UPDATED 10 OCT 2026

Privacy notice

HeyWhere is in beta. Google sign-in, synced saves and shared lists are enabled; comments and reports are not currently available. Sign-in is not required to browse the map. Operator details, a verified contact route and a tested account-deletion process must still be completed before the 100-person Closed Beta.

Information currently collected

Without sign-in, saves, recent views, preferences and language choices are stored only on your device. HeyWhere does not upload your precise location to its own servers; location is used on your device to calculate distances. Clearing this website’s browser data removes these records.

Google sign-in and Supabase

When you choose to sign in with Google, Google provides HeyWhere’s identity service with your account identifier, email address, display name and profile photo. Supabase processes your sign-in session, the handle and bio you choose to provide, synced saves, shared lists and uploads awaiting review. Email addresses and private lists are not placed on public profiles; Alpha personal profiles are visible only to their owner by default.

Third-party services

When OpenStreetMap map tiles load, the relevant services receive ordinary network information, such as your IP address and the requested map area. Opening Google Maps, Instagram, WhatsApp or a cafe’s website takes you outside HeyWhere and is subject to that service’s policies.

Analytics

No production Google Analytics measurement ID is currently configured, so this version does not load Google Analytics. If analytics is enabled later, page, save, share, filter and navigation events will be measured only after you choose to allow it. Precise location, raw search text, phone numbers and email addresses will not be sent.

Photos, menus and videos

The app publishes official cafe material only when its source and basis for use have been recorded. User-submitted avatars and menu photos are re-encoded to remove metadata such as EXIF. Menu photos are made public only after an initial automated check and human approval. Do not upload content containing private information or content you have no right to share.

Retention and choices

You control local records. Account data is retained until its service purpose is fulfilled, you request deletion, or the period required by law. Anonymous analytics consent is stored on your device and can be reset by clearing website data. Account-data export, deletion and contact routes are still awaiting acceptance testing; no active receiving address is currently provided.

The contact and corrections channel is pending activation.