Bambi — Privacy Policy

Effective: July 11, 2026

Bambi is a parent-built map of restaurants with highchairs. This policy explains what we collect, why, and what control you have. The short version: we collect the minimum needed to run a community map, we never sell your data, and you can delete your account (and everything tied to it) inside the app at any time.

Your account

Bambi uses Sign in with Apple. We receive your name (or the nickname you choose to share) and your email address — which may be Apple's private relay address if you choose "Hide My Email". We use these only to show your first name next to your reports and to manage your account. No password is ever stored.

Location

While using the app, your location centers the map and finds restaurants near you. It is sent to our backend (Supabase) to run the nearby-places search and, when you search for new places, to our Google Places proxy. We do not keep a history of your locations.

Background location ("Always") is strictly opt-in and powers one feature: report nudges. If you turn nudges on, Bambi uses Apple's visit detection and geofences to notice when you spend time at a restaurant, so it can send you a local notification asking whether there was a highchair. This processing happens on your phone; coordinates are only sent to our own backend and our Google Places proxy to identify the restaurant — never to advertisers or data brokers, and never stored as a movement history. Turn nudges off in Profile → Notifications at any time, or revoke location access in iOS Settings.

Content you contribute

Reports, notes, tags, and places you add are public — that's the point of a community map — and are shown with your first name. You can delete your own reports in the app. If a report is the last one for a place, the place is removed with it.

What we don't do

• No selling or sharing of personal data with advertisers.
• No analytics or ad-tracking SDKs. One caveat for transparency: the Mapbox map SDK may collect anonymized usage and diagnostic telemetry to operate the map — you can opt out via the attribution (ⓘ) menu on the map itself.
• No movement history — Bambi uses your location transactionally and discards it.

Service providers

Bambi runs on Supabase (database, authentication, storage), Cloudflare (hosting and caching), Mapbox (the map itself), Google Places (finding restaurants), and Apple (sign-in and notifications). Each receives only what is necessary to provide its function.

Deleting your account

Profile → Delete account removes your account, profile, and wishlists immediately. Your past reports remain on the map but are anonymized — they are no longer connected to you.

Contact

Questions, or want to flag a report? Email [email protected].