Privacy Policy

Last updated: 25 June 2026

CraveSave ("the app", "we", "us", "our") is operated by Nyme LLC, a limited liability company registered in the United Arab Emirates (License No. 2430001.01). This policy explains what information we collect, why, and your choices. Questions? Email hello@cravesave.io.

1. Information we collect

• Account details. When you sign in, we collect your email address, and — if you use Google sign-in — your basic Google profile information (name and profile picture). We do not receive your Google password.
• Places you save. The restaurants and places you add (name, category, cuisine, price, rating, area, map coordinates) and which list they're on.
• Location. If you grant permission, your device's approximate location, used only to show places near you and centre the map. We do not track or store your location history.
• Usage data. Basic, privacy-friendly analytics (e.g. pages opened, features used) to understand and improve the app. We do not build advertising profiles.

2. How we use your information

• To provide the core service: saving places, syncing them across your devices, showing them on a map, and the "decide for me" and sharing features.
• To authenticate you and keep your account secure.
• To send you sign-in codes/links and, if applicable, friend invitations you initiate.
• To understand usage and improve the product.

3. Sharing of information

We do not sell your personal information. We share data only as needed to run the service:

• When you choose to share. If you create a public share link, the places on that list become viewable by anyone with the link until you stop sharing.
• Service providers (processors) who operate parts of the app on our behalf, under contract: Supabase (database, authentication, hosting of your data), Google (sign-in and Places data via Google Maps Platform), Resend (sending sign-in and invitation emails), and Netlify (web hosting).
• Legal reasons, if required to comply with applicable law or protect rights and safety.

4. Google user data

CraveSave's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use your Google sign-in data only to create and secure your account, and never sell it or use it for advertising.

5. Cookies and local storage

We use your browser's local storage to keep you signed in and to cache your list for offline use and speed. We do not use third-party advertising cookies.

6. Data retention

We keep your account and saved places for as long as your account is active. If you ask us to delete your account, we remove your personal data and saved places, except where we must retain limited records to comply with law.

7. Your rights

Depending on where you live (including under the UAE Personal Data Protection Law and, for EU/UK users, the GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email hello@cravesave.io and we'll respond within a reasonable time.

8. Data location and transfers

Your data is stored with our service providers, whose servers may be located outside your country (including the UAE, EU, and US). Where required, we rely on appropriate safeguards for such transfers.

9. Children

CraveSave is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we'll delete it.

10. Security

We use reputable providers and standard safeguards (encryption in transit, access controls, per-user data isolation). No method of transmission or storage is 100% secure, but we work to protect your information.

11. Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date above and, for material changes, take reasonable steps to notify you.

12. Contact

Nyme LLC — United Arab Emirates.
Email: hello@cravesave.io