Privacy Policy
Last updated: October 16, 2026
1. Information We Collect
Joy Top collects: phone number (authentication), location data (nearby restaurants, GPS-verified reviews), photos and text (reviews), device information (error tracking via Sentry). In addition: the name, @handle and avatar you set; your venue ratings and recommendations, comparisons and tops; your email address if you sign in with email and password; your device's push token (Expo) if you allow notifications; your age range and occupation — optional, you can skip these questions, and the answers help tailor recommendations; a hashed identifier of the app installation, stored with each review to protect against fake reviews and reset when the app is reinstalled; the users you block and the reports you send (section 10).
2. How We Use Information
To provide restaurant discovery, review verification, personalized recommendations, and owner analytics. We do not sell personal data.
3. Data Storage
Data is stored securely via Supabase (PostgreSQL) with row-level security policies. Photos are stored in Supabase Storage.
4. Third-Party Services
Eskiz.uz (SMS delivery), Sentry (error tracking), OpenAI (review moderation), Sightengine (image moderation).
5. Your Rights
You can delete your account directly in the app: Profile → Settings → “Delete account”. Deletion is permanent: together with the account we delete your profile (name, @handle, avatar, phone number, email, age range, occupation, push token), your ratings and recommendations, comparisons and tops, favorites, blocks and reports. Reviews are kept in anonymized form — without your name or profile. You may also request deletion of your account and data by contacting support.
6. International data transfers
To provide the service, your personal data is stored and processed on servers located in Singapore (via Supabase's managed cloud infrastructure) — that is, outside the Republic of Uzbekistan. This transfer is carried out on the basis of your consent and subject to data-protection safeguards: the provider's Data Processing Agreement (DPA), the EU Standard Contractual Clauses (SCC), and ISO/IEC 27001 and SOC 2 certifications. Your data may be shared with the following processors: Supabase (hosting, Singapore), Eskiz.uz (SMS verification codes, Uzbekistan), Expo (push notifications), Sentry (error monitoring), and review/image moderation providers. You may withdraw your consent at any time.
7. Operator & Contact
The operator of your personal data is JOYTOP DIGITAL LLC (MChJ), TIN (STIR) 313113824, registered at Alisher Navoiy MFY, Xusan Shams street 18, Tashkent 700000, Republic of Uzbekistan. For any request regarding your data — access, correction, deletion, or withdrawal of consent — email nusratov3@icloud.com or call +998 77 577 33 55.
8. What Other Users See
Your reviews and their photos are published with your name and avatar; your name, avatar, level and points may appear on the user leaderboard. If you choose an @handle, it opens your public profile: name, avatar, level and points, your tops and your recent venue ratings. You can hide recent ratings with the “Hide my ratings” switch in your profile — your tops stay visible. Until you choose an @handle, there is no public profile. Your phone number and email are never shown to other users.
9. Places and Photos You Suggest
When you share a place — add a new venue or tell us what makes a listed one special — we receive what you send: the name and map pin (for a new place), tags, menu and venue photos, and a short note. Until they are reviewed, the photos are kept in private storage. None of it is published until the Joy Top team reviews and accepts it. Suggested edits to venue information are reviewed the same way.
10. Blocks and Reports
If you block a user, we store whom you blocked and when. Only you can see this list (Profile → Settings → “Blocked users”), and the blocked user's reviews and photos are no longer shown to you. If you report a review, photo or profile, we store the report: what it is about, the reason and comment if you gave them, and the date. Reports are available only to Joy Top moderators and are used only for moderation; the user you reported does not learn who reported them.