Privacy policy

Effective Date: May 2026
Last Updated: May 2026

kulu.food (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information we collect

1.1 Account information

When you sign in via Google (through Auth0), we receive and store:

Name: Your display name from your Google account.
Email address: Used for account identification and communication.
Profile picture: Displayed within the app for your profile.
User ID: A unique identifier generated by our authentication provider.

1.2 Contributions

When you submit attestations about restaurants, we store:

The restaurant and metadata definition you attested to.
The value you submitted (e.g., “HMC certified,” “No alcohol”).
Optional notes you provide with your attestation.
A timestamp of your submission.

1.3 Location data (optional)

If you grant permission, the mobile app may access your device’s current location to show nearby restaurants. Your location is never stored on our servers; it is used only in real-time to perform proximity searches.

1.4 Usage data

We collect usage data (pages visited, features used) to improve the platform and provide support. While this data may be associated with your account for administrative and diagnostic purposes, it is anonymized and aggregated for general analytics and public reporting.

2. How we use your information

We use your information to:

Authenticate you and manage your account.
Display your contributions in aggregate form (your individual attestations are never publicly attributed to your name).
Calculate and display your points and community recognition level (Bronze, Silver, Gold).
Improve the platform through usage analytics and administrative insights.
Communicate important updates about the platform (rarely, and never for marketing).

3. What we do NOT do

We do not sell your personal data to third parties.
We do not serve advertisements.
We do not share your individual attestations publicly; only aggregate counts are shown.
We do not store your location data.
We do not send marketing emails.

We may share data only in the following circumstances:

Aggregate data: Non-identifiable, aggregate attestation counts are the core of the platform and are publicly visible.
Service providers: We use Auth0 for authentication and Azure for hosting. These providers process data on our behalf under their own privacy policies.
Legal requirements: We may disclose information if required by law or to protect the rights and safety of our users and platform.

5. Data retention

Your account data is retained for as long as your account is active.
Attestation data is retained indefinitely as part of the community knowledge base, even if you delete your account (in aggregate, anonymized form).
You may request deletion of your account and personal data at any time.

6. Your rights

You have the right to:

Access the personal data we hold about you.
Correct inaccurate information in your profile.
Delete your account and associated personal data.
Withdraw location permissions at any time through your device settings.

To exercise these rights, use the account settings within the app or contact us through our Support & Feedback page.

7. Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure authentication (JWT tokens via Auth0), and access controls on our backend systems.

8. Children’s privacy

kulu.food is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such data, we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform. Your continued use after updates constitutes acceptance.

10. Support

If you have questions or concerns about this Privacy Policy, please reach out through our Support & Feedback page.