LibreAte Privacy Policy

Effective date: 12 October 2026

This Privacy Policy explains how LibreAte ("LibreAte", "we", "us", or "our") collects, uses, discloses, and protects information when you use our mobile application (the "App"). LibreAte is operated by Barron Si (ABN: 73 321 151 863), a sole trader based in Australia.

LibreAte is a community-driven platform for discovering and reviewing restaurants based on food allergy safety. Because the App deals with health-related information, we have tried to be especially clear about what we collect and why. This policy should be read alongside our in-app Safety Disclaimer, which explains that content on LibreAte reflects individual users' experiences and is not medical advice.

1. Information We Collect

1.1 Information you provide directly

• Account information: name, email address, and password (managed securely via our authentication provider, Supabase).

• Profile information: username, your relationship to food allergies (e.g. "I have an allergy", "I am a parent/guardian"), and the specific allergies you select for your profile, including any additional allergy profiles you create for other people (e.g. a child).

• EpiPen details: if you choose to use EpiPen expiry reminders, the expiry date you enter and any label you give that device.

• Location: a location you type in (e.g. suburb or address), saved to your profile and used to show nearby restaurants.

• Device location: if you grant permission, the App uses your device's precise location to show restaurants near you. Your coordinates are used at the moment of the search and are not stored on our servers. You can refuse or withdraw this permission at any time in your device settings, and the App will fall back to the location saved on your profile.

• Content you post: reviews, photos, comments, and replies, including whether you choose to post anonymously.

• Business claim information: if you claim a business listing, we collect your name, role at the business, and verify your connection to that business via a phone number sourced from Google Places (not entered by you), or via supporting documentation submitted by email in cases where phone verification is unavailable.

• Subscription information: if you purchase LibreAte Premium, we receive confirmation of your subscription status and purchase history from Apple or Google via RevenueCat. We never receive or store your card details or other payment information.

• Communications: if you contact us for support or to report a problem.

1.2 Information collected automatically

• Usage data: how you interact with the App (e.g. pages viewed, searches performed, reviews saved), collected through our analytics provider, PostHog, and linked only to your user ID. We do not send your allergy details, your review text, or what you search for to our analytics provider.

• Crash and performance data: if the App crashes or runs slowly, we collect error reports, diagnostic data and screen load times through Sentry so that we can fix the problem.

• Device information: device type, operating system, and app version, for the purpose of debugging and support.

• Device identifiers: including a notification token if you enable push notifications, and the advertising identifier your device provides. See section 3 for how advertising identifiers are used.

1.3 Information from third parties

• Restaurant and location data is sourced from the Google Places API.

• If you sign up using a social login (e.g. Google or Apple), we receive your name and email address from that provider. If you use Apple's "Hide My Email" option, we receive a relay address instead of your real email address, and we use that relay address to contact you.

2. How We Use Your Information

• To provide the core functionality of the App: allowing you to search for allergy-safe restaurants, read and post reviews, and save places.

• To personalise your experience, such as pre-filtering search results by the allergies on your active profile.

• To verify business ownership claims and enable verified business owners to reply to reviews.

• To send you notifications about activity relevant to you (such as replies to your reviews or comments), where you have not disabled these in App Settings.

• To send EpiPen expiry reminders you set up within the App.

• To maintain the safety and integrity of the platform. Reviews, including any photos attached to them, are checked automatically for harmful content using OpenAI's moderation service. Where that check flags something serious, the review is held and is not visible to other users until a person has reviewed it. You can still see your own review while it is being checked.

• To respond to support requests and troubleshoot issues.

• To comply with our legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Publicly on the App: your username (or "Anonymous" if you choose to post anonymously), reviews, and photos are visible to other users of the App, as this is a community-based platform.

• Service providers: we use third-party providers to operate the App, including Supabase (database and authentication hosting), Google (Places API for restaurant data, and Maps), Resend (sending account-related emails, such as password resets), Twilio (business verification by phone), RevenueCat (subscription management), Sentry (crash and error reporting), PostHog (usage analytics), OpenAI (automated content moderation), and Expo (delivering push notifications to your device). These providers process information on our behalf and are not permitted to use it for their own purposes.

• Advertising: the App includes Google AdMob. Advertising is currently switched off and no ads are shown. If we enable advertising in future, Google AdMob may receive your device's advertising identifier in order to serve ads. Your allergy information, EpiPen details, review content and email address are never shared with advertisers.

• Legal reasons: where required by law, or to protect the rights, safety, or property of LibreAte, our users, or the public.

• Business transfers: if LibreAte is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Health-Related Information

Your food allergy information is sensitive information under the Australian Privacy Act 1988. We collect it only with your consent, provided when you set up your profile, and use it solely to personalise your experience within the App (such as pre-filtering allergy-relevant search results and notifications, and sending EpiPen expiry reminders you configure). This includes any EpiPen expiry dates you choose to store. We do not sell this information or share it with advertisers, and we do not send it to our analytics or crash-reporting providers. Please note that anything you write in a public review is visible to other users, and is checked by our automated moderation provider as described in section 2. As set out in our Safety Disclaimer, information on the App reflects individual users' personal experiences and is not medical advice — always confirm allergy safety directly with restaurant staff before consuming any food.

5. Your Choices and Rights

• Access and correction: you can view and update most of your profile information, including your allergies, directly within the App.

• Notification preferences: you can control which types of notifications you receive in App Settings.

• Account deletion: you may delete your account at any time from Profile > App Settings > Account & Data > Delete Account. If you no longer have the App installed, you can email us and we will delete it for you — see our support page for details. You may choose to (a) permanently delete your account and all associated content, or (b) delete your personal account information while keeping your past reviews visible to the community, in which case they will be displayed as posted by "Deleted User" with no way to trace them back to you.

• Under the Australian Privacy Act 1988, you may also have the right to request access to, correction of, or deletion of personal information we hold about you by contacting us using the details below.

6. Data Retention

We retain your information for as long as your account is active. If you delete your account, we will delete or anonymise your personal information as described in section 5, except where we are required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

7. Data Security

We use reasonable technical and organisational measures to protect your information, including access controls on our database (row-level security) and secure credential storage. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

LibreAte is not intended for anyone under the age of 18, and we do not knowingly collect personal information directly from them. If you believe a child has created an account, please contact us and we will take steps to delete it.

Parents and guardians can use LibreAte to manage a child's allergies: you may create additional allergy profiles for other people, including your children. Where you do this, the account remains yours, you provide that information on their behalf, and you can view, change or delete those profiles at any time from within the App.

9. International Data Transfers

Some of our service providers store and process information outside of Australia, principally in the United States. This includes PostHog (usage analytics), Sentry (crash reporting), OpenAI (automated content moderation), RevenueCat (subscription management) and Expo (push notification delivery). Where this occurs, we take reasonable steps to ensure your information continues to be protected in a manner consistent with this Privacy Policy and the Australian Privacy Principles.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means. Your continued use of the App after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at: legal@libreateapp.com.