Privacy
Updated 8 October 2026
This notice explains the information KaleMap uses to find restaurants, filter menus, operate accounts and subscriptions, publish contributions, and protect the service.
Accounts and preferences
When you sign in, we store your email address, display name, account settings, saved restaurants, restaurant-access records and subscription status. Your display name accompanies public contributions, so choose one you are comfortable publishing. Sign-in links expire after 15 minutes. Session cookies can last up to 90 days; signing out ends that session. If you register a passkey, we store its public credential and verification information, not your fingerprint or face scan.
Your selected dietary preferences are used to filter results and are stored on your device and, when saved to an account, with that account. These choices can reveal health or religious information. You can change or clear them in settings. Do not include medical records, diagnoses or other people's sensitive information in reviews, reports or uploads. A dietary safety acknowledgement is not a guarantee that food is safe.
Location and searches
If you allow browser location access, we use your position to centre the map and request restaurants nearby. You can instead search a place or move the map. Your location choice, last position and map view may remain in this browser's storage until you clear site data. Requests to our servers include the area you browse or search; exploring an area may start shared restaurant discovery. Network information can also provide an approximate location. Revoke location permission in your browser to stop future device-location access.
Contributions, sources and automated processing
Reviews, dish confirmations and menu or food photos you submit can appear publicly with your display name on restaurant listings. Public content may be indexed by search engines or copied by others. Reports of problems are stored for review, rather than published as reviews. Restaurant information also comes from public map datasets, restaurant websites and menus, public directories and member submissions. A source may contain contact details for a restaurant or its operator.
We use automated tools and AI providers, including OpenAI and Anthropic, to read menu text, classify dishes and cuisines, and help process reported problems. Uploaded menu photos can be converted into text for analysis. Relevant source material and report content can therefore be processed by these providers. Do not submit private material that is not needed for the feature. AI output may be wrong; it is not medical advice or restaurant certification. Provider processing is also subject to their applicable service terms and privacy practices; this notice does not promise that every provider deletes data immediately or excludes every use for model improvement.
Payments and service providers
Stripe processes checkout and subscription payments. We send account identifiers and your email or existing customer identifier to connect the payment to your account, and store payment-related identifiers, status and allowance records. Payment details entered in Stripe's hosted checkout are handled by Stripe rather than our application forms.
Cloudflare provides hosting, delivery, security, application storage and email delivery infrastructure. Service providers receive information needed to perform these functions, including technical request information. Operational notifications and reports may be reviewed by the people administering KaleMap.
The map requests data directly from OpenFreeMap, with Esri tiles used by the fallback map. Address and place searches use Nominatim. These providers receive your browser's network information and the map areas or search text requested. When you open directions, a restaurant website or another external link, that destination handles your request under its own privacy practices. Apple or Google Maps may receive the destination you choose.
Cookies, browser storage and abuse prevention
Cookies and local storage support sign-in, the anonymous restaurant allowance, dietary preferences, safety acknowledgement and map choices. The dietary-preference cookie can last up to one year; some local storage has no automatic expiry. The installed app can cache previously visited pages and assets. Clearing site data removes local records and may sign you out, but does not delete server-side account records.
We use keyed network hashes and coarse operating-system and language signals to limit repeated anonymous-allowance resets. These are pseudonymous signals, not a promise of anonymity. Shared networks can encounter limits. New-allowance abuse records expire after 24 hours and are cleaned up when another allowance is requested. Hosting and security providers also process technical request information, which can include IP addresses. We do not use canvas, audio, font or hardware fingerprints for this allowance check.
Optional public-page usage
Optional usage is off until you allow it in Usage choices. It records finite labels for Home, How it works, Data, Privacy and Terms, not dietary preferences, locations, searches, restaurant identities, account details or page text. Cloudflare hosts the first-party collector. A signed first-party cookie connects these pseudonymous records to this browser for up to 30 days. Global Privacy Control and Do Not Track prevent collection.
You can withdraw, export or erase this browser's individual usage in Usage choices. Withdrawal stops collection while keeping the unexpired rights cookie available. Individual records are retained for up to 30 days with bounded scheduled cleanup. Erasure does not remove operational security logs or previously aggregated counts. Cookie expiry or clearing site data can remove the credential needed to access these records. These choices are separate from account deletion.
Retention and your controls
Account and contribution records generally remain while the account or contribution exists; not every record has an automatic expiry. You can manage saved places, account settings and contributions through your account. The account-deletion control removes the account, sessions, saved places, votes, reviews, uploaded photos and associated application billing records, and attempts cancellation of an active subscription and deletion of the payment customer. If a required step fails, the app reports that deletion has not completed so you can retry. Deleting browser data alone does not cancel a subscription.
Deletion is not a promise that every copy disappears instantly. Shared restaurant facts and analysis, moderation or correction history, technical records, and copies already downloaded by others can remain. Payment providers can retain records for their own legal obligations. Account deletion is not a choice to keep your reviews anonymously. Removing a photo does not undo copies already obtained by others.
Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, object to or restrict processing, withdraw consent where processing relies on it, and complain to a privacy authority. The available account controls do not replace those rights. This notice does not establish a particular jurisdiction or waive any mandatory rights.
Terms and dietary safety
See the terms and safety information, including the rules for public uploads. Material changes to our practices require an updated notice and any additional notice or permission required by law; changing this page is not permission to use previously collected data for an incompatible purpose.