Privacy Policy

1. Information we collect

We collect only the data strictly necessary to provide the service: email address for authentication and, if you sign in with Google, your Google name and profile picture; gastronomic memories, photos and notes that you voluntarily save; geolocation coordinates when you authorise their use to centre the map or detect a place, which are only added to a memory if you choose to add that place; and, when Ilnami Plus subscriptions are active, subscription data managed by Stripe (there are no payments during the beta and Stripe is disabled). We do not collect browsing data, contact lists or any information outside the app without your consent.

2. Use of information

Your data is used exclusively to display your private memory map, synchronise your memories between devices, process Ilnami Plus payments through Stripe when subscriptions are active, send the essential emails for your account (sign-up confirmation and password recovery) and, only if you have explicitly consented, analyse aggregated usage to improve the product. Ilnami does not send marketing emails or newsletters. We do not sell your data to third parties.

3. Storage and security

Ilnami acts as Data Controller. We use the following Data Processors, all compliant with GDPR:

• Supabase (Supabase Inc.)—Hosting, PostgreSQL database, authentication and object storage. Servers located in the European Union (Frankfurt). Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• Stripe (Stripe Inc.)—Payment processing for Ilnami Plus subscriptions when they are active; there are no payments during the beta and Stripe is disabled. Ilnami does not store credit card numbers, CVV or full card data. Stripe processes this data under its own PCI-DSS compliant infrastructure.
• OpenAI (OpenAI, L.L.C.)—Ephemeral analysis of the photos you choose to analyze (dishes, drinks, labels, menus and receipts) to suggest the details of a memory. Images are sent via API and are not used to train OpenAI models, in accordance with OpenAI API terms of service.
• Mapbox (Mapbox Inc.)—Map tiles and place search. Ilnami communicates coordinates when you open the map with location access granted or ask to detect a place; no tracking of your real-time location occurs.
• Vercel (Vercel Inc.)—Application hosting and delivery network. Processes the IP address and technical data of each request to serve the site; Vercel Analytics only loads if you accept analytics.
• Brevo (Sendinblue SAS, France)—Sending your account emails: sign-up confirmation, password recovery and a notice if someone tries to create an account with your email when you already have one. Ilnami does not send marketing emails.
• Sentry (Functional Software, Inc.)—Error logging on the server and in the browser to detect failures: the kind of error, where it happened and the browser. We do not send it your email, the content of your memories, your IP address or what you type, and it does not record your session or use cookies.
• Plausible (Plausible Insights OÜ, Estonia)—Aggregated, cookie-free usage analytics, only if you accept analytics.
• Upstash (Upstash, Inc.)—Rate limits against abuse. Keeps your user ID for a few minutes and, when you sign in or reset your password, your IP and email, only to count attempts.
• Photon (komoot GmbH, Germany)—Fallback place search when Mapbox does not respond. Receives from our servers the text you search for and, if you shared your location, approximate coordinates; never your IP or your account.
• Google (Google Ireland Limited)—Sign-in with Google, only if you choose it. We receive your name, email and profile picture to create or open your account; Google receives nothing you keep in Ilnami.

4. Your rights (GDPR)

Under GDPR you have the right to access your data, rectify inaccurate data, erase your data, object to processing and exercise the Article 20 right to data portability by exporting it in a structured, machine-readable format (JSON). You can exercise these rights from the Profile section of the app. We will respond within 30 days.

5. Data retention

Your data is retained for as long as your account is active. If you delete your account, all your memories, photos and personal data are permanently erased within 48 hours, except for anonymised billing records retained by Stripe for legal and tax obligations.

7. Legal basis for each purpose

Performance of a contract (Art. 6(1)(b) GDPR) to create and maintain your account, store your memories and run the service. Consent (Art. 6(1)(a)) for usage analytics and for AI scanning of the photos you choose to upload; you can withdraw it at any time without affecting prior processing. Legal obligation (Art. 6(1)(c)) to keep subscription billing records. Legitimate interest (Art. 6(1)(f)) to prevent abuse and fraud through usage limits and technical logs.

8. International transfers

Supabase stores your data in the European Union (Frankfurt), and Brevo and Plausible operate in the European Union. Vercel, Stripe, OpenAI, Mapbox, Sentry and Upstash are US companies and may process data there. Photon operates in the European Union. If you sign in with Google, Google Ireland Limited may transfer data to Google LLC in the United States under the same safeguards. Those transfers rely on the Standard Contractual Clauses approved by the European Commission (Decision 2021/914) and, where the provider is certified, on the EU-US Data Privacy Framework. Write to hola@ilnami.com for a copy of the safeguards.

9. Security breaches

If a breach occurs that puts your rights at risk, we will notify the competent supervisory authority within 72 hours of becoming aware of it (Art. 33 GDPR) and inform you directly without undue delay where the risk is high (Art. 34 GDPR).

10. Complaints

If you believe your data is not being handled lawfully, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or with the supervisory authority of your country of residence.

11. Cookies and local storage

We use strictly necessary cookies to keep your session (Supabase, up to 1 year) and your language (NEXT_LOCALE, 1 year). The ilnami_consent cookie (180 days) stores your cookie decision together with its date and the version of the cookie notice. If you authorise location access, the device keeps the last valid coordinate locally for no more than 30 minutes so it is not requested again after every reload; it is not synchronised with your profile and is removed if you revoke permission. While you create a memory, the browser keeps the draft in that tab’s storage so you do not lose it when you go back or reload: it never leaves your device, does not include the photos, and is deleted when you save or discard it, when you close the tab or after 7 days. If part of the app fails to download, the tab stores the time of the last automatic retry so it does not reload in a loop; it is deleted when you close the tab. Analytics (Plausible and Vercel Analytics) only loads if you accept that purpose and never builds advertising profiles. You can change your choice in Settings → Cookies.

12. Notice for United States residents (CCPA/CPRA and state laws)

We do not sell or share personal information as defined by the CCPA/CPRA or by other states’ privacy laws (Virginia, Colorado, Connecticut, Utah, Texas, among others): there is no behavioural advertising, no profiling with significant effects and no disclosure to data brokers. We treat the Global Privacy Control (GPC) signal as an opt-out request; since we neither sell nor share data, there is nothing to switch off, and analytics never loads without your consent. You may request access, portability, correction and deletion of your information, and appeal a refusal, by writing to hola@ilnami.com. You will not be treated differently for exercising those rights.

13. Notice for users in Brazil (LGPD)

We process your data under the Lei Geral de Proteção de Dados. You may request confirmation of processing, access, correction, anonymisation, portability and deletion of data processed on the basis of your consent, as well as information about who we share it with. Write to hola@ilnami.com.

14. Minors

Ilnami is not directed at people under 16 and we do not knowingly collect data from anyone under 16 (nor from children under 13, as COPPA requires). By signing up you confirm you meet the minimum age. If you are a parent or guardian and believe a minor has given us data, write to hola@ilnami.com and we will delete the account and its data.

6. Contact

If you have questions about this policy, contact us at hola@ilnami.com.