Location privacy
Location is central to this product. This page explains when it is requested, at what precision it is processed, what is stored and what is never stored. There are three distinct behaviours, and they differ.
When location is requested
Location permission is requested in two places only: when you run a search, and when you verify your visit before writing a review. It is not requested while browsing, reading the feed, or viewing a store page.
If you decline, you can still read store pages and the feed. Search needs a location so it can order results from nearest to farthest, and you can supply one by choosing a place from a list instead of using your device.
Search location
When you search, your coordinates order the results by distance. They are deliberately coarsened before being written to the search record: the default setting is three decimal places, roughly a 110 metre area. What is stored is your neighbourhood, not your building.
Even those coarsened coordinates are not permanent. The coordinate fields on search records are emptied after 30 days; the search itself — the text you typed and the number of results — is kept for up to 365 days.
These periods are defined in a maintenance job in the code. How often that job runs in production is a separate operational matter, and this page describes only the defined behaviour.
Visit verification
To write a review you must confirm you are at the store. Your coordinates are not stored in any form during that check.
Two numbers are recorded: your distance to the store, and the accuracy your device reported. What is kept is how close you were to the store, not where you were. The record is valid for 30 days and is deleted 30 days after it expires or is used for a review.
The discovery location you save
If you choose and save a location in search, that location is stored at full precision, together with its label, address and provider identifier.
This is deliberately different from the two behaviours above: it is a preference you chose to save so that search does not ask you for a location every time. That is why this page does not say "we do not store your precise location" — for a location you saved, that would not be true.
You can change or remove the saved location from your profile. Deleting your account deletes it as well.
Who receives your location
During a search your query, your coordinates and the search radius are processed only on our own server, and the results come from our own store catalogue. Your location is not sent to any third party for this. Only the text you typed is sent to OpenAI's language model, to work out what you are looking for -- your coordinates are not.
Your location is not sent to the AI service used to interpret what your search means. That service receives only the text you typed and your language preference.
What stays in your browser
The last fix taken from your device is kept in your browser’s local storage so that search does not ask for permission repeatedly. It does not leave your browser, and clearing your browser data removes it.
You can withdraw location permission at any time in your browser or operating system settings. Withdrawing it does not prevent you from using the product; it affects only the part of search that needs a location.
Limits of accuracy
Location comes from your device and is not always correct. Indoors, among tall buildings, or on a weak signal the error grows. This is why visit verification also records the accuracy your device reported.
It should also be said that browser location can be altered deliberately. Verification is a signal that you were genuinely there in good-faith use, not proof that defeats deliberate misuse.
Before travelling anywhere, we recommend confirming independently that the store is open and that the address is current.