FoodSpot

Privacy Policy

Last updated: 20 October 2026

FoodSpot (“we”) is an Android app, made by ftwco., that pins restaurants you discover in Instagram and YouTube food reels on a map. This policy explains what data FoodSpot uses, where it goes, and the choices you have.

1. Data that stays on your phone

• Your saved spots: restaurant names, addresses, map positions, your notes, and the link and creator of the reel each came from. They’re stored only on your device. Uninstalling FoodSpot deletes them.
• Your location: if you allow it, FoodSpot uses it to show where you are on the map. Your exact location never leaves your phone. When you share a reel, FoodSpot may send an approximate position to the place-search service below so that nearby restaurants rank first.
• Creator profile cache: public profile details (name, photo, follower counts) of creators whose reels you saved, kept so their profiles open quickly.

2. Services FoodSpot contacts

To do its job, the app makes requests to these services directly from your phone. They see your IP address and the request, under their own privacy policies:

• Instagram and YouTube: to read the public caption, title and creator of a reel you share, and public creator profile pages.
• OpenStreetMap Nominatim and Photon (komoot): to turn restaurant names and addresses into map positions. Search text, and sometimes an approximate position, is sent.
• OpenFreeMap: map tiles. unpkg and Google Fonts: the map’s code and fonts.
• Google Maps: when you tap “Let’s go”, the destination opens in Google Maps.
• GitHub: hosts this website, shared-spot links and app downloads.

3. Sharing a spot

A shared spot link contains the spot itself (name, address, map position, reel link and creator), encoded in the part of the link after “#”. It isn’t uploaded to our server. Anyone you send the link to can see those details.

4. Creators who claim their profile

Creators can claim their FoodSpot profile and connect their other social accounts by signing in with Instagram or Google (YouTube). When they do:

• We receive their account’s ID, username/handle and display name, and store them on our server (Cloudflare) with the time they connected, so every FoodSpot user can see the connected accounts.
• We use the platform’s access token once, during sign-in, to read those details, and then discard it. We don’t store access tokens, and we don’t post, message or read anything else.
• Permissions requested: Instagram instagram_business_basic (profile basics of a professional account); Google youtube.readonly (to identify your YouTube channel).
• A creator can disconnect an account or remove their profile at any time in the app (profile → “You manage this profile” → Options), or see Delete your data.

FoodSpot’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. FoodSpot uses YouTube API Services: by connecting a YouTube account you agree to the YouTube Terms of Service, and Google’s data use is covered by the Google Privacy Policy. You can revoke FoodSpot’s access at any time from your Google Account permissions or Instagram’s “Apps and websites” settings.

5. Children

FoodSpot isn’t directed at children under 13, and creator sign-in is for adults with professional social media accounts.

6. Changes and contact

We’ll update this page if anything changes, and change the date above. Questions or requests: privacy@foodspot.app.