Privacy Policy

Festival Foodie — Last Updated: April 17, 2026

---

1. Introduction

Welcome to Festival Foodie, operated by Asteral Design ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"), available on iOS and Android.

By downloading, installing, or using the App, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your name, email address, phone number, and password. You sign up using email and password, with phone number verification via SMS OTP.
• Organization Information: If you register as a food stall vendor, we collect your organization name and organization address.
• Profile Images: During signup you may upload up to three profile images.
• User-Generated Content: Social posts, comments, likes, chat messages (in group and direct chats), dish reviews, and any other content you create or share within the App.
• Media: Photos and videos you upload for posts, reviews, or chat messages.
• Reviews & Feedback: When you submit a dish review, we collect your name, review date, rating scores, and any photos you attach.
• Stall Information: If you create or manage a food stall, we collect stall details, menu items, images, and location data associated with the stall.

2.2 Information Collected Automatically

• Location Data: With your permission, we collect precise GPS location data to display nearby festivals and food stalls on the map, enable map-based discovery of stalls and reviews, and provide geocoding services. Location is collected only when the App is in use and you have granted permission.
• Device Token: We collect your Firebase Cloud Messaging (FCM) token to deliver push notifications about chat messages, updates, and other relevant alerts.
• Usage Data: Firebase Analytics (included at the platform level) may collect anonymized usage statistics such as session duration, screen views, and crash reports to help us improve the App.

2.3 Information from Third-Party Services

• Firebase Phone Authentication: When you verify your phone number via OTP during signup, Firebase processes the phone number and verification code. We do not store your SMS messages.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the App: To create and manage your account, deliver festival and food stall content, enable chat and messaging features, and facilitate social interactions (posts, likes, comments).
• Location Services: To show festivals and food stalls on the map, provide directions, and enable location-based discovery of nearby vendors.
• Communications: To send push notifications about messages and App-related alerts you opt into.
• Reviews and Ratings: To display dish reviews and feedback to other users, helping them make informed choices.
• Stall Management: To allow vendors to create, update, and manage their food stall listings and menus.
• Safety and Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems.
• Improvements: To analyze anonymized usage patterns and improve App features, performance, and user experience.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

4.1 With Other Users

• Your display name, profile images, posts, comments, likes, and any content you publish are visible to other App users.
• Your dish reviews and stall listings are visible to other users browsing the App.
• Chat messages are visible to participants of the respective chat room or direct conversation.

4.2 With Service Providers

We use the following third-party services to operate the App:

Service	Provider	Purpose
Firebase Authentication	Google LLC	Phone number OTP verification
Cloud Firestore	Google LLC	Cloud database for user profiles, chats, and posts
Firebase Cloud Storage	Google LLC	Media file storage (photos, videos)
Firebase Cloud Messaging	Google LLC	Push notification delivery
Firebase Analytics	Google LLC	Anonymized usage analytics and crash reporting
Google Maps Platform	Google LLC	Map display, geocoding, and location services
Backend API	Semicolons Tech	Account management, stall data, festivals, reviews

These providers process data on our behalf and are bound by their own privacy policies and data protection obligations.

4.3 For Legal Reasons

We may disclose your information if required to do so by law, in response to valid legal process, to protect the rights, property, or safety of our users or the public, or to enforce our Terms of Service.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Storage and Security

• Cloud Storage: Your account data, posts, messages, and media files are stored on Google Firebase infrastructure (Cloud Firestore and Firebase Cloud Storage), hosted on servers managed by Google LLC. Stall data, festival information, and reviews are stored on our backend servers operated by Semicolons Tech.
• Local Storage: Certain data is stored locally on your device using SharedPreferences, including your authentication token, display name, email, user ID, login session state, and FCM token. This data remains on your device and is cleared when you log out or uninstall the App.
• Security Measures: We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), Firebase Authentication with secure token management, and bearer-token-based API authorization. We enforce HTTPS-only connections.
• Password Handling: For email/password accounts, passwords are transmitted securely to our backend. We do not store plaintext passwords on the device.

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Account Deletion

You can permanently delete your account and all associated data through the App's settings menu. Account deletion removes your authentication credentials, profile information, Firestore data (including chat and post data), and clears your local session. This action is irreversible.

6.2 Location Permissions

You can grant or revoke location access at any time through your device's system settings. The App will request permission before accessing your location.

6.3 Camera and Photo Library

Camera and photo library permissions are requested only when you initiate an action that requires them (e.g., uploading profile images, creating a post, or attaching a photo to a review). You can revoke these permissions at any time through your device settings.

6.4 Push Notifications

You can enable or disable push notifications through your device's notification settings. The App requests notification permission on first launch (Android 13+ and iOS).

6.5 SMS Permissions

On Android, the App may request SMS-related permissions to assist with automatic OTP retrieval during phone number verification. You can deny this permission and manually enter the OTP code instead.

6.6 Data Access and Portability

You may request access to, correction of, or a copy of the personal data we hold about you by contacting us at the address below.

6.7 Opt-Out

You may opt out of non-essential data collection by:

• Disabling analytics collection in your device settings (where supported by the platform).
• Revoking individual permissions (location, camera, photo library, notifications) through your device settings.
• Deleting your account entirely.

7. Children's Privacy

The App is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us immediately.

8. Third-Party Links and Services

The App may contain links to third-party websites, applications, or services (such as Google Maps for directions or URLs shared in posts and chats). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the App.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States (where Google's Firebase infrastructure operates). By using the App, you consent to the transfer of your information to these countries, which may have data protection laws different from those in your jurisdiction.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the App's services. If you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).

Locally cached data (authentication tokens, session info) is automatically cleared upon logout or app uninstallation.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App and updating the "Last Updated" date at the top of this document. Your continued use of the App after such changes constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

---

This Privacy Policy is effective as of April 17, 2026.