NextBite Privacy Policy

Effective date: September 14, 2026 Version: 2026-09-14

This Privacy Policy explains how Evan Wang, Kevin Wang, and Ryan Kang, doing business as NextBite (collectively, “NextBite,” “we,” “us,” or “our”), collect, use, disclose, retain, and protect information when you use the NextBite iOS application, its share extension, our website at https://trynextbite.app, and related services (collectively, the “Service”).

By using the Service, you acknowledge the practices described in this Privacy Policy. If you do not agree, do not use the Service.

1. Information We Collect

A. Account and profile information

When you create or maintain an account, we may collect:

• Your name, email address, profile image, and account identifier;

• Information received from Apple, Google, or another sign-in provider, subject to the permissions and settings you select;

• Date of birth or age-assurance information used to determine whether you meet our minimum-age requirement;

• Optional profile information, such as gender, if you choose to provide it;

• Your acceptance of our Terms of Service and Privacy Policy, including document versions, document hashes, and timestamps; and

• Device or messaging tokens used for authentication, the share extension, security, or notifications if those features are enabled.

We do not receive your Apple or Google account password.

B. Restaurants, saved content, and activity

We collect information you submit or create through the Service, including:

• Links to public TikTok, Instagram, YouTube, and other supported content;

• Restaurants, dishes, places, lists, collections, folders, rankings, ratings, likes, notes, and other saved-item information;

• Public-source metadata associated with submitted links, such as creator handle, caption, thumbnail, platform identifier, embed information, and availability status;

• Restaurant information, including name, address, coordinates, cuisine, hours, photos, descriptions, and third-party place identifiers;

• Actions taken in the Service, such as saving, deleting, ranking, liking, sharing, opening directions, or reporting content; and

• Friend relationships, friend requests, invitations, blocks, and reports.

Comments are not available in version 1 of the Service. If we add comments or other new user-generated content features later, we will update this Privacy Policy and our product controls before enabling them.

C. Content-processing information

To identify restaurants and dishes from a submitted link, we and our service providers may process:

• The submitted URL and public metadata;

• Captions, subtitles, transcripts, audio, video frames, slideshow images, or other content available from the submitted source;

• Text, image, audio, or video features needed to identify the restaurant or dish; and

• Generated restaurant matches, summaries, descriptions, and confidence or processing information.

Processing may involve temporarily retrieving or converting media. Temporary media files are deleted when no longer needed for processing, subject to operational logs, backups, security needs, and legal obligations. We may retain source URLs, public metadata, captions, transcripts, generated results, and shared restaurant or video records when reasonably necessary to operate, improve, secure, and avoid repeatedly processing the same public source. These shared records may remain after an individual account is deleted if they are not linked to that account.

NextBite does not claim ownership of third-party videos or creator content. Videos shown in the Service are generally displayed through third-party embeds or opened through the applicable third-party platform.

D. Location information

If you grant permission, the app may use your device’s location while you use the app to center the map, show nearby restaurants, estimate distance, or provide related location features. The app is designed not to store your precise device location in your NextBite account. Restaurant coordinates are stored as information about the restaurant, not as your device location.

Apple, Google Maps, embedded content providers, or other platform services may process device or network information under their own privacy policies when their services load. You can deny or revoke location permission through iOS Settings. Core saved-restaurant features remain available, although nearby or location-based features may be limited.

E. Device, log, security, and diagnostic information

We and our service providers may automatically receive:

• Device type, operating-system version, app version, language, time zone, and general device or browser information;

• Internet Protocol address and network or request metadata;

• Authentication, App Check, security, fraud-prevention, and abuse-prevention signals;

• Crash, performance, error, and diagnostic information; and

• Server logs, request identifiers, timestamps, function status, and limited processing metadata.

We seek to avoid placing passwords, authentication tokens, private notes, full transcripts, or unnecessary personal information in logs.

F. Analytics information

We use PostHog and may use limited first-party analytics to understand whether the Service works and how features are used. Analytics may include a NextBite user or device identifier, app lifecycle events, screens viewed, feature interactions, save and ranking activity, restaurant names associated with product events, and technical performance information.

We do not intend to send your email address, full date of birth, private notes, full transcripts, or precise device location to PostHog. We do not use session replay in the iOS app. We do not use analytics information for cross-context behavioral advertising.

G. Support and communications

If you contact us, we collect the information you provide, such as your name, email address, message, screenshots, and troubleshooting information. We may retain support correspondence to respond, prevent abuse, improve the Service, and keep appropriate business records.

2. How We Use Information

We use information to:

• Create, authenticate, secure, and maintain accounts;

• Save, organize, rank, display, and share restaurant information according to your choices;

• Process submitted links and identify restaurants or dishes;

• Generate descriptions, summaries, recommendations, and restaurant matches;

• Operate maps, directions, embeds, friend features, reporting, blocking, and the share extension;

• Apply usage limits, prevent duplicate processing, detect fraud or abuse, and control service costs;

• Provide support and communicate about the Service;

• Measure performance, diagnose failures, and improve features;

• Enforce our Terms, community rules, and legal rights;

• Respond to safety, security, legal, and regulatory requests; and

• Comply with applicable law.

3. How We Disclose Information

A. Service providers

We use providers that help us operate the Service. Depending on the feature, these may include:

• Apple and Google for sign-in, distribution, maps, device services, and platform functionality;

• Google Firebase and Google Cloud for authentication, databases, storage, server functions, security, and infrastructure;

• PostHog for product analytics;

• OpenAI for text, image, audio, or other automated processing;

• Apify and similar providers for retrieving or processing supported public-source information;

• Foursquare and other restaurant or place-data providers;

• TikTok, Instagram/Meta, YouTube/Google, and other content platforms for embeds, public metadata, and source content;

• Tavily or other search and enrichment providers when used to locate relevant public information; and

• Website hosting, email, support, security, and operational providers.

These providers process information for us or provide independent third-party features. Their handling may also be governed by their own terms and privacy policies.

B. Friends and other users

Information you choose to make social may be visible to accepted friends or other users as the feature indicates. This may include your display name, profile image, saved restaurants, rankings, likes, and related activity. Private account fields such as your email address, full date of birth, device tokens, consent records, and private settings are not intended to be shown to other users.

Blocking or removing a user limits future social interaction, but information previously copied or independently saved by another user may remain in that user’s account.

C. Legal, safety, and business purposes

We may disclose information if we reasonably believe it is necessary to comply with law or legal process; protect users, the public, NextBite, or another person; investigate fraud, security incidents, abuse, intellectual-property complaints, or Terms violations; establish or defend legal claims; or support a merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate protections.

4. Sale, Sharing, and Advertising

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising, and we do not use third-party advertising networks in the current Service.

Third-party embeds may communicate directly with their platforms and may receive device, network, cookie, or account information under their own policies. We use those embeds to provide requested content, not to sell your information or serve behavioral advertisements on NextBite.

If our practices change, we will update this Privacy Policy and provide any legally required choices before beginning the new practice.

5. Automated Processing

NextBite uses automated systems, including machine-learning services, to extract or infer restaurant names, dishes, locations, descriptions, and related information from submitted sources. Automated outputs may be incomplete or wrong. They are used to provide product features and are not used to make legal, employment, credit, housing, insurance, medical, or similarly significant decisions about you.

6. Data Retention

We retain information only for as long as reasonably necessary to provide the Service, maintain security, prevent abuse, resolve disputes, and meet legal obligations.

• Account and private saved data are generally retained while your account is active and deleted through the account-deletion process.

• Authentication, security, billing-control, and operational logs may be retained for a limited period appropriate to their purpose.

• Support communications may be retained as needed to address the request and maintain business records.

• Temporary media used for processing is deleted when no longer needed for processing, subject to backups, security, and legal obligations.

• Shared or deidentified restaurant, source, video, caption, transcript, and generated records may be retained when they are not linked to your account and are needed to operate the Service or avoid duplicate processing.

• Reports and safety records may be retained as necessary to investigate misuse and enforce our rules.

• A limited pseudonymous record of your acceptance of our Terms and Privacy Policy may be retained after account deletion. This record may include a one-way pseudonymous subject identifier, document versions, document hashes, and acceptance timestamps, but is not intended to retain your email address or full user profile.

Backups may retain deleted information temporarily until overwritten or expired. We will not intentionally restore deleted account data into active use without applying the deletion again.

7. Account Deletion and Privacy Requests

You can delete your account in the app through Settings → Delete Account. The deletion process is designed to remove your authentication account and account-linked information, including your profile, private saved restaurants, collections, notes, friend relationships and requests, device tokens, and related user-owned records.

The following may remain:

• The limited pseudonymous consent record described above;

• Information retained for security, fraud prevention, legal compliance, dispute resolution, or enforcement;

• Temporary backup copies until normal expiration; and

• Shared or deidentified restaurant, source, video, caption, transcript, or generated records that are no longer linked to your account.

Account deletion may not automatically delete analytics records held under a pseudonymous identifier unless our deletion process expressly sends and completes that request. You may ask us to locate and delete eligible account-linked analytics information by emailing nextbitesupport@gmail.com from the email associated with your account.

You may also request access, correction, deletion, or a portable copy of eligible personal information by emailing nextbitesupport@gmail.com. We may need to verify your identity and may deny or limit a request where permitted by law.

8. State Privacy Rights

Residents of certain U.S. states may have rights to request access to, correction of, deletion of, or a copy of personal information, and to appeal certain request decisions. Where applicable, you may also have rights concerning sale, sharing, targeted advertising, profiling, or sensitive personal information.

NextBite does not currently sell personal information or use it for targeted advertising. Exercise applicable rights by emailing nextbitesupport@gmail.com with “Privacy Request” in the subject line. We will not discriminate against you for exercising applicable rights. We may verify your identity and an authorized agent’s authority.

California notice

During the preceding 12 months, we may have collected the categories described in Section 1, including identifiers, account and profile information, internet or electronic activity, device location when permission is granted and the feature is used, user-provided content, restaurant and preference information, generated inferences, and diagnostics. We collect these categories from you, your device, sign-in providers, friends who interact with you, public sources, content platforms, and service providers. We use and disclose them for the business purposes described in Sections 2 and 3.

We do not sell these categories and do not share them for cross-context behavioral advertising. We do not offer financial incentives in exchange for personal information. California residents may request to know, access, correct, or delete eligible information and may exercise other applicable rights through the contact method above.

9. Children’s Privacy

The Service is intended for a general audience age 13 and older and is not directed to children under 13. You may not create or use an account if you are under 13.

We use an age screen or age-assurance process and do not knowingly collect personal information from a child under 13 without legally sufficient parental consent. If we learn that an under-13 user provided personal information, we will take reasonable steps to delete it. A parent or guardian who believes a child under 13 provided information may contact nextbitesupport@gmail.com.

10. Security

We use administrative, technical, and organizational measures designed to protect information, including authentication, access controls, encryption in transit, platform security controls, server-side validation, usage limits, and monitoring. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

Protect your account credentials and notify us if you believe your account has been compromised.

11. International Use

NextBite is operated from the United States. If you access the Service from another country, information may be processed in the United States and other locations where our providers operate. Those locations may have different data-protection laws.

The current Service is intended primarily for users in the United States. Availability elsewhere does not mean that the Service complies with every law outside the United States.

12. Third-Party Services and Links

The Service contains third-party maps, embedded videos, restaurant information, links, and sign-in tools. Your interaction with a third-party service is governed by that party’s terms and privacy policy. We are not responsible for the independent privacy practices, availability, or accuracy of third-party services.

13. Changes to This Policy

We may update this Privacy Policy as the Service changes. We will post the updated version, update the effective date, and provide additional notice or request renewed acceptance when required by law or when changes are material. The version presented for acceptance in the app should match the version published at https://trynextbite.app/legal/privacy.

14. Contact Us

NextBite is operated by Evan Wang, Kevin Wang, and Ryan Kang, doing business as NextBite, in Chicago, Illinois, United States.

Email: nextbitesupport@gmail.com Website: https://trynextbite.app