Privacy Policy — CoinBite

01 Overview

This Privacy Policy explains how Azizbek Mizamov, an individual developer trading as PowerApps ("we", "us", "our") handles information in connection with the CoinBite application for iOS (the "App").

Short version: CoinBite has no account, no ads, no analytics and no tracking, and it never asks who you are. To find places to eat, it uses your location with Apple Maps. To rank them, it sends our server the search itself — the meal, your budget, any food preferences, the nearby places and a location rounded to about 100 metres — and our server asks an AI service and Google for the answer. Our server keeps no copy of any of it. If you subscribe to Premium, Apple handles the payment; the App shows our server Apple’s signed record of the subscription so the server can check it, and keeps no copy of that either.

By downloading or using the App you agree to this policy. If you do not agree, please do not use the App.

02 What a search sends

The App contacts our server only when you tap Find places with AI picks on. The first time, before anything is sent, it asks you, saying what goes where; if you choose Not now, it shows the closest places from Apple Maps and sends nothing. With AI picks on, each search sends our server, over an encrypted (HTTPS) connection, only what it needs to rank the places:

Your searchThe meal you picked, your budget and its currency, and the food preferences you have turned on (for example vegan or halal), if any.

Approximate locationYour latitude and longitude rounded to three decimal places, which is about 100 metres, and the name of the area (for example the city and region) that Apple Maps gives for it. Your exact location is not sent to us.

Time and languageThe day of the week and the time on your iPhone, so a breakfast search at 8:00 is treated as one, and the name of the language the App is set to, so the suggestions come back in it.

Premium or free searchWith Premium, the App Store’s signed record of your subscription: which plan, when it was bought and when it renews or ends, the country of your App Store, and the transaction numbers Apple gives it, one of which stays the same across renewals. Our server checks Apple’s signature on it to confirm the subscription is real. It holds no name, email address or Apple Account. Without Premium, a search says instead that it is one of your 5 free searches.

Nearby placesUp to 20 places Apple Maps found around you: their names, kinds, addresses, distances from you and locations, and whether Apple Maps listed them for your meal or your food preferences. These are public places, not information about you.

A search sends no name, email address, phone number, Apple Account, contacts, photos, advertising identifier (IDFA) or any other identifier for you or your device. Like every connection on the internet, it does reveal your IP address to our server; section 04 says what happens to it.

Food preferences such as halal or vegan can say something about your beliefs or your health. They are sent only so the picks can respect them, are never stored by us, and are entirely optional: with none turned on, none are sent.

03 Who receives it

The App talks to our server and to Apple Maps (section 07). Our server, in turn, passes parts of the search to two services. They receive the requests from our server, not from your iPhone, so they do not get your IP address or anything about your device.

Our server (Vercel)The CoinBite server runs on Vercel (Vercel Inc., United States). It receives everything listed in section 02, plus your IP address, and uses them only to answer that one search. The record of your Premium subscription stops there: it is not passed to the AI service or to Google.

AI service (OpenAI)To pick the five places and write the suggestions, our server sends an AI model the search from section 02: the meal, the budget, the food preferences, the area name and rounded location, the day and time, the language, and each place’s name, kind, distance and address. It goes straight to OpenAI (OpenAI, L.L.C., United States), which runs the model, currently GPT-6 Luna, under its API data controls. OpenAI says it does not use what it receives through its API to train its models, and keeps it for up to 30 days to check for abuse, unless the law requires longer.

Google PlacesTo show each pick’s rating, our server asks Google for the ratings of places around the rounded location, and, for a pick it does not find there, searches Google by that place’s name and location. With Premium, Google’s answer also names up to ten photos of each pick, and when you open a pick’s photos, our server fetches each photo you look at from Google by that name and passes it to the App without keeping it, so Google learns which photo was shown but not who you are or where. Google receives no other part of your search, and its answers are not stored. Google handles these requests under the Google Privacy Policy.

We do not sell or rent any of this information, we do not use it for advertising, and we do not share it with anyone for any purpose other than answering your search. If the AI service cannot be reached, the App shows the closest places instead, ranked on your iPhone.

04 What our server keeps

None of your searches. The server answers each search and forgets it: it writes no search, location, preference or result to any database, file or log.

IP address. To stop anyone sending too many searches in a short time, the server holds the IP address and the times of its recent searches in memory, never on disk or in a log, and that memory is gone whenever the server instance restarts. Vercel also limits the number of requests per IP address before they reach the server, and processes the connection under its own privacy policy
Logs. The server’s log notes which AI model answered and, when something fails, a short error description. It contains no part of your search
Counters. The only things the server stores are counts, kept with Upstash: a monthly count of how many rating requests it has made to Google, in all and for free searches, so it stays within a monthly limit; and, with Premium, how many AI searches each subscription has made that day and that month, so Premium stays within the fair use in the Terms of Use. A subscription’s count is filed under a one-way code made from its transaction number with a secret key, so the number itself is never stored and the code can’t be traced back to it; each count is deleted after at most 40 days. They hold numbers and nothing else

05 Information stored on your device

CoinBite keeps your settings in its own sandbox on this iPhone:

SettingsYour appearance (system, light or dark), the App’s language, your currency choice, whether haptics are on, and your food preferences.

Free searchesHow many of your 5 free AI searches this iPhone has used, as a single number in the iOS Keychain, so that deleting and reinstalling the App doesn’t start the count again. It is never sent anywhere.

SubscriptioniOS and the App Store keep the record of your Premium subscription on the iPhone, as they do for any app; the App reads it from there and doesn’t store a copy of its own.

SearchesNot stored. Your location, the places found and the picks are held in memory while you use them and are gone when the App closes. There is no search history.

The developer never receives your settings, and they are removed when you delete the App; the free-search count stays in the Keychain, which is what it is for, until the iPhone is erased. If your iPhone backs up to iCloud or a computer, iOS includes them in the backup, as it does for any app; that backup is handled by Apple or by your computer, not by us.

06 Device permissions

CoinBite asks for one permission:

Location, while using the App — to find places to eat near you, and to pick the currency of the country you are in when your currency is set to Automatic. iOS asks you when the App first opens. The App asks iOS for a location accurate to about 100 metres, and never uses your location in the background. If you decline, the App cannot search and says so; you can turn Location on later under Settings › Privacy & Security › Location Services › CoinBite

It does not ask for, and its Info.plist contains no usage description for, the camera, microphone, photos, contacts, calendar, Bluetooth, notifications or tracking: there is no App Tracking Transparency prompt and the App never reads your advertising identifier. The haptics it plays need no permission.

To show the Google Maps and Yandex Maps buttons only when those apps are installed, the App asks iOS whether they are. iOS answers yes or no on your iPhone; nothing is sent anywhere.

07 Apple Maps and map apps

CoinBite finds places with Apple’s map service (MapKit), built into iOS. To search, iOS sends Apple your location and what the App is looking for (for example “breakfast” or “vegan restaurant”), and to name your area, your location. The Details button shows Apple Maps’ own card for a place. Apple handles these requests under Apple’s Privacy Policy, not this one.

When you tap Directions, the App opens the map app you choose — Apple Maps, Google Maps or Yandex Maps — with the place as the destination (for Yandex Maps, your current location as the start). From then on, that app’s own privacy policy applies: Google’s or Yandex’s.

The App is distributed through the Apple App Store, and Apple independently processes certain information as part of that distribution — for example download records, aggregated usage statistics you may have opted into, and crash reports you choose to share with developers. Any aggregate statistics Apple makes available to us cannot be used to identify an individual user.

The links to this policy, the Terms of Use and support in the App (Settings › About CoinBite) open in your web browser or mail app. This website (powerapps.site) is served as static files. It sets no advertising or tracking cookies, and it remembers your light or dark choice in your own browser’s local storage. It does load a web font from Google Fonts, which means your browser contacts Google's servers to fetch the font file; that request is subject to Google's privacy policy.

08 Premium and purchases

CoinBite is free to download, with 5 free AI searches, and offers an optional auto-renewing subscription, CoinBite Premium. It has no ads.

Premium is bought and managed through the App Store. Apple handles the payment, and your payment details never reach the developer: we never see or receive your card number, billing address or Apple Account credentials, and we receive no report from Apple that identifies you personally. To give a search Premium features, the App sends our server the App Store’s signed record of your subscription (section 02), which the server checks and then discards. Refunds and billing questions are handled by Apple through your purchase history.

09 Children's privacy

The App is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). It does not ask for anyone’s age, name or any other personal information, and our server keeps nothing from a search. If you believe a child has somehow provided us with personal information, contact us and we will address it.

10 Your rights, and deleting your data

Privacy laws such as the GDPR (European Economic Area and United Kingdom) and the CCPA/CPRA (California) give you rights over your personal data, including the rights to access, correct, delete, restrict or port it, to object to its use, and to opt out of its sale.

We use the information in a search only to answer it, because you asked for the answer (in GDPR terms, to provide the service you requested). Because our server keeps no copy of your searches, we hold nothing about you to disclose, correct, export or delete, and we have never sold personal data. You stay in control on your iPhone:

Turning AI picks off, under Settings › AI picks in the App, stops everything in section 02: searches then show the closest places from Apple Maps and send nothing to our server
Turning Location off stops all searches
Turning food preferences off, in Settings or on the budget screen, stops them being sent
Deleting the App removes the settings it stored. The count of free searches used stays in the iPhone’s Keychain until the iPhone is erased
Your subscription is managed and cancelled in iOS under Settings › your name › Subscriptions, or from Settings › Premium in the App
Copies of what Apple, OpenAI or Google process under their own policies are a matter for them; we can tell you which requests went where, as this page does

You may still contact us with any question or request about this policy.

11 International transfers

Our server runs on Vercel and OpenAI handles the AI requests, both in the United States, and Google and Apple run their services worldwide. A search can therefore be processed outside the country you are in. Each of these providers states in its privacy policy how it protects personal data transferred across borders, for example with the European Commission’s Standard Contractual Clauses.

12 Data security

Every connection the App and our server make uses HTTPS. The server accepts only requests that carry the App’s key, limits how many it accepts from one address, and keeps the keys to the AI service and Google on the server, never in the App. The App keeps its settings inside the iOS application sandbox, protected by the operating system and by your device passcode and encryption. We hold no database of users or searches that could be breached.

13 Changes to this policy

We may update this Privacy Policy to reflect changes to the App, to the services it uses or to legal requirements. When we do, we will revise the "Last updated" date at the top of this page. Material changes, such as a new service receiving data, will be highlighted on this page. Continuing to use the App after an update means you accept the revised policy.

14 Contact us

Questions, concerns or requests about this policy? Reach us at support@powerapps.site. We aim to reply within two business days.

Data controller: Azizbek Mizamov, trading as PowerApps — the publisher of CoinBite for iOS. The email address above is the contact point for any request under this policy.