Privacy Policy

Foopy (“we”, “us”, “our”) operates the website at foopy.co.uk, a food hygiene and restaurant scoring service for London.

Contact us at: hello@foopy.co.uk

We collect only what is necessary to operate the service:

• Account data — if you choose to create an account, we store your email address to identify you and manage your session. This is handled via Supabase Auth.
• Saved restaurants — if you are signed in and save a restaurant, we store the association between your account and that restaurant.
• Feedback submissions— if you use the “Suggest a correction” feature, we store a hashed version of your IP address (not the IP itself) to prevent abuse, along with your submission. We do not link this to your account.
• Server logs — our hosting provider (Vercel) may log IP addresses and request data as part of normal server operation. These are not used by us for profiling.

We do not collect payment data. We do not sell, rent, or share your personal data with third parties for marketing purposes.

• To operate your account and let you save restaurants
• To prevent spam and abuse of the feedback feature
• To improve the service based on aggregated, anonymous usage patterns

Our legal basis under UK GDPR is legitimate interests for operating the service, and contract performance for account-related processing.

We use cookies solely for authentication — to keep you logged in between sessions. These are session cookies set by Supabase Auth and are essential for the sign-in feature to work.

If you do not sign in, no persistent cookies are set by Foopy. Third-party services (see below) may set their own cookies in accordance with their policies.

We use the following third-party services to operate Foopy:

• Supabase — database and authentication (EU data region). Privacy policy
• Vercel — hosting and CDN. Privacy policy
• Google Maps Platform — we use the Google Places API to retrieve restaurant review data. We do not pass any user data to Google. Privacy policy

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email hello@foopy.co.uk. We will respond within 30 days.

Account data is retained until you delete your account. Saved restaurants are deleted when your account is deleted. Feedback submissions (with hashed IP) are retained indefinitely for data quality purposes but contain no directly identifying information.

Foopy is not directed at children under 13. We do not knowingly collect data from children.

We may update this policy from time to time. The date at the top indicates when it was last revised. Material changes will be noted here.