Privacy Policy
Last updated: 22 June 2026
Who we are
HangryMatch is a free restaurant-matching app. The data controller is the HangryMatch team, contactable at privacy@hangrymatch.com.
What data we collect and why
| Data | Why | How long |
|---|---|---|
| Your location | To search for restaurants near you | Your precise location is used only during the active session; within 24h of session expiry your name is deleted and your location is reduced to an approximate area. Swipes are then kept only as anonymous records |
| Your name | To identify you to your group during a session | Your precise location is used only during the active session; within 24h of session expiry your name is deleted and your location is reduced to an approximate area. Swipes are then kept only as anonymous records |
| Your swipes | To detect a group match | Your precise location is used only during the active session; within 24h of session expiry your name is deleted and your location is reduced to an approximate area. Swipes are then kept only as anonymous records |
| Your IP address | Rate limiting (security) | Stored by HangryMatch for up to 2 hours, then auto-deleted. Cloudflare may also process IP addresses for its own security purposes. |
| Usage analytics | To understand how the app is used and fix bugs | Retained by PostHog per their policy (EU-hosted). Name input fields are masked in session recordings. |
No accounts. No email addresses. No payment data. No persistent user profiles.
Third-party services
- Supabase (EU) - database hosting. Session, participant, and swipe data is stored here.
- PostHog (EU) - analytics. We collect pageviews, JavaScript errors, and session replays to diagnose bugs and improve the product. Name input fields are masked in recordings. PostHog is hosted in the EU.
- Cloudflare - hosting and security. Cloudflare may process connection data including IP addresses for its own operational and security purposes. See Cloudflare's privacy policy(opens in new tab).
- Google Places API - restaurant search. Your location is sent to Google as a search parameter to find nearby restaurants. HangryMatch does not retain this data beyond your session. Google's processing is governed by Google's privacy policy(opens in new tab) and Google's API Terms of Service, which include data processing terms.
Legal basis (GDPR)
- Session data (location, name, swipes): legitimate interest in providing the service you requested (Article 6(1)(f))
- Analytics and rate limiting: legitimate interest in operating and improving a secure, functional service (Article 6(1)(f))
Your rights
Under GDPR you have the right to access, correct, or erase your data, and to object to processing. Since your personal data is deleted within 24 hours of session expiry, it is gone quickly. For any requests, contact privacy@hangrymatch.com.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the "last updated" date at the top of this page.