Privacy Policy

Effective date: September 15, 2026

Version: 2026-09-15

This Privacy Policy explains how Gaumo ("we", "us") collects, uses, and shares information when you use the Gaumo mobile application, our marketing website, and related services.

1. Who we are

Gaumo is operated by Alexander Turbin, an individual developer based in Germany. Contact: hello-gaumo@parrotlabs.xyz.

2. Information we collect

Account information

When you create an account, we collect your name and email address. If you sign up with email and password, your password is stored in hashed form via our authentication provider. If you sign in with Sign in with Apple or Google, we receive your name and email from that provider (Apple may provide a private relay email address) and store a provider identifier so you can sign in again. We do not receive your Apple or Google password.

Android waitlist (marketing site)

If you join the Android release waitlist on our marketing website, we collect your email address and record that you accepted the current Terms of Service and Privacy Policy. We may also store technical metadata (IP address, browser user agent, referring page, and optional campaign parameters such as UTM tags) to measure interest and attribute sign-ups to marketing campaigns. We use this information to notify you when an Android app becomes available and to understand demand. You do not need a Gaumo account to join the waitlist.

User-generated content

When you use Gaumo, we store content you submit, including dish ratings (score, optional comment and photo), saved dishes, hidden items, private venue notes, dishes and venues you add, and profile photos.

Location

With your permission, we use your device's location to show nearby dishes and venues. Location is used when you grant "while using the app" access; we do not track location in the background.

Device and usage data

We collect technical information needed to operate the service, including session identifiers, IP address, and user agent when you sign in, accept legal documents, or interact with our marketing pages (for example, viewing the Android waitlist page or tapping its download button).

Crash and error reporting

If configured, we use Sentry to collect crash reports and error diagnostics. This may include device type, app version, and stack traces. Sentry is optional in local development.

App usage (EAS Insights)

On release builds distributed via Expo Application Services (EAS), we use EAS Insights to collect aggregate app-open events (cold starts). This may include platform (iOS/Android), app store version, and timestamps. It does not include your account details, ratings, or location. EAS Insights is not active in local Expo Go development.

Product analytics (PostHog)

If configured, we use PostHog to understand how people use Gaumo — for example, which screens are viewed, whether guests sign in after an auth prompt, and whether flows like saving a dish or adding a place complete. Events may include action names, related entity identifiers (such as dish or venue IDs), app version, platform, and similar device/app metadata. We do not send precise GPS coordinates in analytics events. Analytics may be linked to your account after you sign in. PostHog may process data in the EU when we use PostHog Cloud EU. PostHog is optional in local development when no analytics key is configured. See PostHog’s privacy policy.

Operations notifications (Telegram)

If configured, we send best-effort operational notifications to a private Telegram chat operated by the Gaumo team when certain high-signal actions occur — for example, account sign-up or deletion, adding a venue or dish, submitting a rating with a photo or comment, reporting a price, setting a profile photo, opening a moderation review, or submitting a content report. These messages may include your display name, a short portion of your internal user ID, and metadata about the action (such as dish or venue names, rating details, moderation status, or report reason). We do not include your email address in Telegram notifications. Telegram is optional; when not configured, no notifications are sent. Messages are transmitted via the Telegram Bot API and processed by Telegram according to their privacy policy. See Telegram’s privacy policy.

3. How we use information

We use your information to:

• Provide and improve Gaumo (discovery, ratings, saves, contributions)
• Authenticate you and maintain your session
• Enforce our Terms of Service and protect the platform
• Respond to support requests
• Notify Android waitlist subscribers when an Android app is available
• Measure marketing interest (page views and button taps on the Android waitlist page)
• Diagnose crashes and errors (when Sentry is enabled)
• Measure aggregate app usage on release builds (EAS Insights)
• Measure product usage and funnels (when PostHog is enabled)
• Monitor high-signal contributions and safety events for internal operations (when Telegram is enabled)

We do not sell your personal information.

4. How we share information

We share information only as needed to operate Gaumo:

| Recipient | Purpose |

|-----------|---------|

| Cloud hosting (database, API) | Store and serve your data |

| AWS S3 | Host photos you upload |

| Google Places | Venue search and address autocomplete (queries sent when you search) |

| Google (Sign in with Google) | OAuth sign-in when you choose that option |

| Apple (Sign in with Apple) | OAuth sign-in when you choose that option |

| Sentry (optional) | Crash and error reporting |

| Expo (EAS Insights) | Aggregate app-open telemetry on EAS release builds |

| PostHog (optional) | Product analytics and funnel measurement |

| Telegram (optional) | Internal ops notifications for sign-ups, contributions, moderation, and reports |

| Email provider | Verification, password-reset, and waitlist notification emails |

We may disclose information if required by law or to protect rights and safety.

5. Cookies and sessions

Gaumo uses HTTP cookies to maintain your signed-in session. These are essential for authentication and are not used for advertising.

6. Data retention

We retain your account data while your account is active. When you delete your account (see Profile → Delete account):

• Your name and email are masked and you cannot sign in again
• Saved dishes, hidden items, venue notes, and price reports you submitted are removed
• Your dish ratings may remain in anonymized form so aggregate scores stay meaningful
• Records of your acceptance of Terms and Privacy are retained for legal compliance (no personal data in those records beyond your internal user ID)

Android waitlist emails are retained until we notify you about the Android release or you ask us to remove your address. Contact hello-gaumo@parrotlabs.xyz to opt out of the waitlist.

7. Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data. Account deletion is available in the app. Contact hello-gaumo@parrotlabs.xyz for other requests, including removal from the Android waitlist.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and hashed passwords. No method of transmission is 100% secure.

9. Children

Gaumo is not directed at children under 13. We do not knowingly collect data from children under 13.

10. International transfers

Your data may be processed in countries where our service providers operate. We take steps to protect data in line with applicable law.

11. Changes

We may update this Privacy Policy. When we do, we publish a new version and may ask you to accept the updated policy before continuing to use Gaumo.

12. Contact

Privacy questions: hello-gaumo@parrotlabs.xyz.