Privacy
Last updated: 10 October 2026
Where Are We Eating (wawe) helps a group pick a place to eat, on whereareweeating.app and in the iPhone app. It is run by Impact Consulting AI LLC, a Florida company in the USA ("we"). Nobody needs to sign up to start a vote or to vote, and there are no ads.
What we keep
- Each vote: its title, its options (places, or words you typed), where each option came from (our suggestion, a search, or typed by hand), how many people the organizer expects, when it was made and when voting ended.
- Each ballot: the first name typed, the pick, the veto, and when it was cast. The organizer's first name, if they give one.
- Roughly where the group is: a point rounded to about a kilometer, or the city or ZIP code typed, so cards can show distances.
- Thumbs up or down on the winning place, added to totals per place.
- Reports ("Report this vote") and suggested fixes to a place ("Something wrong?"): the reason, and the note if you write one.
- If the organizer turns on updates in the iPhone app: that phone's notification token, kept with that one vote.
- If an organizer on the website asks for the "votes are in" email: that email address, used for that one email. The iPhone app never asks for an email address.
- When you start a vote: a random id your phone or browser makes for itself (not your name, number or any device identifier from Apple or Google), kept only as a scrambled code with that vote, so we can count how many different people start votes.
- Counts per day (visits, votes started, ballots), with nothing about any person.
- For limits that stop floods of requests: a scrambled code made from your network address that changes every day and is deleted after about a day. We never store the address itself.
Your location
If you tap "Use my location", your phone or browser finds where you are and wawe rounds it to about a kilometer on your device before sending it. We use the rounded point to find places nearby and, when you start a vote, keep it with the vote so cards can show distances. We never receive your exact location and we do not follow where you go. You can type a city or ZIP code instead.
If you sign in (optional)
Voters never need an account. An organizer can choose to save their votes with an account, using a passkey (Face ID, Touch ID or the device's screen lock) or Sign in with Apple. The account holds only: the passkey's public key, or Apple's account number for you (we ask Apple for no name and no email); for Sign in with Apple, a locked token from Apple that lets us end the link with Apple when you delete the account; the votes you saved; the crews you named and their sizes; and when the account was made and last used. There is no email address, name or password in it.
You can remove any vote from the list. "Delete my account" on the Your votes page deletes the account and everything in it at once, and, if you used Sign in with Apple, tells Apple to end the link. The votes themselves stay, and lose their names 30 days after they end, as for everyone.
How long we keep it
- Votes are kept. 30 days after a vote ends we remove every first name (ballots become "Voter 1, Voter 2"), the organizer's first name, the vote's title, options typed by hand, notes in reports about the vote, the "votes are in" email address, the starting device's random id, and every notification token. After that the vote shows only its places and the result, with no names. The rough location stays with the anonymous vote.
- Notes on suggested fixes to a place: removed 30 days after we deal with the suggestion.
- The daily code for request limits: about a day.
- Accounts: until you delete them.
- Error reports: deleted by Sentry automatically, within 90 days.
- Daily counts and the anonymous summaries per place: kept.
What we do with it
- Run each vote: show the places, count the picks and vetoes, show the winner, and send the notification or email the organizer asked for.
- Keep wawe friendly: names and typed words are checked against a list of blocked words, and we review every report.
- Make suggestions better, from anonymous records of which places groups consider and choose.
- We may share or sell anonymous, combined insights about places and areas, for example how often a kind of restaurant wins in a neighborhood. They never include names, email addresses, ids or anything else that identifies a person or a single group.
What we never do
- We do not sell or share your personal information, and we do not use it for advertising or profiling.
- No ads, no advertising ids, no analytics services, and no tracking across other apps or websites.
- We never ask for phone numbers, contacts or photos.
Error reports
When something breaks, an error report goes to Sentry, the service we use to fix bugs: what failed in the code, the browser or phone type, and the page (with the vote's code removed). No names, picks, locations, email addresses or network addresses are included.
On your phone
Your browser or the app remembers your first name, the votes you started or voted in (with the private keys that let you change your vote or end voting early), the random id described above, and recent votes' places for "Vote again with the same places". You can clear this by clearing the site's data or deleting the app.
Who sees what
- People with a vote's link see its title, places, first names and picks, until the names are removed.
- We see what is stored, to run wawe and to deal with reports.
- The services below, each only for its own job.
- Anyone the law requires us to tell, for example under a court order.
Services we use
- Vercel hosts the website and the app's server. Every request passes through it.
- Supabase hosts our database, in the USA. Everything listed under "What we keep" is stored there.
- Sentry receives the error reports described above.
- Resend sends the "votes are in" email from votes@whereareweeating.app, if you ask for it. It gets the address you gave and the email's text.
- Apple delivers notifications in the iPhone app (it gets the phone's notification token and the message), and handles Sign in with Apple if you use it.
- Cloudflare Turnstile checks that a browser starting a vote on the website is not a robot. Cloudflare looks at the browser and its network address for that check.
- OpenFreeMap sends the small maps, so it sees which map area is shown. Restaurant details come from Overture Maps open data, kept on our own server.
- Google Fonts sends the typefaces. Like any website, it sees the browser's request (network address and browser type).
Vercel and Supabase handle everything above for us, as our hosts. Of the others, only Resend and Apple get anything you gave us, as described.
Children
wawe is not meant for children under 13, and we do not knowingly collect information from them. If you think a child under 13 has used wawe, write to us and we will delete what they gave.
Your rights
Wherever you live, you can ask us what we hold about you, for a copy, to correct it, or to delete it. People in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other US states with privacy laws have these rights by law, and also the right to opt out of the sale of personal information, targeted advertising and profiling. We do none of those, so there is nothing to opt out of. We will not treat you differently for asking.
To ask, write to impactconsultingai@gmail.com with "Privacy request" in the subject. Voters have no account, so send the vote link and the first name you used, and we can find your ballot. An organizer with an account can delete it at any time on the Your votes page. Someone you have authorized can ask for you. We answer within 45 days. If we turn a request down, you can appeal by replying, and we answer the appeal within 60 days.
Keeping it safe
Everything travels encrypted (HTTPS). The keys that let someone change a ballot or end a vote are stored only as scrambled codes, and the Apple token is stored locked.
Changes
If this policy changes, the new version is posted here with a new date at the top.
Contact
Impact Consulting AI LLC, 1315 Oakfield Dr #1686, Brandon, FL 33509, USA
impactconsultingai@gmail.com