Privacy Policy
No. 8 – Restaurant Journal ("No. 8", "the app") is made by Victor Navarro ("I", "me"). This policy explains what the app does with your information. In short: there's no account, no ads, no analytics and no tracking. Your places and dishes stay on your devices and in your own iCloud. Menu photos leave your phone only to be read when you scan.
What stays on your devices
Your places, their menus, the dishes you've tried and the stamps you put on them are saved on your iPhone. If iCloud is on for the app, they also sync through your private iCloud database, which Apple stores for you under your Apple Account. I can't see or access any of it.
Menu photos aren't saved by the app. Older versions kept a copy with each scan. Those copies are still on your device and in your iCloud, and go away when you delete the app's data (see below).
Scanning a menu
When you scan, the app sends the following to the No. 8 server, which runs on Cloudflare:
- the menu photos you took or picked, resized and redrawn first, so location and camera details inside the photo are left out;
- the names of dishes already saved for that place, so the same dish keeps the same spelling.
The server passes them through Cloudflare AI Gateway to an AI model from OpenAI or Google, which reads the dishes, sections and prices and sends them back to your phone. I don't store the photos or the dishes on the server, and the gateway's request logging is off. Neither OpenAI nor Google uses this data to train their models. They may keep it for a limited time to monitor for abuse: up to 30 days for OpenAI and up to 55 days for Google.
To check that requests come from the real app, the app uses Apple's App Attest. It sends a key identifier and a signature that Apple generates on your device. The server checks them, uses the identifier to limit how many scans one device can make per minute, and doesn't store it.
Like any website, the server sees your IP address while handling a request. It's used to limit abuse, and Cloudflare keeps standard request logs for a few days.
Location
If you allow it, the app uses your location while it's open to suggest the restaurant you're at and to show how far away your places are. Looking up nearby restaurants goes through Apple Maps. Your location isn't sent to the No. 8 server.
Camera and photos
The camera is used only to photograph a menu. Photos you pick from your library are only read to scan them. Saving a shared picture of a receipt or your map to Photos asks for add-only access.
Sharing and exporting
Pictures of a receipt or your map go wherever you choose to share them, through the iOS share sheet. "Export your data" in Settings creates a JSON file of your places and dishes for you to keep. Nothing is shared without you doing it.
Deleting your data
Your data is on your devices and in your iCloud, so you control it. To remove all of it, delete the app from every device. Then, in iOS Settings, go to your name › iCloud › Storage, choose No. 8, and delete its data.
Your rights
Depending on where you live, you may have rights to access, correct, delete or object to the use of your personal data. As I don't keep personal data about you on the server, there's usually nothing on my side to hand over or delete. If you have a question or a request, email me at vn4varro@gmail.com.
Children
No. 8 isn't directed at children under 13, and I don't knowingly collect their personal information.
Changes
If this policy changes, I'll update this page and its effective date.