This is an English translation provided for convenience. The French version is the reference text: read the French version.
Privacy policy
Version of October 2026 (2026-10).
Data controller
SN Consulting, 33 rue de la Bienfaisance, 75008 Paris, France. Contact for any question about your data: contact@yumspot.app.
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Email, password (encrypted), sign-in provider (Apple, Google) | Create your account and sign you in | Performance of the Terms of Use |
| First name, last name, username, profile picture | Show the author of your reviews | Performance of the Terms of Use |
| Favourites, reviews, reports | Provide you with the service | Performance of the Terms of Use |
| Version and date of acceptance of the Terms of Use | Prove your acceptance | Legal obligation |
| Audience measurement: screens viewed, actions, random installation identifier, device type | Improve the app | Consent (acceptance of the Terms of Use), which you can withdraw in your profile |
| Technical error reports | Fix bugs | Legitimate interest |
| Restaurateur area: contact phone number, business document (PDF or photo, optional), video and logo uploaded | Check that you really manage the restaurant, then publish your listing | Performance of the business Terms of Use |
The business document attached to a restaurateur request is read only by the YumSpot team, to verify the request: it is never published.
Your location (GPS or chosen address) stays on your phone: it is never stored on our servers. For an address search, the text you type passes through our server to Google Maps, without being kept. The street name of a GPS position is worked out by your phone.
YumSpot uses no advertising identifier and sells no data.
Recipients and processors
- Supabase (hosting of the database and accounts, servers in Paris);
- Google: Firebase (audience measurement, error reports) and Google Maps (address search, map, restaurant information), see Google’s privacy policy;
- Brevo (sending of confirmation and password reset emails);
- BunnyCDN (video delivery).
Some of these providers may process data outside the European Union; these transfers are covered by the European Commission’s standard contractual clauses.
Retention periods
- Account and content: as long as the account exists. When the account is deleted, personal data is erased; published reviews are anonymised.
- Audience measurement: 14 months at most.
- Error reports: 90 days at most.
- Business document of a restaurateur request: erased 30 days after our decision (approved or refused) or the cancellation of the request, and immediately if you withdraw it.
Your rights
You can ask for access to your data, its rectification, its erasure (deleting your account, from your profile, erases everything), its portability, or object to its processing, by writing to contact@yumspot.app. You can withdraw your consent to audience measurement at any time in your profile.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Website yumspot.app
This section concerns the website yumspot.app (pages for restaurants, cities, brands, help pages and legal pages). It is in addition to the rules above, which apply to the app.
- Google Analytics (Google LLC): audience measurement of the website, only with your consent. It counts page views and clicks to the app or the stores, to find out which pages bring you to YumSpot. Nothing is loaded until you have accepted. No advertising, no remarketing, no combining with other data. The data is kept for 14 months at most.
- Cloudflare Web Analytics: overall traffic measurement, with no cookie and no personal identifier. It does not ask for consent.
- Your choice: the banner at the bottom of the page lets you accept or refuse, on an equal footing. Your choice is kept for 6 months in your browser (local storage, no cookie from us), then asked again.
- Withdrawing your consent: click “Manage my cookies” at the bottom of any page of the site, then “Refuse”. The measurement cookies set by Google are then deleted.
For any question: contact@yumspot.app.