Privacy Policy

Menu Bite (previously Unofficial Miami Spice) · last updated 21 August 2026

Your avatar

You can choose a drawn face for your profile. You cannot upload a photograph, and there is nowhere in this app to put one. That is deliberate: a photo upload would need moderating, and this app is one person.

What is stored is a short string of numbers describing the choices you made — skin, hair, clothes and so on. The drawing itself is produced by DiceBear, a third-party service, which receives those numbers and nothing else: no username, no account identifier, nothing that says who you are. The picture is then kept on your phone and not fetched again.

Following people

If you follow somebody, that link is stored on our server so their ratings and reviews can appear in your feed. Following is one-way and needs no permission, and there is no way for anybody to send you anything — the app has no inbox. You can block anybody from their profile, which removes the link in both directions and hides each of you from the other. They are not told.

Accounts

Signing in is optional and exists for two features: leaving a star rating, and inviting someone to join you. If you never use either, you never need an account, and no account is created for you in the background.

What signing in gives us

The app offers Sign in with Apple only. When you sign in, Apple gives us an opaque identifier for you — a string of characters that means nothing outside this app. The app asks Apple for no name and no email address, so Apple sends neither, including no private relay address. There is nowhere in our database to put an email even if one arrived.

You then choose a username: 3 to 15 characters, letters, digits and underscores. This is public — it is the name shown next to your ratings and on invitations you send. Choose accordingly; do not use your full name if you would rather not be identified.

That is the whole account: an identifier and a username.

Changing your username

A username can be changed once every four months. When you change it, the old name is held rather than released, so that nobody else can take a name your ratings were published under.

Deleting your account

You can delete your account from inside the app, under You → Settings → Your account. It is immediate and it is not a request to us — the app performs the deletion. Your account, your username and every plan you created are destroyed, and the username is released for anyone to take.

What happens to your ratings

Your ratings stay, and they stop being yours. The link between a rating and the person who left it is erased, so afterwards nothing — including us — can connect any rating to you, to your username, or to your Apple account. They carry no name and never did: the ratings table has no column for a username or an email address. What remains is a number of stars against a restaurant.

We keep them because a restaurant's score is built from them, and deleting one account would otherwise silently move scores other people rely on. This is the same approach Reddit and Google Maps take with content left by accounts that have since gone.

If you would rather your ratings went too, remove them before you delete your account: Settings → Your ratings → Remove every rating. That takes each one back out of the restaurant's score. Do it first — once the account is gone the ratings can no longer be identified as yours, which means they can no longer be found and removed on request.

Ratings

A rating is a number of stars, one to five. There is no written review anywhere in the app, by design — there is no free text for you to write and none for you to read.

Your rating is public. It is stored against your account and counts towards the average shown to everyone on that restaurant, for that programme's season. You get one rating per restaurant per season, and changing it replaces the previous one rather than adding a second.

Ratings and reviews you leave outlive your account — see Deleting your account above for exactly what that means.

What other people can see is the average and the number of ratings, not who rated what. Nobody — including us, through the app — can read an individual person's rating rows other than their own; the database enforces that rather than the app choosing to be polite about it. The average is not shown at all until a restaurant has at least five ratings.

Written reviews

You can write a review alongside your stars. Reviews are public and appear under your username, next to the restaurant you wrote about. Reading them needs no account; writing one does, and it requires a star rating — a review with no score behind it is refused.

What is checked before a review is posted

Every review is checked automatically before it is stored. Abuse, slurs, threats, links, email addresses and phone numbers are refused, and the review is never saved anywhere. This happens on our server, not in the app, so it applies to everything that reaches us.

You can write five reviews a day, and five reports a day.

Reporting and blocking

Anyone signed in can report a review. A reported review is hidden immediately and re-checked; if it is clean it comes back, and if it is not, or if several different people report it, it stays hidden until a person looks at it. One report per person per review — reporting repeatedly does nothing extra.

You can also block someone. Their reviews disappear for you everywhere in the app, they are never told, and you can undo it under Settings → People you've blocked. We record who has blocked whom so that the blocking works; that list is visible to nobody but you.

Reviews are the opinions of the people who wrote them. They are not checked for accuracy, and they do not reflect the restaurants or the organisers of any programme listed here.

Removing a review

You can edit or delete your own review at any time, from the menu beside it. Deleting it removes your stars as well, and they come back out of that restaurant's score.

Invitations and plans

You can invite someone to a restaurant. This creates a link; you send that link yourself, through Messages or anything else in the share sheet. We do not send the message and we never see who you sent it to.

You cannot be invited by a stranger. There is no way to address an invitation to a username or to search for a person in the app. The only way an invitation reaches you is if somebody who already has a way to contact you sends you the link.

If the person accepts, we store that the two accounts are going to that restaurant, and each of you sees the other's username on it. If they decline or never open it, that is all that is stored.

Deleting your account removes you from these too. Invitations you created are deleted outright; invitations you accepted from someone else survive for them, but with you no longer attached to them.

Advertising

The app displays banner advertisements supplied by Google AdMob. To do this, the AdMob software in the app collects:

• Your device's advertising identifier (IDFA) and other device-level identifiers.
• Advertising data — which ads were shown to you, and whether you interacted with them.

This information is collected by Google, not by us, and may be used for third-party advertising, including personalised advertising, and for measuring advertising performance. It may be used to track you across other companies' apps and websites.

Your account is not connected to any of this. We never send your account identifier, your username or your ratings to Google or to any advertiser, and the advertising identifier is never stored against your account. The two sides of the app do not meet.

Google's handling of this data is governed by their own policies: How Google uses information from sites or apps that use our services and the Google Privacy Policy.

Your choice about tracking

Shortly after you first open the app, iOS will ask whether you allow the app to track you. You can say no. If you decline, advertising becomes non-personalised and the advertising identifier is not made available. Nothing else about the app changes, and no feature is withheld. You can change your answer at any time in Settings → Privacy & Security → Tracking.

Location

If you grant location access, your coordinates are used entirely on your device, to centre the map and to sort restaurants by distance. Your location is never transmitted to us, never stored on a server, never attached to your account, and is not used for advertising. You can decline, and every feature except distance sorting still works.

Data stored on your device

Your saved restaurants, your "been there" list, your dining companions, and your appearance preference are stored on your device using iOS's standard preference storage. They are not uploaded to us, and they are not part of your account — signing in does not publish them, and signing out does not remove them. Deleting the app deletes them.

If you are signed in, the app also keeps your sign-in session in the device's keychain so that you do not have to sign in every time.

iCloud sync

So that your saved lists follow you between your own devices, they are also written to Apple's iCloud key-value storage using your own iCloud account. This data goes to Apple, under your Apple ID, and is governed by Apple's privacy policy. We cannot see it. If you sign out of iCloud or disable iCloud for this app, the lists remain on the device and simply stop syncing.

Dining companions and your contacts

You can label a saved restaurant with the person you went with. When you pick someone, iOS shows the contact picker outside of the app — the app has no access to your address book and never asks for contacts permission. Only the name you explicitly choose is handed back to the app, and it is stored on your device with the rest of your saved data. Contact names are never sent to us, including when you use a contact to address an invitation: the message is composed in Apple's Messages, and the app is not told who received it.

Network requests

Beyond advertising, the app makes these outbound requests:

• Dataset refresh — the app fetches an updated restaurant list from a static file, roughly every six hours while you are using it. This request contains no personal information and no account information.
• Restaurant photographs are loaded directly from the image hosts used by the programmes' own websites. Those hosts necessarily see the request, as they would if you visited those websites in a browser. Images are held in memory only and are not written to disk.
• Menus and reservation links open in your browser, on the restaurant's or the programme's own site. Once you leave the app, that site's privacy policy applies, not this one.
• Account, ratings and invitations — only if you are signed in, and only when you actually do one of those things. Ratings averages are read by everyone, signed in or not; that request says nothing about who is asking.

Where account data is held

Accounts, usernames, ratings and plans are held in a database operated on our behalf by Supabase. Sign-in itself is handled by Apple. We do not sell any of it, we do not share it with advertisers, and we do not use it to build a profile of you.

Children

The app is rated 13+ and is not directed at children. We do not knowingly collect data from children.

Your rights

If you have never signed in, we hold nothing about you, so there is nothing for us to export or delete — to remove locally stored data, delete the app.

If you have an account, you can see everything we hold about you inside the app: your username, and your ratings under You. Deleting the account removes your identity from all of it; removing your ratings is a separate action under Settings → Your ratings, and doing it first is the only way to remove both. If you would rather have a copy, or want something removed you cannot reach, write to the address below.

To limit advertising data, decline the tracking prompt described above, or reset your advertising identifier in Settings → Privacy & Security → Tracking.

Changes

If this policy ever changes, the updated version will be posted here with a new date.

Contact

Questions: posada.business@gmail.com