Privacy Policy

Meat Market ("we," "us," or "our") operates the website at meatmarketplanner.com and the Meat Market Planner mobile app for iOS and Android (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use the Service.

Information you provide

• Search text you type. It is used to answer that search and is not stored. On the website a search is part of the page address, so it appears in the standard server logs described below.
• Account information when you sign up for an account, including your email address and a password (passwords are stored as one-way hashes by our authentication provider; we never see your plaintext password)
• If you choose Sign In with Apple, an Apple user identifier and the email address Apple provides. Apple may relay a private, randomized email that forwards to your real address.
• Content you create in the app, including saved venue lists, submitted spots, and venue flags or verification reports

Information collected automatically

• Crash reports and performance diagnostics, collected via GlitchTip (a self-hosted, Sentry-compatible service). Reports include stack traces, device model, OS version, and the app release. Before sending, we strip email addresses, IP addresses, usernames, cookies, and request bodies. Reports are not tagged with your account identifier.
• Standard server logs (IP address, browser or app user agent, referring URL or deep link) generated by our hosting provider when your device makes requests to our API.

What we do not collect

We do not collect your location. The mobile app requests no location permission and has no map, and the website does not use your browser's geolocation. Distances shown next to a venue are straight-line distances measured from a place you chose, not from where you are. We do not use a product analytics service in the mobile app, and we do not collect an advertising identifier anywhere.

• To provide and improve halal restaurant search results
• To create and authenticate your account, and to sync your saved lists and other app content across your devices
• To analyze usage patterns and improve the product
• To diagnose crashes and performance regressions, and to fix bugs that affect signed-in users
• For internal research, analytics, and business operations

We may also use anonymized and aggregated data for any lawful purpose, including analytics, research, product development, and partnerships. Anonymized and aggregated data is not personal information and is not subject to the privacy rights described below.

Legitimate Interest

We process essential operational data and server logs to operate and secure the Service. Optional website analytics and advertising measurement are enabled only with your consent.

Consent

Website analytics and advertising measurement load only after you accept them, and not before. You may change that choice at any time from the privacy controls on any page of this website. Declining does not limit anything you can read or do here.

Performance of Service

We process search queries and account credentials as necessary to deliver the search results, account features, and other functionality you request.

We use third-party service providers to operate this product. These providers may process data on our behalf in accordance with their own privacy policies and applicable data protection laws.

• Supabase. Database, authentication, and file storage, hosted in the United States (AWS us-east-2, Ohio). Stores venue data, your account credentials (email and hashed password), your saved lists, submitted spots, and server-side records of API usage kept for rate limiting and cost control.
• Apple (Sign In with Apple). If you choose to sign in with Apple, Apple provides us with an Apple user identifier and, on first sign-in, the email address you authorize (which may be a private relay address).
• GlitchTip. Crash and performance diagnostics. Receives stack traces, device model, OS version, and the app release; email addresses, IP addresses, usernames, and request bodies are stripped before sending.
• Google. Venue place identifiers come from the Google Places API when we first add a venue, which happens on our servers and not in response to anything you do. Venue pages link out to Google Maps; opening one of those links is a request you make to Google directly, under Google's own policies. Website analytics and advertising measurement, also Google, load only with your consent.
• Hosting providers. Standard CDN and serverless function hosting for the website, and EAS (Expo Application Services) for mobile app build and delivery infrastructure.

Meat Market is operated in the United States, and our database and diagnostics providers are hosted there (Supabase in AWS us-east-2, Ohio). If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer. We rely on standard contractual clauses and other lawful transfer mechanisms where required by applicable law.

Optional website tracking stays off until you choose to enable it. Analytics uses Google Analytics to measure page views and interactions. Advertising measurement, when configured, uses Google Ads to measure conversions. These services can receive browser and network information and set cookies after consent. Our website tracking does not send your account identifier.

Use the Privacy choices button to accept, reject, or change these options separately. Rejecting optional tracking does not prevent browsing. We remember your choice in local storage for up to 180 days. Turning off active tracking reloads the page and clears the relevant first-party Google tracking cookies accessible to this website. Essential sign-in storage remains.

In the mobile app, we use on-device storage (a local database and the system keychain) to hold your sign-in session, your saved lists and trips, the destinations you have downloaded, and local preferences. This data lives on your device and is cleared when you sign out or uninstall the app.

The mobile app does not request access to your device's advertising identifier. Website privacy choices apply to this browser; they do not change the mobile app's settings.

Some browsers offer a "Do Not Track" (DNT) signal. There is no uniform standard for how websites should respond to DNT signals. At this time, we do not respond to DNT signals. Our data collection practices are described in this Privacy Policy regardless of your DNT setting.

Search text is processed to answer the search and is not stored.

Account information (email, hashed password, Apple user identifier) and the app content you keep for yourself (saved lists, trips, share links) are retained for as long as your account is active. When you delete your account, we delete this information from our active databases within 30 days, except where retention is required by law.

Spots you submit and reports you send work differently, and it is worth being clear about it. While one is waiting on us, or if we do not accept it, we delete it with your account, along with any photo attached to it. Once we accept one, the listing is part of the directory and stays there. We remove the account and the email address behind it, so what remains, including any photo you sent as evidence, is a record about a restaurant rather than a record about you.

Crash and performance diagnostics are retained per GlitchTip's default retention settings, typically 90 days.

We use industry-standard security measures, including encrypted connections (HTTPS) and environment-isolated API keys. However, no method of transmission over the internet is 100% secure.

In the event of a data breach that compromises personal information, we will notify affected users and relevant regulatory authorities in accordance with applicable federal and state laws, including the Texas Identity Theft Enforcement and Protection Act. Notification will be provided as promptly as practicable and without unreasonable delay.

All Users

You may request access to, correction of, or deletion of your personal data by contacting us at contact@meatmarketplanner.com.

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of personal information. These rights apply to personal information as defined by the CCPA and do not apply to anonymized or aggregated data.

EEA Residents (GDPR)

If you are located in the European Economic Area, you have additional rights including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. You also have the right to lodge a complaint with your local supervisory authority. Our legal bases for processing are described in the "Legal Basis for Processing" section above.

Texas Residents (TDPSA)

Under the Texas Data Privacy and Security Act, you have the right to access, correct, delete, and obtain a copy of your personal data. These rights apply to personal data as defined by the TDPSA and do not apply to anonymized or aggregated data. To exercise these rights, contact us at contact@meatmarketplanner.com.

You create your own account in the app, with an email address or with Sign in with Apple. An account is optional: everything except sync across devices works without one.

You can delete your account in the app, under Settings, in the Your account section. It removes the account and the app content attached to it, and any link you shared stops working for the people you sent it to.

You can also ask us to do it. Write to contact@meatmarketplanner.com from the email address associated with your account. We remove your account and its content from our active databases within 30 days, as described under Data Retention, and any link you shared stops working.

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at contact@meatmarketplanner.com and we will delete it.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

If you have questions about this Privacy Policy, contact us at contact@meatmarketplanner.com.