Privacy Policy

This Privacy Policy explains how AurumSpire LLC ("we," "us," or "our") collects, uses, and shares information when you use EverEats (the "Service"). By using EverEats, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide

• Account Information: Email address, username, display name, password, and profile photo
• Content: Photos, captions, comments, and messages you post or send
• Profile Information: Bio, dietary preferences, and other optional information
• Communications: Information you provide when contacting us for support
• Waitlist Information: Email address provided when joining our pre-launch waitlist

Phone Number & Contacts

You may add and verify a phone number to be discoverable to friends who have your number in their contacts. This is optional and can be removed at any time from Settings → Personal Details.

• Verification: We send a one-time SMS code via our verification provider (Twilio). The plaintext phone number is used only to deliver that code and is not retained on our servers after verification completes.
• Stored Metadata: After verification we keep an opaque truncated cryptographic hash of the number (SHA-256, first 128 bits) plus the country dial code, ISO country code, and last four digits. The last four digits are shown back to you for recognition; the hash is not reversible to the original number.
• Contact Matching (iOS only): If you opt in on the EverEats iOS app, we read your device contacts to compute the same opaque hash for each phone number and send those hashes to our servers. We use them to identify which of your contacts already have EverEats accounts. We never transmit, store, or share the plaintext phone numbers of your contacts. You can disconnect contacts at any time, which deletes the uploaded hashes.
• Web Behavior: The web app does not access your phonebook. You can add and verify your own number on web; only the iOS app can perform contact matching.

Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and interactions
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs

AI-Derived Information

• Image Analysis: When you upload a photo, we may use artificial intelligence to analyze the image and identify food items. This produces dish name suggestions that you can accept, edit, or dismiss.
• Metadata Tags: AI-generated dish names, categories, and other food-related tags derived from your photos

Information From Others

• Other Users: Information about you included in others' content (e.g., tags, mentions)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Enable you to share content and interact with others
• Send you service-related communications (e.g., password resets, notifications)
• Respond to your requests and provide support
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address fraud, abuse, and security issues
• Enforce our Terms of Service and Community Guidelines
• Comply with legal obligations
• Analyze food photos using AI to suggest dish names and improve food categorization
• Allow authorized reviewers to correct or add dish names and food-related metadata to improve data accuracy

AI Processing

When you upload a photo, it may be sent to an AI model (hosted on Cloudflare Workers AI) to identify the food dish. The AI processes the image to generate a dish name suggestion. Your images are not stored by the AI service beyond the duration of the request and are not used to train AI models. You always have the option to accept, edit, or reject any AI suggestion before publishing your post.

Human Review of Metadata

To ensure the accuracy of food-related data on EverEats, authorized team members and community moderators may review and update dish names, cuisine types, and food categories associated with your posts. Reviewers do not modify your photos, captions, or other personal content. You can override any metadata changes by editing your post.

3. How We Share Your Information

Public Information

Your profile information and public posts are visible to other users and may be accessible to anyone on the internet.

Service Providers

We share information with third-party service providers who perform services on our behalf, such as hosting (Cloudflare), email delivery (Resend), and analytics. These providers are contractually obligated to protect your information.

Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to protect our rights, privacy, safety, or property, or that of our users or others.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

With Your Consent

We may share information with third parties when you give us consent to do so.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We may retain certain information after account deletion for legitimate business purposes, such as:

• Complying with legal obligations
• Resolving disputes
• Enforcing our agreements
• Preventing fraud and abuse

When you delete your account, we begin a process to delete your information within 30 days, unless retention is required or permitted by law.

5. Your Rights and Choices

Access and Update

You can access and update your account information through the app settings.

Delete Your Account

You can delete your account at any time through Settings. Account deletion includes removal of your profile, posts, and associated data, subject to our retention policy.

Data Portability

You may request a copy of your data by contacting us at legal@evereats.social.

Email Communications

You can opt out of promotional and waitlist emails by clicking the unsubscribe link included in each email. You cannot opt out of service-related communications (e.g., password resets, account verification).

6. Waitlist & Pre-Launch Communications

When you join the EverEats waitlist, we collect your email address for the sole purpose of notifying you when the service becomes available and sending you waitlist-related updates.

• Waitlist emails are sent through Resend, our email delivery provider. Resend processes your email address on our behalf and does not use it for any other purpose.
• Each waitlist email contains an unsubscribe link. You may unsubscribe at any time, and we will stop sending waitlist-related communications to your email address.
• If you create an EverEats account and later delete it, your waitlist entry (if any) will also be permanently deleted.
• We do not sell, share, or use your waitlist email address for any purpose other than EverEats waitlist communications.

7. Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Access controls and authentication
• Regular security assessments

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

8. Children's Privacy

EverEats is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at legal@evereats.social.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers, including Cloudflare, operate globally. We take steps to ensure that your information receives adequate protection in accordance with this Privacy Policy and applicable law.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out: We do not sell personal information to third parties
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at legal@evereats.social.

11. Cookies and Tracking

We use cookies and similar technologies for the purposes described below. We ask for your explicit consent before setting any non-essential cookies.

We do not use any advertising, marketing, or cross-site tracking cookies.

Managing Your Preferences

You can change your cookie preferences at any time by clicking the “Cookies” link in the footer of any page, or by visiting Settings > Cookie Preferences in the app. You can also control cookies through your browser settings, but disabling strictly necessary cookies may affect your ability to use certain features.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

AurumSpire LLC
Email: legal@evereats.social