Privacy policy

Burrito Index is an app and website for weighing, pricing and reviewing burritos. This policy explains what we collect when you use them, why, who it's shared with, and how to delete it. We don't sell your data, show ads, or track you across other companies' apps and websites.

What we collect

• Your account: your username, email address and password. Passwords are stored only in a scrambled (hashed) form we can't read.
• What you post: reviews (ratings, comments, write-ups, prices, weights, tags and the restaurant), photos and videos, comments, likes and who you follow. Reviews, photos, videos, comments and your profile are public: anyone can see them in the app and on burritoindex.app, and they can be shared and found by search engines.
• Reports and blocks: when you report content or block someone, we keep that record to moderate the community. These aren't public.
• Location, only if you allow it: your phone's location is used to center the map, find restaurants near you and suggest where you are when you post. It's sent with those searches but not saved to your account. Photos you upload have their location information removed before they're stored.
• How the app is used: things like which screens are opened, when the app is first opened, and when something is shared, together with a random ID stored in the app and your account when you're logged in. We use this to understand which features are used and what brings people to the app.
• On the website: pages visited and the page or link that brought you there, with a random ID stored in a cookie.

How we use it

• To run the app: your account, your reviews and profile, rankings, leaderboards and restaurant search.
• To send account emails: activation, password resets, username reminders and email-change confirmations.
• To keep the community safe: reviewing reports, hiding content that breaks our guidelines, and limiting spam and automated sign-ups.
• To improve Burrito Index, using the usage information above.

Who we share it with

Everything you post publicly is visible to everyone. Otherwise, we only share data with the services that run Burrito Index for us, and only what they need:

• DigitalOcean hosts our servers and database.
• Amazon Web Services stores and delivers photos and videos.
• Google (Google Maps Platform) powers restaurant search: what you type in the search box and your approximate location, if you've allowed it. Google's use of this is covered by the Google Privacy Policy.
• Mailgun sends our emails, so it receives your email address.

We'd also share information if the law requires it, or to protect people's safety.

Deleting your data

• You can edit or delete any of your reviews, photos and videos in the app at any time.
• Delete your account in the app under Settings → Delete Account. This permanently removes your account and everything tied to it: your reviews, photos, videos, comments, likes, follows, blocks and reports. Usage records are kept only without any link to you. Copies in our backups are removed as the backups are replaced.

Children

Burrito Index isn't intended for children under 13, and we don't knowingly collect their information. If you believe a child has created an account, contact us and we'll delete it.

Your choices

You can turn off location access for Burrito Index in your phone's settings at any time; everything except "near me" features keeps working. You can ask us for a copy of your data, or to correct or delete it, by contacting us.

Changes

If we change this policy, we'll update the date at the top, and for significant changes we'll let you know in the app.

Contact

Questions or requests: burrito.questions@gmail.com.