Introduction

Welcome to Aromap ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your information. This Privacy Policy explains our practices regarding personal data when you use our mobile application and related services (collectively, the "Service").

By using Aromap, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Location Data

Core to Our Service: Aromap analyzes your location data to understand your dining patterns and provide personalized restaurant recommendations.

• Precise Location: We collect real-time GPS coordinates when you grant location permissions

• Background Location: With your explicit consent, we track location in the background to identify restaurant visits

• Visit History: We record timestamps and duration of stays at restaurant locations

• Movement Patterns: We analyze routes and frequency of visits to specific venues

Privacy Measures:

• Location data is anonymized before analysis

• Raw location coordinates are processed and aggregated

• Individual movements are never shared or sold

1.2 Account Information

• Email address (for Apple Sign-In authentication)

• Username and display name

• Profile picture (optional)

• Account creation date

1.3 Usage Data

• App interactions and feature usage

• Device information (model, OS version, unique identifiers)

• Log data (access times, pages viewed, crashes)

• Search queries within the app

1.4 Social Features (Pro Users Only)

• Chat messages with other users

• Community interactions

• Taste preferences and shared favorites

2. How We Use Your Information

2.1 Core Service Functionality

• AI-Powered Recommendations: Analyze visit patterns to discover restaurants you truly love

• Personalized Rankings: Generate custom restaurant rankings based on your behavior

• Location Intelligence: Identify when you're at a restaurant to automatically log visits

2.2 Service Improvement

• Enhance AI algorithms for better recommendations

• Improve app performance and fix bugs

• Develop new features based on usage patterns

2.3 Communication

• Send important service updates and notifications

• Respond to your inquiries and support requests

• Notify you of changes to our policies

2.4 Aggregated Business Analytics (Enterprise Only)

• Provide anonymized market insights to restaurant businesses

• Generate competitive intelligence reports using aggregated data

• No individual user data is ever shared with businesses

3. Data Privacy & Anonymization

3.1 Location Data Protection

We take extraordinary measures to protect your privacy:

1. Anonymization Process:

• Location data is stripped of personally identifiable information

• GPS coordinates are generalized to restaurant-level precision

• Individual routes and timings are never stored in raw form

2. Aggregation for Business Intelligence:

• Enterprise features use only aggregated, anonymized datasets

• Minimum thresholds ensure individual patterns cannot be identified

• No business can access data about specific individual users

3. Data Minimization:

• We only collect location data necessary for service functionality

• Historical data older than 24 months is automatically deleted

• You can request immediate deletion of all location history

3.2 AI & Machine Learning

• AI models process anonymized data patterns

• Individual preferences are stored locally on your device when possible

• Model training uses aggregated datasets, never individual profiles

4. Data Sharing & Third Parties

4.1 We DO NOT Sell Your Data

Never. Your personal information, location data, and dining preferences are never sold to third parties, advertisers, or data brokers.

4.2 Service Providers

We may share data with trusted service providers who assist us:

• Cloud infrastructure providers (data storage and hosting)

• Authentication services (Apple Sign-In)

• Analytics tools (app performance monitoring)

All providers are contractually bound to protect your data and cannot use it for their own purposes.

4.3 Legal Requirements

We may disclose information if required by law, such as:

• Responding to valid legal requests (subpoenas, court orders)

• Protecting our rights, property, or safety

• Preventing fraud or illegal activities

4.4 Business Transfers

If Aromap is involved in a merger, acquisition, or asset sale, your data may be transferred. We will notify you and ensure the same privacy protections continue.

5. Your Rights & Choices

5.1 Access & Control

You have the right to:

• Access: View all personal data we have about you

• Correction: Update or correct your information

• Deletion: Request complete deletion of your account and data

• Export: Download your data in a portable format

• Opt-Out: Disable location tracking at any time (though core features will be limited)

5.2 Location Permissions

You control location access through your device settings:

• iOS: Settings → Privacy & Security → Location Services → Aromap

• You can revoke permissions at any time

• Background location is optional and can be disabled

5.3 Marketing Communications

• We do not send marketing emails without your consent

• You can opt-out of non-essential notifications in app settings

5.4 Data Retention

• Active account data: Retained while your account is active

• Deleted accounts: Data permanently erased within 30 days

• Legal requirements: Some data may be retained longer if required by law

6. Data Security

We implement industry-standard security measures:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)

• Access Controls: Strict internal access policies and authentication

• Regular Audits: Security assessments and vulnerability testing

• Incident Response: Protocols to address any potential breaches

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Children's Privacy

Aromap is not intended for children under 13 (or 16 in the EU). We do not knowingly collect data from children. If we discover such data has been collected, we will delete it immediately.

If you believe a child has provided us with personal information, please contact us at privacy@aromap.app.

8. International Users & GDPR

8.1 Data Transfers

If you are located outside the United States, your data may be transferred to and processed in the U.S. or other countries. We ensure adequate safeguards through:

• Standard Contractual Clauses (SCCs)

• Adequate data protection frameworks

8.2 European Users (GDPR)

If you are in the European Economic Area (EEA), you have additional rights:

• Right to object to data processing

• Right to restrict processing

• Right to lodge a complaint with your local data protection authority

8.3 California Users (CCPA)

California residents have specific rights:

• Right to know what personal information is collected

• Right to delete personal information

• Right to opt-out of data sales (we don't sell data)

• Right to non-discrimination for exercising privacy rights

9. Cookies & Tracking Technologies

9.1 What We Use

• Essential Cookies: Required for app functionality (authentication, preferences)

• Analytics: Understand app usage and performance (anonymized)

• No Advertising Cookies: We do not use cookies for ads or third-party tracking

9.2 Your Choices

• Mobile apps use device identifiers instead of traditional cookies

• You can reset your advertising ID in device settings (though we don't use it for ads)

10. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect:

• Changes in our practices

• New features or services

• Legal or regulatory requirements

We will notify you of significant changes via:

• In-app notification

• Email to your registered address

• Prominent notice on our website

Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

Email: privacy@aromap.app

Website: https://aromap.app/privacy

Mail: 82 Wendell Ave Ste 100, Pittsfield, MA 01201, USA

Data Protection Officer: dpo@aromap.app

13. Transparency Commitment

At Aromap, transparency is a core value:

• We will never introduce hidden tracking

• We will never sell your data to third parties

• We will always prioritize your privacy over profits

• We will be clear and honest about how your data is used

Your trust is our most valuable asset.

Summary (TL;DR)

✅ We collect location data to power AI recommendations

✅ We anonymize everything before analysis

✅ We never sell your data to anyone

✅ You control your privacy with easy opt-out options

✅ Enterprise features use aggregated data that cannot identify individuals

✅ We're transparent about our practices