7 Control Ad Tracking:

• Limit Facebook ad tracking by disabling tracking in device settings
• Reset or delete your advertising ID to limit cross-app tracking
• Opt out of interest-based advertising through industry opt-out pages

Spinion is not intended for children under 13 years old (or applicable age in your jurisdiction).

Age Verification:

• When you first sign in with Google or Apple, you will be asked to verify your age
• You must provide your birth month and year to confirm you are 13 years or older
• If you are under 13, you will not be able to create an account or use the service

COPPA Compliance:

• We do not knowingly collect personal information from children under 13
• Our age verification process prevents children under 13 from creating accounts
• If you believe we have inadvertently collected data from a child under 13, please contact us immediately at support@spinion.app
• We will delete such data promptly upon verification

• The App is designed for use in the United States
• Your data may be transferred to and processed in countries other than your own
• We ensure adequate safeguards are in place for international transfers

For EU/EEA Users:

• Data transfers comply with GDPR requirements
• We use Standard Contractual Clauses (SCCs) where applicable

If you are a California resident, you have additional rights:

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices

How to Exercise Your Rights:

• Do Not Sell My Personal Information: Go to Settings → Privacy → "Do Not Sell My Personal Information" toggle. When enabled, we will not share your data with advertising networks for personalized ads. You will still see ads, but they won't be based on your personal data.
• Export Your Data: Go to Settings → Privacy → "Export My Data". You'll receive a JSON file containing all your favorites, spin history, collections, and preferences.
• Delete Your Account: Go to Settings → Account → "Delete Account". This will permanently delete all your data from our servers and cannot be undone.

Note: While we don't directly "sell" user data, sharing data with ad networks for personalized advertising may qualify as a "sale" under CCPA. The "Do Not Sell" option disables this sharing.

For additional assistance, contact us at support@spinion.app

If you are in the EU/EEA, you have additional rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for analytics at any time

How to Exercise Your Rights:

• Export Your Data (Article 20): Go to Settings → Privacy → "Export My Data". You'll receive a JSON file in a machine-readable, portable format containing all your personal data (favorites, spin history, collections, preferences).
• Delete Your Account (Article 17): Go to Settings → Account → "Delete Account". This permanently erases all your data from our servers, including Firebase Authentication, Firestore data, and all subcollections. This action cannot be undone.
• Withdraw Consent (Article 7): Go to Settings → Privacy and toggle off analytics tracking. Your data will no longer be sent to Firebase Analytics or Crashlytics.
• Access Your Data: Use the "Export My Data" feature to receive a complete copy of your information.

For other GDPR requests (rectification, restriction, objection), contact us at support@spinion.app

• We may update this policy from time to time
• Changes will be posted on this page with an updated "Last Updated" date
• Significant changes will be notified via in-app notification or email
• Continued use of the App after changes constitutes acceptance

If you have questions, concerns, or requests regarding this privacy policy or your data:

Email: support@spinion.app

Website: https://spinion.app

For GDPR requests: support@spinion.app

For CCPA requests: support@spinion.app

This Privacy Policy is governed by our Terms of Service. By using Spinion, you agree to both this Privacy Policy and our Terms of Service.

Terms of Service: https://spinion.app/terms-of-service.html

By using Spinion, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

For analytics: You will be prompted separately to consent to analytics collection. This is optional and can be changed at any time in Settings.