JYU food menu app Privacy Policy

1. Who provides the app

JYU food menu, also known as JYU ruokalistat, is provided by Alex Liao in Finland. The app helps users view student restaurant menus, opening hours, map locations, favourites, community content, and food-related recommendations.

2. Summary

• The app is ad-free. We do not sell personal data and we do not use advertising networks.
• Raw location coordinates are not stored in Firebase and are not sent to our menu or AI backend. Location is used to calculate nearby restaurants on your device. Map and operating-system providers may process data when their services are used.
• Account, profile, community, notification, feedback, moderation, and support data are processed only to provide, secure, improve, and moderate the app.
• The AI food assistant receives a limited context packet: your current message, today's compact restaurant and menu summaries, coarse preferences, same-day conversation context, available day labels, and nearby restaurant order. It does not receive exact coordinates, exact distances, full profile data, or earlier-day chat history.

3. Data we process

Account and authentication

If you sign in, Firebase Authentication processes identifiers such as your user ID, sign-in provider, email address, display name, profile photo, and phone number if available. The app also supports anonymous use. During account creation the app may store platform, app version, language, faculty, and onboarding timestamps.

Profile, preferences, and settings

The app may store profile details you provide, such as display name, profile images, bio, phone number, faculty, language, favourite restaurants, dietary preferences, privacy toggles, blocked users, and app settings. These are used to personalize the app and keep your settings available when you are signed in.

Community content

If you use community features, we process the content you create or interact with, including posts, comments, chat messages, sport sessions, images or other media, likes, subscribers, seen records, report details, and related timestamps. This is needed to publish content, deliver notifications, prevent abuse, and moderate the service.

Location and maps

If you grant location permission, the app uses your current location to sort or calculate distances to restaurants. Raw coordinates stay in the app's local state/cache and are not written to our Firestore database or sent to the AI assistant. When you open maps, navigation, or third-party map views, Google Maps, OpenStreetMap-based tile providers, Esri, the operating system, or other map services may process requests under their own terms and privacy policies.

Push notifications

If you allow notifications, Firebase Cloud Messaging processes a device notification token, device type, and notification records so the app can send relevant alerts, community notifications, and app messages.

AI food assistant and translation

When you use the food assistant or translation features, the app may send the necessary message, restaurant, menu, language, and coarse preference context to Firebase Cloud Functions and AI or translation service providers. The backend is designed to minimize context and avoid raw coordinates, exact distances, and unrelated historical profile data.

Feedback, reports, and support

If you contact us, submit feedback, or report abuse, we process the text you provide, your user ID or contact details if available, the target content or user references, categories, and timestamps. This data is used to respond to you, fix issues, and enforce community safety.

Local storage and device data

The app stores some data locally on your device, including cached menus, preferences, local assistant chat history, recent restaurant visit history, session state, and secure sign-in tokens. Local assistant chat history is kept short and pruned by the app. You can clear local app data through your device settings.

Technical and security data

Firebase, hosting, cloud, security, and operating-system providers may process technical data such as IP address, device information, crash or diagnostic data, App Check signals, request logs, and timestamps to keep the app reliable and secure.

4. Why we process data

We process data to:

• provide the menu, map, favourite, account, community, chat, notification, and support features;
• sync your signed-in data across devices;
• protect users, moderate abuse, investigate reports, and prevent misuse;
• maintain, debug, secure, and improve the app;
• comply with legal obligations and app store requirements.

5. Legal bases for users in the EEA

Where the EU General Data Protection Regulation applies, we rely on contract necessity to provide the app, consent for optional permissions and some optional features, legitimate interests for security, moderation, reliability, and improvement, and legal obligations when we must retain or disclose limited information.

6. Service providers and data sharing

We use service providers to operate the app, including Google Firebase services, Firebase Hosting, Firebase Authentication, Firestore, Cloud Storage, Cloud Functions, Firebase Messaging, Firebase App Check, Google Maps Platform, Apple and Google sign-in, map or tile providers, app store services, and AI or translation providers used through our backend. We may also open restaurant, map, or external web pages at your request.

We do not sell personal data. We do not use third-party advertising SDKs or ad networks. We may share limited data if required by law, to protect users, or to investigate abuse and security incidents.

7. Retention

We keep account and app data for as long as needed to provide the app or until you request deletion. Some local data remains only on your device. Moderation, abuse-report, safety, security, accounting, or legal records may be retained for longer when necessary. Backup and log copies may take additional time to expire.

8. Your choices and rights

You can manage optional permissions, such as location, camera, microphone, photos, and notifications, in your device settings. Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal data, and to withdraw consent where processing is based on consent.

To request account or data deletion, use the deletion instructions at https://opiskelijaravintolat.app/data-deletion or email info@opiskelijaravintolat.app.

9. Children

The app is intended for students and restaurant users, not for children under 13. If you believe a child has provided personal data without appropriate permission, contact us so we can review and delete the data where required.

10. Security

We use Firebase security rules, authentication, App Check, access controls, and provider security features to protect data. No internet service is completely risk-free, so users should also keep their accounts and devices secure.

11. Changes

We may update this policy when the app, providers, or legal requirements change. The latest version is always available at https://opiskelijaravintolat.app/en/privacy-policy.

Suomeksi: mobiilisovelluksen tietosuojaseloste

Tämä tietosuojaseloste koskee JYU food menu / JYU ruokalistat -mobiilisovellusta ja siihen liittyviä taustapalveluita. Se ei ole erillinen yleinen tietosuojaseloste pelkälle markkinointisivuston selaamiselle. Jos tarvitset apua omiin tietoihisi liittyen, ota yhteyttä osoitteeseen info@opiskelijaravintolat.app.

Rekisterinpitäjä ja sovellus

Opiskelijaravintolat / JYU ruokalistat -sovelluksen tarjoaa Alex Liao Suomessa. Sovelluksen Android-paketin tunniste on jyu.ruokalistat. Sovellus näyttää opiskelijaravintoloiden ruokalistoja, aukioloaikoja, karttoja, suosikkeja, yhteisösisältöä ja ruokasuosituksia.

Mitä tietoja käsitellään

Sovellus voi käsitellä kirjautumis- ja tilitietoja, profiili- ja asetustietoja, suosikkeja, ruokavalintoja, käyttäjän luomia julkaisuja, kommentteja, viestejä, kuvia tai muuta mediaa, liikuntavuoroja, push-ilmoitusten laitetunnisteita, palautetta, häirintäilmoituksia, teknisiä lokitietoja sekä sovelluksen toimintaan liittyviä aikaleimoja ja käyttötietoja.

Sijainti

Sijaintilupa on vapaaehtoinen. Jos annat luvan, sovellus käyttää sijaintia lähimpien ravintoloiden ja etäisyyksien laskemiseen. Raakoja koordinaatteja ei tallenneta Firebaseen eikä lähetetä ruokalista- tai AI-taustapalveluumme. Kartta-, navigointi- ja käyttöjärjestelmäpalvelut voivat kuitenkin käsitellä pyyntöjä omien ehtojensa mukaisesti, kun käytät niiden toimintoja.

AI-avustaja ja käännökset

Ruoka-avustajaa tai käännöksiä käytettäessä sovellus voi lähettää Firebase Cloud Functionsin kautta tarvittavan viestin, ravintola- ja ruokalistayhteenvedot, kielen, tämän päivän keskustelukontekstin, saatavilla olevien päivien tunnisteet ja karkeat mieltymykset AI- tai käännöspalvelulle. Taustapalvelun tarkoitus on minimoida data: tarkkoja koordinaatteja, tarkkoja etäisyyksiä, koko profiilia tai aiempien päivien keskusteluhistoriaa ei lähetetä AI-avustajalle.

Palveluntarjoajat ja jakaminen

Sovellus käyttää muun muassa Googlen Firebase-palveluita, Firebase Hostingia, Firebase Authenticationia, Firestorea, Cloud Storagea, Cloud Functionsia, Firebase Messagingia, Firebase App Checkiä, Google Mapsia, Apple- ja Google-kirjautumista, kartta- tai tiilipalveluita sekä AI- ja käännöspalveluita. Emme myy henkilötietoja emmekä käytä mainosverkkoja.

Säilytys ja oikeutesi

Tietoja säilytetään niin kauan kuin niitä tarvitaan sovelluksen tarjoamiseen tai kunnes pyydät poistamista. Osa tiedoista säilyy vain laitteellasi. Voit hallita sijainti-, kamera-, mikrofoni-, kuva- ja ilmoituslupia laitteen asetuksista. Voit pyytää tietojen tarkastamista, korjaamista, poistamista, käsittelyn rajoittamista tai vastustamista sovellettavan lain mukaisesti.

Tilin tai tietojen poisto-ohjeet ovat osoitteessa https://opiskelijaravintolat.app/data-deletion.

Turvallisuus ja muutokset

Suojaamme tietoja Firebase-säännöillä, kirjautumisella, App Checkillä, käyttöoikeuksilla ja palveluntarjoajien turvaominaisuuksilla. Tätä selostetta päivitetään, kun sovellus, palveluntarjoajat tai lakivaatimukset muuttuvat.