Privacy policy

Data controller

The data controller is Smooth & Design, a sole proprietorship operated by NDUI Amadou Be-Ngally, 1 Rue Joseph Gazan, 06000 Nice, France.

For any question or request about your data: smoothandesign@gmail.com.

Data we collect

Browsing works without an account: until you create one, nothing that identifies you is recorded.

• Account: email address, name or nickname, profile picture if you add one.
• Location: your position, only if you allow it, so nearby venues can be shown on the map. You can withdraw that permission at any time in your phone settings.
• Orders: items ordered, amount, delivery address or pickup point, order history.
• Content: reviews, ratings, published recipes, favourites and shared lists.
• Technical: device identifier, app version, sign-in and error logs.

Purposes and legal bases

• Creating and managing your account — performance of our contract with you.
• Showing restaurants and grocers around you — your consent to location access, which you can withdraw at any time.
• Handling your orders, payments and delivery — performance of our contract.
• Publishing and moderating reviews and recipes — our legitimate interest in keeping the service healthy.
• Answering your requests and providing support — our legitimate interest.
• Keeping the accounting records tied to orders — legal obligation.
• Preventing fraud and abuse — our legitimate interest.

Who receives your data

Your data is never sold, rented, or passed on to advertisers.

• Google Ireland Limited (Firebase / Google Cloud): database hosting and authentication.
• Stripe Payments Europe, Ltd.: payment processing. Your card number goes straight to Stripe — Maki never sees it.
• Vercel Inc.: website hosting.
• Partner merchants: only what they need to prepare and hand over your order.

Transfers outside the European Union

Some providers are established outside the European Union or operate infrastructure there. Those transfers are covered by the European Commission's standard contractual clauses or by an adequacy decision.

How long we keep it

• Account and profile: for the lifetime of the account, then three years after your last activity if you do not delete it.
• Orders and accounting records: ten years, under French accounting obligations.
• Published reviews and recipes: until you delete them or moderation removes them.
• Technical logs: twelve months.

Your rights

The General Data Protection Regulation gives you the following rights:

To exercise them, write to smoothandesign@gmail.com from the address linked to your account. We answer within one month. If our answer does not satisfy you, you can lodge a complaint with the CNIL, the French data protection authority.

• Access: find out what data we hold about you and get a copy of it.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask for your data to be deleted.
• Restriction: freeze the use of your data while a dispute is settled.
• Portability: get your data back in a reusable format.
• Objection: object to processing based on our legitimate interest.
• Withdrawal of consent: turn location access off at any time, without affecting what was processed before.
• Post-mortem instructions: decide what happens to your data after your death.

Deleting your account or your data

You can delete your account from the app, without going through us. The steps and the full list of what is erased are on the "Account deletion" page.

To erase only part of your data without closing your account, see the "Data deletion" page.

Cookies and trackers

The website uses no advertising cookies and no third-party analytics trackers. Your theme and language choices are kept in your browser's local storage: they never leave your device and cannot identify you.

The mobile app contains no advertising tracker.

Security

Traffic is encrypted in transit. Access to data is limited to the people who need it, and the database security rules are tested automatically before every release.

Minors

The service is not intended for people under 15. An account created by someone under 15 without their legal guardian's consent will be deleted as soon as it is reported.

Changes

This policy may change. The last update date is shown at the top of this page, and any substantial change is announced in the app.