Privacy Policy

RankIt (“we”, “us”, “our”) operates the website eatrankit.com and related mobile applications. We help people discover and rank local restaurants and dishes. Our contact email is support@eatrankit.com.

We collect information you provide directly, including:

• Account information (email address, display name, username, and an optional bio and profile photo)
• Rankings, lists, places you mark as visited, and notes you add
• Comments and other content you post
• Photos and captions you upload (for example, dish and restaurant photos)
• Optional social handles (Instagram, Facebook, TikTok) if you choose to provide them so we can credit you when featuring your photos
• Purchases: if you buy something in the app, such as a streak restore, Apple or Google takes the payment. We receive a record of the purchase (what was bought, when, and a transaction ID) through RevenueCat, linked to your account. We never see your card details.
• Messages you send to our support team

We also collect information automatically when you use our service:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (operating system, device type, app version) and a random identifier for your app install
• App usage events, such as which screens you open and which features you use (see section 3)
• If you allow notifications, a push notification token for your device and your time zone, so notifications arrive at a sensible local hour
• Your location, if you grant permission, used to show restaurants near you. Your coordinates are used for that search and are not stored. If you let the app find your city during setup, the name of the city is saved with your usage events.
• If you use RankIt on Apple Watch: when you pair the watch with your account, we record that watch (its app version, when it was paired and when it was last used) so you can see and remove it in your account settings. The city of a Top 10 you open on the watch is saved with your usage events. If you ask the watch to look up places near you that we do not list yet, your location is sent to Google Places for that one lookup and is not stored by us. If the RankIt app on your iPhone approves the watch, only the pairing code shown on the watch passes between your own iPhone and watch, through Apple.
• If you run the photo scan in our app, the location saved inside your photos. It is sent to our servers only to be compared with restaurants we already list, and it is not stored; the scan itself sends nothing to Google. If you pick photos in the app to look up and a picked photo matches no restaurant we list, that photo's location on its own is sent to Google Places so we can identify the restaurant there and add it. If you confirm a match, we add that restaurant to the places you have been, dated by when the photo was taken. If a place you added with an earlier photo scan has no visit date, a scan of your whole photo library fills it in the same way. Nothing else from the photo is saved. Your photos are never uploaded and their contents are never read.
• Cookies on our website (see section 6)

• To operate and improve the RankIt platform
• To personalise your experience and show relevant rankings
• To send transactional emails (account confirmation, password reset)
• To send occasional product news and feature updates by email. Every such email includes a one-click unsubscribe link, and opting out never affects transactional or account emails.
• To deliver and restore in-app purchases
• To detect and prevent spam, fraud, or abuse
• To comply with legal obligations
• To understand how RankIt is used. App events (for example, opening a screen or saving a ranking) are linked to your account ID, in our own database and in Google Analytics for Firebase, so we can see how features are used over time. On the website, when you are signed in, Google Analytics receives a coded version of your account ID for the same reason. On Android, Google Analytics for Firebase also reads your device's advertising ID. We never sell these events, and we never use them or that ID to target ads.

We do not sell your personal information to third parties.

We share information only in the following circumstances:

• Service providers, which process data on our behalf under data processing agreements:
  • Supabase (database and sign-in) and Vercel (website hosting)
  • Resend (email)
  • Google Cloud (Maps, Places and Vision APIs)
  • Google Tag Manager and Google Analytics 4 (website analytics, see section 6)
  • Google Analytics for Firebase (app analytics, linked to your account ID as described in section 3)
  • Apple and Google (Sign in with Apple and Sign in with Google)
  • RevenueCat (records of in-app purchases, linked to your account ID)
  • Stripe (payment processing on our website)
  • OpenAI (automated moderation of user-submitted text such as comments and photo captions)
  • Anthropic (AI generation of dish descriptions from user-submitted photos and captions, reading restaurant names from screenshots you choose to import into a list, which are not stored, and AI-assisted drafting of replies to support inquiries you send us)
  • Expo (push notification delivery and app updates; a notification’s content may include text submitted by you or another user, such as a new comment, photo report, or support message)
  • Meta (Facebook and Instagram Graph APIs, used to publish RankIt’s own social posts, and, only where you have given explicit in-app consent, to feature photos you have uploaded credited to the Instagram or Facebook handle you provided)
• App stores: in-app purchases are paid through the Apple App Store or Google Play, under their own terms and privacy policies.
• Your public profile: unless your account is private, your profile and ranked lists can be seen by anyone at eatrankit.com/u/your-username, and lists you share can be opened by anyone with the link. We ask search engines not to list these pages. A private account has no public page.
• Legal requirements: if required by law, court order, or to protect the rights and safety of RankIt or its users.
• Business transfer: in the event of a merger or acquisition, your data may be transferred as part of the transaction.

We publish content to our own social media pages (Facebook, Instagram) using their respective APIs. These posts are generally created from our own database: rankings, restaurant information, and images we generate.

Separately, if you upload photos to RankIt, you can choose to let them be featured in posts on RankIt’s social pages, and on the social pages of the restaurant the photo was taken at, credited to the Instagram or Facebook handle you provide. This only happens with your explicit in-app consent. It is off by default. You can withdraw this consent at any time in your profile settings, after which your photos will not be used in new posts; posts already published remain on those pages unless you ask us to remove them individually at support@eatrankit.com.

We use essential cookies to keep you signed in, and two small cookies that remember whether to ask about analytics and what you chose. These are always on.

We also use analytics cookies: Google Analytics 4, loaded through Google Tag Manager, and our own visitor ID, which counts visits in our database before you sign up. They help us see which pages help people.

If you are in the European Economic Area, the United Kingdom, Switzerland or Quebec, analytics cookies are off until you choose Accept on the cookie bar, and Google Analytics does not load at all before then. Everywhere else they are on by default.

You can change your choice at any time with Cookie settings at the bottom of any page. If you decline, Google Analytics does not load and we remove our analytics cookies from your browser. We remember your choice for about six months. Turning analytics off does not affect how RankIt works.

Our mobile apps do not use cookies. How they measure usage is described in section 3.

We retain your account data for as long as your account is active. If you delete your account, we remove your personal information within 30 days, except where retention is required by law. Anonymised, aggregated data (e.g. ranking statistics) may be retained indefinitely.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Export your data in a portable format

To exercise any of these rights, email support@eatrankit.com.

RankIt is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 13, please contact us and we will delete it promptly.

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. No system is completely secure; we encourage you to use a strong, unique password for your account.

We may update this policy from time to time. We will post the updated policy on this page with a new “Last updated” date. For material changes, we will notify you by email or via a notice in the app.

Questions about this policy? Contact us at support@eatrankit.com.