Privacy Policy

Last updated: August 17, 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (revFADP) is:

Cemo Studios (LocalFoodler)
Email: support(at)localfoodler.com

No data protection officer has been appointed.

2. Overview of processing activities

This privacy policy applies to the mobile app “LocalFoodler” (iOS and Android) as well as to this website. We process personal data only to the extent necessary to provide a functional app and our content and services.

3. What data we process

3.1 Location data

The app’s core function is searching for restaurants near you. For this purpose, with your explicit consent (operating system permission), we process your approximate or precise location. Location data is used exclusively to perform the search and is not stored permanently. You can revoke the permission at any time in your system settings; the app remains usable with limited functionality. Legal basis: Art. 6(1)(a) GDPR (consent).

3.2 Usage and device data

When you use the app, technically necessary data is processed (device type, operating system, app version, language setting, anonymized usage statistics such as searched categories and cities). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the app and keeping it stable).

3.3 Favorites and visited restaurants

The app does not require a user account. Your favorites and visited restaurants are stored exclusively locally on your device and are not transmitted to our servers.

4. Services used and recipients

4.1 Google Places / Google Maps (Google Ireland Ltd.)

For restaurant search, map display and navigation, we transmit search queries and location coordinates to Google. In doing so, data may be transferred to third countries (USA); Google is certified under the EU-U.S. Data Privacy Framework. More information: https://policies.google.com/privacy.

4.2 AI summaries (OpenAI / Google Gemini)

Publicly available restaurant reviews are transmitted to an AI service provider to generate summaries. No personal data of our users is transferred to the AI service.

4.3 Database (Neon)

In our Postgres database hosted by Neon Inc., we store restaurant data, AI summaries and aggregated, anonymous usage statistics — no personal data of our users.

4.4 Hosting (Railway)

This website and parts of the backend services are hosted by Railway Corp. When you visit the website, technically necessary server log data (IP address, timestamp, page accessed, user agent) is processed. Legal basis: Art. 6(1)(f) GDPR.

4.5 Advertising (Google AdMob)

The app displays unobtrusive advertising. In doing so, advertising identifiers (IDFA/GAID) may be processed. On iOS, this only happens with your consent via the App Tracking Transparency dialog; on Android, you can disable personalized advertising in your system settings. Legal basis: Art. 6(1)(a) GDPR (consent).

5. Retention periods

• Location data: only for the duration of the respective search query
• Favorites and visited restaurants: only locally on your device, until you delete the app
• Analytics data: aggregated and anonymous, for a maximum of 14 months
• Server logs: for a maximum of 30 days

6. Your rights

Under the GDPR and the revFADP, you have the right to:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (“right to be forgotten”, Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, simply send an email to support(at)localfoodler.com. You also have the right to lodge a complaint with a data protection supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the data protection authority responsible for you.

7. Data security

All data transmissions are TLS-encrypted. No personal user data is stored in our database; favorites and history remain locally on your device.

8. Children

Our services are not directed at children under the age of 16. We do not knowingly collect data from children.

9. Changes to this privacy policy

We will update this privacy policy whenever changes to the app or the legal situation require it. The current version can always be found at this address.

This is a convenience translation — the German version is legally binding.