Privacy Policy
The short version. We collect what we need to sign you in, take your payment and run the features you use. We don't sell your data. We don't publish your lists or your notes. You can delete everything, any time, from Settings.
What we collect, and why
Your email address — to sign you in, send your receipt, and reply if you contact us. Sign-in is handled by Google Firebase, which also stores your lists so they sync across your devices.
Your payment details — handled entirely by our payment provider, Paddle, or by Apple if you subscribed on iPhone. We never see or store your card number. We're told whether your membership is active, and nothing more.
Your lists and notes — the restaurants you save to Want to go and Been, and anything you write about them. These are stored so they're there on your other devices. They're yours: we don't publish them, and we don't sell them. A list is visible to someone else only if you choose to share it.
Links, photos and recordings you give us — when you paste a video link, record a reel, paste a list or send a photo, we read it to find the restaurants it names. This happens only when you ask us to read something. A pasted video link tells the app which video to open; the app plays and records it on your phone, and the video itself never leaves your phone. To find the restaurants, we send the frames and audio sampled from the video, the photo, or the text you pasted to Cloudflare Workers AI, an AI service run by Cloudflare, which returns the restaurant names it finds. We never store the video, its sound, or a photo — a photo is read and not kept. We keep the restaurants we found, the link to the video and the creator's handle, so you have a record of where your list came from. What was spoken in the video, and the words read off its frames, are deleted within 30 days. None of that is tied to your account or your identity, and we don't keep your IP address anywhere in this process.
Translating menus and websites — when you tap to read a restaurant's menu in English, we send the menu to Cloudflare Workers AI to translate it, and keep the translated menu for about a week so it opens quickly for the next person; it contains nothing about you. Translating a website sends nothing of yours: the app opens the restaurant's own English page, or a Google Translate address.
A list you choose to share is kept so its link keeps working.
Your location, only if you allow it — to show what's near you and to run walking mode. It's used to work out what's close and isn't stored as a history of where you've been. You can turn it off in your phone's settings at any time, and everything else keeps working.
Basic usage information — on the website we use Google Analytics 4 to see which pages and features are used, only if you accept analytics cookies (it stays off until you do), with no account ID or email sent to Google. The app has no analytics software; it shows the same site, so your choice applies there too. Our servers keep ordinary request logs and error reports that don't identify you.
What we don't do
- We don't sell your personal information.
- We don't publish your lists, your notes or what you've searched for.
- We don't post anything anywhere on your behalf.
- We don't track you across other companies' apps and websites.
Who else is involved
Google Firebase — sign-in and storing your lists. Cloudflare — hosting, security, and Workers AI for reading the videos, lists and photos you submit and for translations. Paddle — payments on the web. Apple — payments in the app. Resend — sending the booking-release alerts you sign up for (you confirm your address by email first) and our account emails. Receipts for web purchases come from Paddle, and our welcome email and trial and renewal reminders come from us through Resend; for Apple purchases, receipts and reminders come from Apple. Each handles your data under its own terms, and we share only what the job needs.
Deleting your account
Settings → Account → Delete account, in the app or on the web. It removes your lists, your notes and your sign-in, and it can't be undone. Records we're legally required to keep — a payment receipt, for example — are kept only as long as the law requires.
Your choices
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing [email protected]. Depending on where you live you may have further rights under the GDPR or the CCPA, including the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to complain to your local data-protection authority. We honour these requests for everyone, wherever you live.
Children
Sanders Guide isn't intended for children under 13 and we don't knowingly collect their information.
Changes
If we change this policy we'll say so here and update the date. Last updated: October 1, 2026.
Who we are
29 Labs LLC, 244 Madison Avenue, Suite 1143, New York, NY 10016, is the data controller for the Service.