Who we are (the controller)

OSIH Company — Original Software Intelligent Hardware — operator of HungryButNotStupid. Under Swiss law (revised FADP, in force since September 2023) and, where it applies to you, the EU GDPR, OSIH Company is the data controller.

Email
[email protected]
Phone
+41 34 530 0372
Web
osih.ch
Address
OSIH Company, Wynigen, Bern, Switzerland

Privacy by design and by default

We do not run a behavioural profile of you across the web. We do not sell data. We do not place advertising trackers. The product works without us knowing your name, your face, or your habits beyond what the food concierge actually needs in the moment.

What we collect, and why

  • Account identifier. When you sign in, our authentication provider (Firebase Authentication) gives us a stable user ID, and the email or phone you used to sign in. Purpose: keep your credits, history, and shared picks attached to you. Legal basis: contract performance.
  • Approximate location. When you ask for a pick, we use your city, neighborhood, or coarse coordinates to find restaurants near you. Coordinates stay on your device by default and are only sent when you explicitly run a scout. Purpose: give you a relevant local answer. Legal basis: contract performance / consent.
  • Your scout queries and results. The query you typed, the restaurant we picked, the city context, and the share slug if you shared it. Purpose: deliver the answer, let you re-open it later, power the share preview at /r/{slug}. Legal basis: contract performance.
  • Payment data. Handled by Stripe and, in some regions, mobile-money providers. We see the fact that a payment succeeded, the amount, and a token; we do not see or store your card number. Purpose: process the payment. Legal basis: contract performance.
  • Anti-abuse signals. A Firebase App Check token, IP address, and basic device fingerprint for rate limiting and bot detection. Purpose: stop scrapers and credit abuse. Legal basis: legitimate interest.
  • Server logs. Standard request logs (URL, status code, timestamp, IP) kept for a short window for security and debugging. Purpose: keep the service up and safe. Legal basis: legitimate interest.

We do not collect: contacts, calendar, microphone, camera, advertising IDs, browsing history outside our app, or any special-category data (health, religion, politics, etc.).

Where your data lives

HungryButNotStupid runs on a small, deliberate set of providers:

  • Google Firebase (Authentication, Firestore, App Check) — United States / EU.
  • Cloudflare (Pages, Functions, R2 object storage in the EU jurisdiction) — EU.
  • Render (API hosting) — United States / EU regions.
  • Stripe (payments) — United States / EU.
  • Resend (transactional email) — United States / EU.
  • Google Gemini (the AI that drafts the food picks) — United States / EU.

Where data is transferred outside Switzerland and the EU, we rely on the providers’ Standard Contractual Clauses and equivalent safeguards.

How long we keep it

  • Account record: while your account exists, plus a short window after deletion for fraud prevention.
  • Scout results: kept so you can re-open them and so share links keep working. You can ask us to delete any of yours.
  • Payment records: kept for as long as Swiss accounting rules require (currently 10 years).
  • Server logs: typically 30 days.

Your rights

Under the Swiss FADP and the GDPR you can ask us to:

  • Tell you what we hold about you.
  • Correct it.
  • Delete your account and the data attached to it.
  • Export your data in a portable format.
  • Withdraw consent (for anything we do on the basis of consent).
  • Object to processing based on legitimate interest.

Send any of these requests to [email protected]. We aim to reply within 30 days. You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or your local EU data protection authority.

Cookies and similar tech

We use a small number of strictly necessary storage items to keep you signed in and to remember your language. We do not run third-party analytics or advertising cookies.

Children

HungryButNotStupid is not designed for children under 16. If you believe a child has created an account, write to us and we’ll remove it.

Changes

If we change this policy in a way that affects you, we’ll update the date at the top and, where the change is meaningful, tell you in the app the next time you open it.