Privacy Policy

Our Philosophy: Your Data Works for You

At Bonapi, we believe your data should benefit you, not advertisers. Unlike traditional apps that monetize your information through ads and third-party sales, we use your data exclusively to improve your personal taste recommendations.

Information We Collect

Account Information

When you create an account, we collect:

• Email address (for authentication and notifications)
• Name (optional, for personalization)
• Allergen information (critical for your safety)
• Dietary preferences (for relevant recommendations)

Your Taste Graph

To build your personalized recommendations, we collect:

• Venues you visit (via QR scans)
• Dishes you rate and your emotional responses
• Categories you explore and unlock
• Recommendations you interact with
• Badges and achievements you earn

Device Information

For app functionality:

• Device type and operating system
• App version
• Push notification tokens (if enabled)

How We Use Your Data

Data Sharing

We do not sell your personal data. Period.

What We May Share (Anonymized Only)

We may share anonymized, aggregated insights with restaurant partners:

• "60% of diners prefer spicy dishes" - never identifying you personally
• Aggregate menu performance data to help venues improve

What We Never Share

• Your identity with restaurants
• Your taste profile with advertisers (we don't have advertisers)
• Your personal information for marketing purposes
• Your data with any third party for their commercial use

Service Providers

We use trusted service providers for:

• Cloud hosting (EU-based servers)
• Email delivery for notifications
• Error monitoring and performance

These providers are bound by strict data protection agreements.

Your Rights

You have complete control over your data:

• Access - Download all data we have about you
• Correct - Update inaccurate information anytime
• Delete - Request complete account and data deletion
• Export - Take your Taste Graph with you
• Opt-out - Disable specific data collection features

To exercise these rights, contact us at [email protected].

Data Security

We protect your data with enterprise-grade security:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Strict access controls and monitoring
• EU-based cloud infrastructure
• GDPR-compliant data handling practices

Cookies

We use minimal cookies:

• Essential - Authentication and security (required)
• Preferences - Remember your settings (optional)

We do not use advertising, tracking, or third-party analytics cookies.

Children's Privacy

Bonapi is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us immediately.

International Data Transfers

Your data is primarily stored in EU data centers. Any transfers outside the EU comply with GDPR requirements using appropriate safeguards.

Changes to This Policy

We'll notify you of significant changes via email or in-app notification. Continued use after changes constitutes acceptance.

Contact Us

Questions about privacy? Reach us at:

• Email: [email protected]