Garum · Legal

Garum privacy

Effective October 7, 2026

The short version: looking at the map asks for nothing. If you choose to contribute (propose, back, comment, make collections, follow people), you sign in with Apple, appear with the name you share with Apple (or the one you set later) and a username, and what you contribute is published under them. Your location doesn't leave your iPhone, unless you turn on notices for «My location» (Garum Pro): then a rough area of about 20 km goes out, never your position. No ads, no analytics, nothing sold.

Who is responsible

Garum is published on the App Store by Sendoa Sola (Seize Apps, Basque Country, Spain), the data controller. Contact for anything about your data: hello@seizeapps.com.

What we process

• Without an account: nothing of yours. The app downloads the published places and keeps them on the iPhone so it opens at once.
• Your Saved places (the list) live on your device and in your own iCloud account (you can turn sync off in Settings). To tell you inside the app that one has closed, the app asks the server about the identifiers of saved places that are no longer on the map; the server answers why they left and doesn't keep the question.
• The save signal (only with an account): from version 0.0.25, when you save a place, the app tells the server which place it is and your account, and when you remove it, deletes that. It is used to show «Saved by N people · M you follow» on the place's page: only those two numbers, never who. It is on by default; you turn it off in Settings › Your account › «Count my saves», and turning it off deletes all of yours from the server. Places you saved before 0.0.25 are not uploaded on their own. In the App Store privacy label it is declared as «Other User Content», linked to your account and only for the app's functionality; it is not used to track you.
• The widgets and using Garum offline (Garum Pro) send nothing: the «Near you» widget uses the last position the app saw while you had it open, rounded to about 100 m, or the middle of the map where you left it, and keeps it only on your iPhone (the widget doesn't ask for location of its own or use it in the background); the photos of your collections and Saved are downloaded to your iPhone to see them offline and are deleted in Settings › Without a connection.
• Your location is used on the iPhone, when you tap «Near me», to centre the map, and it is not sent to Garum. The only exception is one you turn on: with Garum Pro, in Settings › Notifications › Areas › «My location», to tell you about new places near where you open the app. Then, each time you open it, the app works out on the iPhone which square of a 0.2-degree grid your position falls in (about 22 km north to south and 16 km east to west at these latitudes) and sends only that square (two whole numbers), linked to your account; never your position. The last square is kept, stops being used after 30 days without opening the app, and is deleted when you turn «My location» or area notices off, or delete the account. In the App Store privacy label it is declared as «Coarse Location», linked to your account and only for the app's functionality.
• If you sign in with Apple: Apple gives us an account identifier and, the first time, the name you choose to share in its sheet (you can edit or hide it there); Garum uses it as your public name, and you can change it whenever you like. Garum doesn't ask for your email. We keep that identifier, your profile (username, name and, if you add them, photo, bio and a link) and what you contribute: places you propose, backings (reasons and comment), notes, place photos, suggested changes to a place (the details you correct, whether it has closed, and a comment or link if you add them), suggestions to remove a place if you are a Curator, collections (lists and itineraries: title, introduction, their places, your note on each and whether they are public, link-only or private), the comments you leave on collections, other people's collections you save, who you follow, who you block and the reports you send.
• If you turn on notifications: the notification identifier Apple gives your iPhone (to send them through Apple's push service) and which kinds you want; with Garum Pro, also the areas you choose for new-place notices (continents, countries, regions or cities). It's deleted when you sign out or delete the account. Notifications are only about you or what you ask for (your proposals, your photos, who follows you, who saves, comments on or shares your collections, your role; with Garum Pro, new places in your areas and places in your collections that close, at most one of each kind a day) and never ads.
• Purchases: when you buy something in Garum (such as Garum Pro), start a trial or redeem a code, Apple tells us, and also about its renewals and refunds: which product, when, in which App Store country, the price and currency, and some transaction numbers and a pseudonym that Apple generates for each account and app. It does not include your name, your email or your Apple ID. We keep it on a server of our own, only to keep our accounts and to handle refunds or questions about a purchase. We do not share it with anyone or use it for advertising or analytics.
• Technical logs: the server briefly records technical request data (such as the IP address) to run and to protect itself from abuse.

What is public

Garum is also a taste network: your profile (username, name, photo, bio and link), your backings, comments and notes, the place photos you upload (with their credit), the places you propose and back and, when a Curator applies a change you suggested, your username on that place's page («Details corrected by…») and on your profile («Has improved N places») are visible to anyone, and the app suggests people with similar taste from them. Follower numbers are only shown in bands (10+, 50+…). Private: your Apple identifier, who you block, the reports you send, suggestions to remove a place (only moderation sees them), what your suggested changes say and the ones not applied (only Curators and moderation see them), which places you save, other people's collections you save, your private collections, and proposals that haven't made it onto the map (except those you put in a public collection).

Your collections. A public collection (title, introduction, its places and your notes) appears under your name on your profile and in «From people you follow» for those who follow you, anyone can see it, and it can be shared with a link. A link-only collection doesn't appear on your profile or in «From people you follow»: whoever has its link sees it, with your name. It can include places you proposed that haven't made it onto the map yet: they are marked «Not validated», and only inside that collection. A private collection (with Garum Pro) is seen only by you, though it is stored on the server, tied to your account, and it has no link. Comments on a collection are seen, with your name, by whoever can see that collection. If someone saves, comments on or shares one of your collections, we tell you, with their name; nobody sees how many times a collection has been saved.

Links. The link to a collection (public or link-only) or to a place opens Garum if it is installed; if not, a page on seizeapps.com that shows whoever has the link, without an account, the same as the app: the collection's title, introduction, author (name and username), places and notes, or the place's public page with its signed notes. That page is not indexed by search engines, sets no cookies and no analytics, and stops showing the collection as soon as you delete it, make it private or moderation removes it.

Why, and on what basis

• Giving you an account and publishing what you contribute: performing the terms of use you accept when signing in.
• Moderation, abuse prevention and keeping the service safe: our legitimate interest.
• Handling reports and explaining every removal: the legal obligation under the EU Digital Services Act (DSA).
• Counting saves («Saved by N people»): our legitimate interest in showing which places people save, only as numbers and with the option not to count yours.
• The rough area of «My location» and the areas of your notices: your consent, given by turning them on and withdrawn by turning them off.
• Keeping Apple's purchase notices: complying with our legal bookkeeping obligations, and our legitimate interest in handling questions and refunds.

Who else is involved

• Supabase hosts the database and accounts, on servers in the European Union (Frankfurt).
• Apple: sign-in, maps (MapKit) and your iCloud, under its terms.
• Anthropic (Claude, United States) helps us check proposals and suggested changes against public sources before a Curator sees them, and translate Curators' notes and the title, introduction and notes of collections others can see (not private ones). It receives the text of the proposal or suggestion (with its comment or link), never your identifier or your name.
• Collections and comments are published at once. Afterwards, an automated task running on a Seize machine uses Claude (Anthropic) to review the title, introduction and notes of collections others can see, and comments, and flags to moderation anything that may break the terms; it removes nothing, moderation decides. For that Claude receives that text, the collection's places and the author's public profile details (username, name, bio and link, to spot someone promoting their own business), never your Apple identifier. Private collections are not reviewed.
• The links' page lives on seizeapps.com, hosted on GitHub Pages (GitHub) and served through Cloudflare; your browser asks Garum's server (Supabase) for the data directly. Like any website, GitHub and Cloudflare receive your IP address to serve the page.
• We keep database backups on our own machine in Spain for 30 days.

No advertising or analytics SDKs, and we don't sell or share data with anyone.

How long

As long as you keep the account. You can delete it in the app (Settings › Your account › Delete account): your profile (with your profile photo), backings, notes, follows, blocks, suggested changes (and with them your name under «Details corrected by»), suggestions to remove places, collections (with their notes and their translations), comments, the collections you saved, your save signal, the areas of your notices and the rough area of «My location» are removed, along with your proposals nobody else backs. Place photos you uploaded stay published without your name (their credit becomes «a former user»; see the terms), reports you sent are kept without an author, and the record of moderation decisions that affected you is kept as long as the law requires. When you delete it, the app asks you to confirm with Apple and Garum revokes its access to your Apple account. Backups expire within 30 days. Purchase notices are kept for six years, the time the law requires for bookkeeping, even if you delete your account.

Your rights

You can access, correct (your profile is edited in the app), erase (by deleting the account), port or object to the processing of your data by writing to hello@seizeapps.com. You can also complain to the Spanish Data Protection Agency (aepd.es).

Children

You must be at least 14 to create an account. Looking at the map asks nothing of anyone.

Changes

If anything above changes, we'll update it here and in the App Store privacy label before it reaches the app.