Tender is a group dining decision app. This policy explains what information we collect, how we use it, and your rights regarding your data.
Information We Collect
Display name. If you sign in with Apple, we store the name Apple provides. You can also set a custom name within the app. This is shown to other members in your session.
Email address. If you sign in with Apple, Firebase Authentication receives and stores your Apple ID email address for account identification. We do not display your email to other users or use it for marketing.
Location. We request your device location while you use the app to find restaurants near you. Location is used only for restaurant search and is not stored permanently on our servers.
Swipe and preference data. We store which restaurants you swiped yes or no on, how quickly you decided, and derived cuisine preferences. This is used to improve your personal recommendations over time.
Session data. We store records of the group sessions you participated in, including matched restaurants and rankings.
Anonymous identifier. If you use the app without signing in, we assign a random anonymous ID to link your session activity. This ID is not tied to any personal information.
How We Use Your Information
To find and display nearby restaurants relevant to you and your group.
To sync your session with other group members in real time.
To build a taste profile that improves suggestions in future sessions.
We do not sell your data, use it for advertising, or share it with third parties for marketing purposes.
Third-Party Services
Firebase (Google). We use Firebase Authentication and Firestore to store session and profile data securely. Google's privacy policy applies: policies.google.com/privacy.
Google Places API. Restaurant names, ratings, photos, and locations come from Google Places. We do not send personal information to this API — only a search location.
Sign in with Apple. If you choose to sign in with Apple, Apple's privacy policy applies: apple.com/legal/privacy.
Data Retention
Your profile and session history are retained until you delete your account. Anonymous session data may be retained in aggregated form after a session ends.
Your Rights
Delete your account. You can delete your account and all associated data from within the app: go to your Profile and tap Delete Account. This permanently removes your profile, preferences, and taste history. Swipe records in shared group sessions are anonymized (your identity is removed from them) so that other participants' session results are preserved.
Use without an account. You can use Tender without signing in. In this case, no personal information is collected.
Data requests. To request a copy of your data or ask any privacy-related question, contact us at the email below.
Children
Tender is not directed at children under 13. We do not knowingly collect personal information from children under 13.
Changes to This Policy
If we make material changes to this policy, we will update the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.