ParmaMaster Privacy Policy

ParmaMaster is a free iPhone app for rating chicken parmas. It's made by Hamish Ferguson, an individual developer in Victoria, Australia ("we", "us"). This policy explains what the app collects, why, where it's kept, who can see it, and how to delete it.

1. Without an account: your iPhone and your own iCloud

You can use ParmaMaster without an account. Then none of it is sent to us. It stays on your iPhone, and in your own iCloud if your iPhone uses it (see the next section):

• Your Parma Log: pubs, their addresses and map positions, ratings, prices, notes, photos and dates.
• Your want-to-try list and settings.
• Location: if you allow it, ParmaMaster uses your location on your iPhone to suggest nearby pubs. If you turn on location-based reminders, it also uses it to notice when you visit a pub. Your location is never sent to us.
• Pub search: searching for a pub uses Apple Maps, which Apple provides under its own privacy policy.
• Camera and photos: used only when you take or choose a photo of a parma. Photos are stored inside the app.
• Reminders: notifications are scheduled on your iPhone.

iCloud

If you don't have an account and your iPhone is signed into iCloud, your Parma Log, photos and settings are stored in your own private iCloud storage so they sync across your devices. Apple stores this data; we can't see it. When you create an account or sign in, it moves to your account and is deleted from iCloud.

2. With an account: what we collect

Creating an account is optional. It turns on friends and group sessions, and keeps your Parma Log in your account. When you have an account, we collect the following.

Your account

• Your email address and password. Passwords are handled by Firebase Authentication; we never see them.
• An account ID, and when the account was created and last signed in.
• The version of the Terms of Use you agreed to, and when.

Your public profile

Anyone signed in to ParmaMaster can see your profile if they search for you or open it, except people you've blocked. It shows:

• your name, username, bio and profile photo;
• your friend count (if you show it);
• the stats you pin;
• the date you joined.

If Appear in Search is on, we also store lowercase copies of your name and username so people can find you.

What you share with friends

Only friends can see these, and only the parts you switch on in Edit Profile and Account & Privacy:

• your stats;
• your top three;
• your full Parma Log;
• your friends list.

A shared rating includes:

• the pub's name, address, area and map position;
• your scores and the date;
• the price you paid (only with Show Prices);
• the photo (only with Include Photos).

Your notes are never shared with anyone.

Friends and blocks

• Who you're friends with.
• Friend requests you send and receive.
• Who you've blocked.

Group sessions

• The pub, who was invited and who joined.
• Each member's rating from the session: their name, username, profile photo, the pub, scores and price.

Everyone who took part in a session can see its ratings.

Your Parma Log in your account

While you're signed in, your whole Parma Log is saved in your account, notes included, with compressed copies of your photos. It also holds your want-to-try list, your app settings and a random ID for each device that saved to it. Your iPhone keeps a copy so the app works offline; that copy is removed from your iPhone when you sign out. Only you can read your Parma Log. Not your friends, and not other users.

Reports

If you report someone, we keep:

• your account ID;
• who and what you reported;
• the reason and any details you add;
• a copy of the reported content, including any photos, so we can review it.

If someone reports you, we keep the same about that report.

If we act on a report about you, your account gets a strike. You can see your strikes, and a copy of what was reported, in Settings › Account Status; you never see who reported you. If you appeal, we keep your note with the strike.

Technical information

Google's servers process technical information such as IP addresses, to deliver the service and keep it secure. We don't use it for anything else.

3. How we use it

We use your information only to:

• run ParmaMaster's features: your profile, friends, sharing, group sessions and your saved Parma Log;
• keep accounts secure;
• keep ParmaMaster safe: we check names, usernames and bios against a list of blocked words, and we review reports and act on them;
• reply when you contact us.

We don't use it for advertising or profiling. We don't track you across other apps or websites, and we don't sell or rent your information.

4. Who can see it, and who we share it with

• Other ParmaMaster users see only what's described in section 2, as your settings allow.
• Google Firebase (Google LLC) stores and processes account data for us. We use Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions and Firebase Hosting.
  • Google acts as our service provider under the Firebase and Google Cloud data processing terms.
  • It protects your information at least as well as this policy requires, and may use it only to provide the service to us.
• Our email delivery service (Resend) receives the details of reports and appeals so they can be emailed to us. It's used for nothing else.
• Apple provides the App Store, Apple Maps and iCloud under its own privacy policy. Your iCloud data is held by Apple, and we can't see it.
• Authorities, if the law requires it, or to protect someone's safety.

Where your information is stored

Firebase stores ParmaMaster's data in the United States:

• Cloud Firestore: US multi-region;
• Cloud Storage: us-east1;
• Cloud Functions: us-central1.

So if you live in Australia or elsewhere, your account information is sent overseas. We rely on Google's contractual commitments to protect it.

5. How long we keep it, and deleting your account

• Your account data is kept while you have an account.
• Switching sharing off withdraws that information straight away. This applies to Share Full Parma Log, Include Photos, Show Prices, Show Stats, Show Top 3 and Friends Can See Your Friends.
• Signing out keeps your account and your Parma Log, which is saved in your account. The log is removed from your iPhone and comes back when you sign in again.
• Deleting your account: go to Settings › Account & Privacy › Delete Account. This permanently deletes:
  • your sign-in account, profile and username;
  • your shared ratings, stats and photos;
  • your friendships, friend requests and blocks;
  • your Parma Log in your account.

  If you delete your account, ratings you gave in group sessions remain visible to that group as "Former member", without your name, username or photos.

  A group session that nobody else joined is deleted completely. A server clean-up removes anything left behind, normally within 24 hours. Your friends' iPhones may keep a cached copy of what you shared until their app next refreshes. Your Parma Log on your own iPhone is removed too.

• Reports, with the copy of reported content and photos, are deleted 30 days after we deal with them, or once we've decided an appeal if that's later. A strike's record (its date, reason and outcome, without the content) is deleted when the strike expires, 90 days after it's given. Reports you made are deleted with your account.
• Banned accounts: if we ban an account for breaking the Terms of Use, it's suspended straight away: its owner can't sign in and nobody else can see it. If the ban isn't lifted, we delete all of the account's data after 30 days. We keep a disabled sign-in record with its email address, so that address can't be used to sign up again.
• Data on your iPhone stays until you delete it (Settings › Sync & Reset), sign out, or delete the app.

6. Your choices and rights

• See and correct your profile at any time in Edit Profile.
• Withdraw consent:
  • switch sharing off;
  • sign out;
  • delete your account;
  • turn off Location, Camera or Notifications for ParmaMaster in the iPhone's Settings app.
• Ask us for a copy of the information we hold about you, or to correct or delete it, by emailing us (below). We'll reply within 30 days.
• Complain: contact us first. In Australia, you can then complain to the Office of the Australian Information Commissioner (oaic.gov.au). Elsewhere, you can complain to your local data protection authority.

7. Children

The Parma Log can be used by anyone. Accounts, friends and group sessions are for people aged 16 and over.

Before you sign in or create an account, ParmaMaster asks Apple for your age range, using Apple's Declared Age Range feature. That range is the one you, or your parent or guardian, gave Apple; it isn't checked against an ID. If you don't share it, we ask for your date of birth instead. We keep only whether you're 16 or over, on your iPhone. We don't keep your age range or your date of birth, and neither is sent to us. ParmaMaster checks again from time to time while you're signed in.

If the check shows you're under 16, friends, group sessions and sharing are turned off on that iPhone, and you can keep using the Parma Log. If your age range is wrong, you or your parent or guardian can change it on your Apple Account, then ask the app to check again in Settings. We can't change it or lift the check for you.

We don't knowingly collect information from anyone under 16. If we learn that someone under 16 has an account, we'll delete it. If you think a child has an account, email us.

8. Security

• Information travels over encrypted connections (HTTPS).
• Firebase security rules let each person read only what they're allowed to see.
• Your Parma Log in your account is readable only by you.

No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

9. Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects what we collect or share, we'll tell you in the app before it takes effect.

10. Contact us

Hamish Ferguson, ParmaMaster
Email: support.parmamaster@fergohamish.com
Support: parmamaster.fergohamish.com/support