Privacy Policy

Last updated: November 4, 2026

This policy explains which personal data the Wonderfood app collects, why, who it is shared with and what your rights are, as required by the EU General Data Protection Regulation 2016/679 (GDPR).

1. Data controller

The controller is Francesco Scalise, the developer of Wonderfood, in Italy.
For any privacy question, write to privacy@wonderfood.scalise.dev.

2. What we collect

Data you give us

• Account: email, username, first and last name, date of birth and password. The password is stored only in encrypted form (a hash): nobody can read it.
• Profile: profile photo, bio, favorite food and whether your profile is public or private.
• Content: your posts with their photos, description, food and the place you choose (the place's name, address and location); likes, comments and the people you follow; trips (name, emoji, place, dates, participants and cover photo); your list of foods to try; the new foods you propose for the FoodDex.
• Reports and blocks: the users or posts you report, with the reason, and the users you block.
• Support messages: the emails you send us.

Data created while you use the app

• Activity in the app: the foods unlocked in the FoodDex, badges, notifications.
• Push notifications: if you turn them on, a device identifier provided by Apple to deliver them.
• Technical and security data: IP address and information about the requests to the server (technical log), and failed sign-in attempts, to stop anyone trying to guess passwords.

What we don't collect

• Your location: the app uses it only while you pick a place to add to a post, to show you the ones nearby. Your location is never saved or sent to the server: only the place you choose is saved.
• Hidden data in photos: before uploading them, the app rebuilds your photos without their metadata, including the GPS location where they were taken.
• No ads, no analytics or tracking tools, no profiling. We don't sell or hand over your data to anyone.

Some preferences (theme, language, map style) and a copy of the images already downloaded stay only on your device.

3. Why we use it, and on what basis

• Running Wonderfood (account, profile, posts, trips, FoodDex, in-app notifications, emails with verification codes): necessary to provide the service you asked for (art. 6.1.b GDPR).
• Security and abuse prevention (technical log, limits on sign-in attempts, handling reports): legitimate interest in protecting you, other users and the service (art. 6.1.f).
• Push notifications: only if you allow them; you can turn them off at any time in the app's or iOS settings (art. 6.1.a).
• Answering support requests and meeting legal obligations (art. 6.1.b and 6.1.c).

Your date of birth is used to check that you meet the minimum age (see section 8) and is never shown to other users.

4. Who sees your data

• Other users see your username, name, profile photo, bio, posts and progress. If your profile is private, only the followers you accepted see your posts. Shared trips are seen by their participants.
• Never visible to others: your email, date of birth, reports, blocks and settings.
• The controller accesses data only when needed: to run the service, answer support requests and review reports.

5. Where your data is, and who helps us

Data and photos are stored on a server run directly by the controller, in Italy. To run the app we rely on these providers, which process data only on our behalf:

• Cloudflare, Inc.: protects and routes the traffic between the app and the server (it receives your IP address and the requests), and forwards the emails sent to our addresses.
• Resend, Inc.: sends the emails with verification codes, from servers in the European Union (it receives your email address and the email's content).
• Apple Inc.: delivers push notifications to your device.

These providers are based in the United States: data is transferred under the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.

6. How long we keep it

• Account and content: as long as you have the account. You can delete posts, comments and trips at any time.
• When you delete your account (Settings → Delete Account, with a code sent to your email), your profile, posts, photos, trips and all other related data are deleted right away. Backup copies are overwritten within 14 days.
• Technical log and sign-in attempts: only as long as needed for security and troubleshooting.
• Support emails: as long as needed to handle the request.

7. Your rights

At any time you can ask to access your data, correct it, delete it, restrict its use, object to processing based on legitimate interest, receive it in a readable format (portability) and withdraw any consent you gave.

• You can do much of this directly in the app: edit your profile, download all your data (Settings → Download My Data), delete your account.
• For anything else, write to privacy@wonderfood.scalise.dev: we answer within one month.
• If you believe your data is not handled correctly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the country where you live.

8. Minimum age

Wonderfood is only for people aged 16 or over. If we find out that an account belongs to someone younger, we delete it. If you think someone under 16 is using the app, please let us know.

9. Security

Communication between the app and the server is always encrypted (HTTPS). The server can't be reached directly from the internet: only the app's traffic gets through, via Cloudflare. Passwords are stored in encrypted form, and each user can only see and change their own data. No system is 100% secure: if a breach affecting you ever happens, we will tell you as the law requires.

10. Changes

If we change this policy, we update the date at the top of the page. If the changes are significant, we tell you in the app or by email before they take effect.