🍽️ Grub Privacy Policy

Last updated: July 11, 2026

Grub ("we", "our", "the app") lets you save restaurants you find on Instagram, TikTok, or Google Maps to a personal map. This page explains what data we collect, why, and how you can control or delete it.

Information we collect

• Account information: your email address and password, used to create and sign in to your account. Passwords are handled by our authentication provider (Supabase) and are never stored or seen by us in plain text.
• Saved places: restaurant names, addresses, coordinates, categories, price level, ratings, photos, tags, notes, and visited status — either entered by you or looked up via Google Places when you save a place.
• Shared content: when you share an Instagram, TikTok, or Google Maps link to Grub, we process that URL (and, for Instagram/TikTok, the post's public caption) to identify the restaurant being shared.
• Location: with your permission, we use your device's location to show nearby saved places on the map, sort places by distance, and — if you enable it — send a notification when you're near a saved place you haven't visited yet ("nearby alerts"). Background location is only used for this feature, and only if you turn it on.
• Lists: if you create a shared list, we store the list name and the emails of anyone who joins it, so members can see who they're sharing the list with.
• Crash and error data: basic diagnostic information (device type, OS version, and app error logs) if the app crashes or encounters an error, so we can fix bugs.

How we use your information

We use your information only to provide and improve Grub's features: saving and displaying your places, sending nearby alerts you've opted into, identifying restaurants from links you share, and diagnosing crashes. We do not sell your data, and we do not use it for advertising or ad targeting.

Third-party services we use

The following services process data on our behalf, only as needed to run the app:

• Supabase — hosts our database, authentication, and backend functions.
• Google Places / Maps — looks up restaurant details, photos, and map data.
• Anthropic (Claude) — reads a shared post's public caption text to extract the restaurant's name; does not receive your account information.
• Apify — a fallback service that fetches public Instagram/TikTok post data when a direct fetch is blocked.
• Sentry — collects crash reports and error logs to help us fix bugs.
• Resend — delivers account emails (sign-up confirmation codes, password resets).

Each of these providers only receives the minimum data needed to perform their specific function.

Your choices

• Location and notification permissions are optional and can be turned off anytime in your device Settings.
• You can remove any saved place, leave or delete any list, and edit your notes/tags at any time in the app.
• You can delete your account entirely — including all saved places and list memberships — from Profile → Delete account. This is permanent and cannot be undone.

Children's privacy

Grub is not directed at children under 13, and we do not knowingly collect information from children under 13.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page.

Contact

Questions about this policy or your data? Reach out via the support page.