NopeList Privacy Policy
Effective October 4, 2026
1.Overview
This Privacy Policy explains what information NopeList (the “App”) collects, how we use it, and the choices you have. The App does not require you to create an account with us. This policy should be read together with our Terms of Use.
2.Location data
If you enable location permissions, the App uses your device’s location to show you nearby restaurants. Your device asks for your permission before the App can access location, and you can withdraw that permission at any time in your device settings. On iOS, the App asks for accuracy of about a hundred metres rather than the finest available, and on Android it requests approximate location only, because choosing a city and sorting by distance does not need more than that.
3.Maps
On iOS, the App uses Apple’s MapKit and related Apple mapping services to display maps. Where those services are used, information is handled by Apple under Apple’s own privacy practices. On Android, the App uses Google Maps to display maps, and Google may process device, location, usage, and technical information under Google’s own privacy practices. We do not store your location.
4.Where inspection records come from
Records are downloaded as whole files from GitHub, and from the cities’ own open data portals when that is unavailable. Searching happens on your device, over the file it already has — what you type is not sent anywhere. We operate no server of our own for this, and no lookup identifies you. Those hosts see the request and the IP address it came from, as any website would.
5.Crowd verdicts
If you vote on a citation, that vote is stored in a shared database so other readers can see the tally. On iOS, it carries the citation it is about, and an identifier derived from that citation together with an identifier Apple gives us for your Apple Account. That account identifier is specific to this App, is never stored with the vote, and cannot be turned back into your name or email address. Because it is combined with the citation, what is stored is unique to that one vote and cannot be matched against any other vote you cast. Voting requires being signed in to iCloud; reading the tallies does not. The database runs on Apple’s CloudKit. Undo the vote and the record is deleted.
On Android, votes are kept separately from votes cast on iOS, and the two are not shared.
On Android, votes are stored in Google’s Firebase service. Each vote is tied to an anonymous identifier assigned to your installation of the App, not to your name or Google Account, and only that installation can change or delete it. Undo the vote and the record is deleted.
6.Purchase information
On iOS, in-app purchases are handled by Apple through your Apple Account. We do not receive or store your payment card details or your Apple Account credentials. We may receive limited transaction confirmation data from Apple, such as whether a purchase completed, in order to unlock paid features. On Android, in-app purchases are handled by Google Play through your Google Account. We do not receive or store your payment card details or your Google Account credentials, and we may receive limited transaction confirmation data from Google, such as whether a purchase completed, in order to unlock paid features. On iOS, if you buy a day pass, its expiry is mirrored through your own iCloud so your other devices honor it; that mirror is yours and we cannot read it.
7.Analytics and diagnostic data
The App does not include any standalone third-party analytics, advertising, or crash-reporting software. On iOS, we receive App Analytics and crash reports from Apple, generated from users who have agreed to share diagnostics and usage information with developers. App Analytics is aggregated by Apple. Crash reports may include an anonymous per-device identifier, but do not give us your name or Apple Account. On Android, the App includes Google Maps, Google Play’s billing library, and Google’s Firebase service for votes. The Google Maps components may send technical information, including crash information, to Google as described in Section 3, and Firebase may receive anonymous identifiers and technical information, such as IP address, to operate the vote service.
8.What we never ask for
We do not collect your name, email address, or phone number through the App, because the App has no account registration. If you write to us at an address listed in this policy, we will have whatever information you choose to include in your message.
9.How we use information
To operate the App’s features, including search for restaurants near you; to process in-app purchases through Apple or Google Play; to monitor performance, diagnose crashes, and improve the App; to understand aggregate usage patterns; and to respond to messages you send us. We do not sell your personal information.
10.Third-party service providers
On iOS, Apple provides map and location functionality, processes in-app purchases, runs the shared database that holds crowd verdicts, and supplies the App Analytics and crash reports described above. On Android, Google provides map functionality through Google Maps, processes in-app purchases through Google Play, and runs the database that holds Android crowd verdicts through Firebase. GitHub hosts the inspection index files the App downloads, and the cities’ own open data portals serve them directly when GitHub cannot. Apple’s, Google’s and GitHub’s handling of information they receive through their own services is governed by their own privacy policies. Apart from the Google components described above, we have integrated no other third-party software, and we do not share your data with advertising networks, data brokers, or other third parties, except as described below.
11.When we may disclose information
To comply with a legal obligation, court order, or governmental request; to protect the rights, property, or safety of us, our users, or others; and in connection with a merger, acquisition, or sale of assets, subject to this policy or its successor.
12.Data retention
We do not maintain names, contact information, or user profiles about App users. The only persistent App data we maintain is the crowd-verdict information described above. Crowd verdicts are kept until the reader who cast them undoes them or we remove them. The App Analytics and crash reports we receive from Apple are retained by Apple under Apple’s own retention practices and do not give us your name or Apple Account. Because the App has no account system, we hold no ongoing user profile.
13.Data security
We use reasonable technical and organizational measures to protect data in transit and at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
14.Your choices
Location: enable or disable location access for the App at any time in your device Settings. Notifications: the same, and there is a switch in the App’s own Settings. Deletion: uninstalling the App stops any further collection from your device and removes data stored locally by the App. Undo any crowd verdicts first, since those records are stored in the shared vote database and are deleted when you undo them. Beyond those, we hold no personal information that identifies you, so there is generally nothing for us to delete on request. If you have written to us, you can ask us to delete your message at info@dwdrps.com.
15.Advertising and tracking
The App does not display advertising and does not share data with advertising networks. We may introduce advertising in the future. If we do, and if the App or a component it integrates engages in tracking as Apple defines that term — linking data collected in the App with data from other companies’ apps or websites for advertising or measurement — we will request your permission where the platform or applicable law requires it, including through Apple’s App Tracking Transparency prompt on iOS, and you can decline. Not all advertising involves tracking in that sense. We will update this policy and our App Store and Google Play privacy disclosures before any such change takes effect.
16.Children’s privacy
The App is intended for general audiences and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
17.State and regional privacy rights
Depending on where you live, you may have rights to access, delete, correct, or opt out of certain uses of your personal information, including under the California Consumer Privacy Act as amended. We do not sell personal information or share it for cross-context behavioral advertising. To make a request, write to us at support@dwdrps.com. We will respond as required by applicable law and will not discriminate against you for exercising these rights.
18.Reporting an error in displayed information
If you are a restaurant or other establishment and believe the App is showing information about you incorrectly, write to us at support@dwdrps.com. The scope of that address and how we handle these reports are described in our Terms of Use.
19.Changes to this policy
We may update this policy from time to time. Material changes will be reflected in an updated effective date and, where required, additional notice through the App or the applicable app store.
20.Contact
Questions about this Privacy Policy can be sent to support@dwdrps.com.