Your data, only for what’s needed.

Controller

Víctor Ochoa, founder of VocadO. You can write to the Support email about anything to do with your data.

Forms on this website

Waitlist: your name, your email and the date. We use them to send your access invitation and, if there are places, the founders group invitation.

Restaurants and support: what you write to us, to reply.

Basis: your consent when you tick the box. We keep these messages while we deal with them and delete them a year after closing them, or earlier if you ask.

To stop spam we use Cloudflare Turnstile, which checks the request without tracking cookies.

The app

Account: your email and, if you add them, your name, username, photo and bio.

What you post: experiences, photos, lists, comments, likes and who you follow.

Tags (“Who did you go with?”): if someone tags you on an experience, your name and username show on it to whoever can see it. Only people you follow or who follow you can tag you, never anyone in a block with you. You can remove the tag at any time, after which it can’t be added back. Tags are in your data export and are deleted with your account.

Location: only with your permission and only to show places nearby; we don’t store your precise location.

Usage and errors: usage statistics to improve the app (PostHog) and error reports without personal data (Sentry).

Basis: the contract to use the app and, for statistics, our legitimate interest in improving it.

Import from Google Maps

Only if you choose it in the app: with your permission on Google’s screen, VocadO reads your saved Google Maps lists and your starred places from your Google account, through Google’s Data Portability API. We only ask for those two permissions; Google only offers this import to accounts in the European Economic Area held by people aged 18 or over.

What for: only to save the places you choose in your Saved lists. Before importing anything we show you your lists and their places, and you decide which lists and places to bring.

How long we have access: you choose on Google’s screen. If you give access once, as soon as we have downloaded your data we revoke our access to your Google account and delete the access token. If you give access for a while (for example, 30 days), we keep the token, encrypted, until that period ends (the one Google tells us; 30 days if it doesn’t; never more than 180) so you can tap “Sync” and bring in what’s new in your lists without giving permission again. We only use it when you sync, never on our own. While it lasts we also keep the Google ID of each place in your last export and the VocadO restaurant it matches, so we only show you what’s new and what’s no longer in your lists. You can remove the access at any time with “Disconnect Google” in the app (we revoke it at Google and delete the token and those IDs straight away) or at myaccount.google.com/permissions. When the period ends, we delete it by the next day at the latest.

What we keep: the name of each list and, for each place, only its Google ID and the VocadO restaurant it matches. The name, address and coordinates in the export are used only to show you your places while you choose and to process the ones you import: they are kept until you choose, for 24 hours at most, and each place’s are deleted as soon as we process it or you leave it out. If you don’t choose within 24 hours, they are deleted and nothing is imported. If a restaurant isn’t in VocadO yet, we add it to the catalogue. Each import’s record is deleted 30 days after it ends, or sooner if you delete your account.

VocadO’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We don’t use this data for advertising, we don’t sell it or give it to anyone, and no one at VocadO reads it unless you ask us to so we can help you, for security, or to comply with the law.

Legal basis: your consent, which you give on Google’s screen. You can withdraw it at any time with “Disconnect Google” in the app or at myaccount.google.com/permissions (if you gave access once, we already withdraw it ourselves when the import ends).

Who we share data with

Providers that help us run the service, under contract and in the European Union wherever possible: hosting (Railway), files (Cloudflare R2, EU), email (Resend), statistics (PostHog), errors (Sentry), maps and place data (Google) and interpreting free-text searches (Anthropic, without your account data). We don’t sell your data or give it to restaurants.

For how long

As long as you have an account. If you delete it, it’s deleted straight away; encrypted backups expire on their own within 30 days.

Your rights

You can access, correct and take your data, object to its use or ask us to delete it. In the app you can download your data and delete your account. For anything else, write to us. You can also complain to the Spanish Data Protection Agency (aepd.es).