Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address, display name, and password (stored in hashed form by Supabase).
• Profile Information: Optionally, you may provide a home city, bio, social media handles, and a favorite food category.
• Price Reports and Menu Data: Food prices, menu item names, categories, restaurant names, and city information you submit to the Service.
• Menu Scanner Images: Photographs of physical menus submitted through the Menu Scanner feature. See Section 5 for full details.
• Support Communications: If you contact us, we collect your name, email address, and the content of your communication.

1.2 Information Collected Automatically

• Location Data: With your explicit permission, we access your device's GPS location to center the map and identify nearby restaurants. We do not continuously track or store your location history. Location access is controlled by your device permissions and may be revoked at any time.
• Device Information: We may collect your device type, operating system version, and app version for technical support and compatibility purposes.
• Usage Data: We collect information about your interactions with the Service, such as features accessed, screens viewed, and actions taken, to understand usage patterns and improve the Service.

1.3 Device Identifiers

If you use our Android application, we may collect your Android device identifier (Android ID) for analytics and fraud prevention purposes. This is disclosed in compliance with Google Play's Data Safety requirements. This identifier is not used to track you across other apps or websites.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Process and display community price and menu data;
• Calculate and award Scout Points, Badges, and Scout Tier designations;
• Process menu images through our third-party AI service to extract menu item information;
• Personalize your experience, including displaying restaurants near your location;
• Respond to your inquiries and provide customer support;
• Monitor and analyze usage patterns to improve Service functionality;
• Detect, investigate, and prevent fraudulent or abusive activity;
• Comply with applicable legal obligations; and
• Send you service-related communications (not marketing).

3. Information Sharing and Disclosure

3.1 Service Providers

We share your information with the following third-party service providers that assist us in operating the Service:

3.2 Public Information

Price reports, menu data, Scout Tier, display name, and public profile information you submit may be visible to other users of the Service. Do not submit information in public fields that you wish to keep private.

3.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

3.4 Business Transfers

If OMA Concepts is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

4. Location Data

We access your device location only with your explicit permission, granted through the operating system permission dialog. The following applies to all location data:

• Location is used solely to center the map and surface nearby restaurants;
• Location access is controlled entirely by your device's operating system permission settings and may be denied or revoked at any time without affecting core Service functionality;
• We do not build a history of your physical locations or continuously track your movements; and
• Your home city, if provided in your profile, is stored as a text string and is not used for precise location determination or tracking.

5. Menu Scanner Images

When you use the Menu Scanner feature, your submitted photograph is transmitted to OpenRouter (our AI service provider) for text extraction. The following applies to all Menu Scanner images:

• Images are transmitted over encrypted HTTPS connections;
• OMA Concepts does not permanently store your image after AI processing is complete;
• OpenRouter's privacy policy governs their handling of image data during and after processing;
• Only the text and pricing data extracted from the image is retained as part of the community menu database; and
• Use of the Menu Scanner is voluntary and requires explicit consent before each first use.

6. Children's Privacy

6.1 The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

6.2 If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will take prompt steps to delete that information from our records.

6.3 If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us immediately at hello@omaconcepts.com.

6.4 For users between 13 and 16 years of age who are California residents, we will not sell or share their personal information without obtaining their opt-in consent, consistent with California law.

7. Your Privacy Rights

7.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose, and the third parties with whom we have shared it.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out action is required, but you may submit a request confirming this.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those permitted by law.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at hello@omaconcepts.com with the subject line "California Privacy Rights Request." We will verify your identity before processing your request and respond within 45 days.

7.2 All Users

Regardless of your location, you may:

• Access and update your profile information within the app at any time;
• Delete your account and associated personal data through the app's Danger Zone settings; and
• Revoke location permissions at any time through your device settings.

8. Global Privacy Control (GPC)

We recognize and honor the Global Privacy Control (GPC) signal. If your browser or device transmits a GPC signal, we treat it as a Do Not Sell/Share request under CCPA/CPRA, effective January 1, 2026. Because we do not sell or share personal information for advertising purposes, the practical impact is limited, but the signal is processed and honored as required by law.

9. Data Retention

• Account and Profile Data: Retained until you delete your account or submit a verified deletion request.
• Price Reports: Anonymized versions of your price contributions may be retained indefinitely as part of the community database after account deletion, as they are no longer linked to your personal identity.
• Menu Images: Not retained by OMA Concepts after AI processing is complete.
• Support Communications: Retained for a reasonable period necessary to resolve your inquiry and for record-keeping purposes.
• Usage and Analytics Data: Retained in aggregated or anonymized form for service improvement purposes.

We will process verified deletion requests within 45 days.

10. Security

We implement industry-standard security measures to protect your personal information, including:

• Encrypted authentication and secure session management provided by Supabase;
• HTTPS encryption for all data transmitted between the app and our servers;
• Row-level security policies on our database to prevent unauthorized data access; and
• Regular review of our security practices.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. We will notify you of material changes by:

• Posting a prominent notice within the app; or
• Sending an email notification to the address associated with your account.

The "Last Updated" date at the top of this policy reflects when it was last revised. Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the changes.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

OMA Concepts, doing business as PhoodScout
Email: hello@omaconcepts.com
Website: www.omaconcepts.com

For California-specific privacy requests, use the subject line: "California Privacy Rights Request"
For data deletion requests, use the subject line: "Data Deletion Request"