Privacy Policy

Effective August 8, 2026

Lunchly is an app for planning lunches with friends. This policy describes exactly what Lunchly stores and why. The short version: we store the minimum needed to let friends find each other and plan a lunch, we never sell data or show ads, and you can delete everything from inside the app.

What we store

• Your display name — the name you enter, shown to your friends and the people you invite.
• Your email address — from Sign in with Apple (if you chose "Hide My Email", we only ever see the relay address).
• Your invite code — a random code friends can use to add you.
• Friendships, lunch plans, invites, and chat messages — the content of the app.
• A notification token — so lunch invites can reach your device.
• If you verify your phone number: a scrambled, one-way code derived from the number (an HMAC computed with a secret key held on the server). The number itself is not stored in our database.
• Aggregate usage counters — totals like "lunches scheduled", not tied to your identity.

Contacts

If you invite friends from your contacts, only the contacts you tap are sent to our server — never your whole address book. Each number is used to check whether that person is already on Lunchly, or to hold an invitation for them, and then discarded. Phone numbers are processed in memory and stored only in the scrambled, one-way form described above.

What other people can see

Other users can see your display name — nothing else. Your email, phone information, and notification token are readable only by you and our servers. Lunch plans and messages are visible only to that lunch's participants.

Where it lives

Lunchly runs on Google Firebase (Firestore, Cloud Functions, Firebase Authentication, and Firebase Cloud Messaging). Google processes this data on our behalf under Firebase's privacy terms. We don't share your information with anyone else, we don't sell it, and there is no advertising or cross-app tracking in Lunchly.

Retention and deletion

Your data stays until you remove it. You can remove your verified phone number at any time (Settings → Remove my number), and you can delete your entire account and its data from Settings → Delete Account. Deleting your account removes your profile, friendships, lunches, invites, and messages.

Children

Lunchly is intended for users 13 and older and is not directed at children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

Safety

Messages you report are sent to us, with the sender's ID, for review. Blocking someone stores a record of the block that only you can see.

Changes

If this policy changes, the new version will be posted here with a new effective date.

Contact

Questions or requests about your data: lunchly.support@gmail.com