Privacy Policy di Tipp.food

Deletion of the Tipp.food account and data

Path updated on 6 October 2026.

You can ask Studio Scivoletto S.r.l. Unipersonale to delete your Tipp.food account and associated data without accessing the app or website and without installing or reinstalling the app.

Request without using the app

Write to info@studioscivoletto.it, a monitored contact address, with the subject “Deletion of Tipp.food account and data”.
Indicate the email address associated with the account and, if available, the nickname, so that we can identify the account. If possible, write from the associated address; if you can no longer use it, mention this in your request.
Ask for the deletion of the account and associated data. Indicate whether you also want to remove your published texts and photos or keep them in anonymized form, according to the procedures described in sections 24 and 25 below. You may also ask for the removal of your content after deleting the account from the app, indicating the content concerned.

Do not send passwords, access codes or verification codes. To protect the account, we may ask only for the information necessary to verify your identity; it is not necessary to access Tipp.food to submit the request.

What is deleted and what may remain

Deletion removes the authentication account and the personal profile data, avatar and personal links to contributions; it revokes sessions and tokens. Unpublished contributions and their related photos are removed according to the existing procedure. For texts and photos already published, you may request their deletion or their retention without personal attribution according to sections 24 and 25. Contributions by other users are not deleted as a result of your request.

Any data that must be retained for security or legal obligations, and backup copies, are handled according to section 14: the main authentication and profile logs are retained for 30 days, and the main application logs for 90 days; residual copies in backups are deleted according to their relevant technical retention cycles. Content retained in anonymized form remains in the catalogue according to the conditions described in this notice. This is not a temporary suspension or deactivation of the account.

Self-service deletion in the app

In the iPhone or Android app, open Profile → Account settings → Delete account, type DELETE_MY_ACCOUNT and confirm again with Delete account. The operation is final. This path deletes the account and personal data and retains the Tipp already published, including approved content, without personal attribution as “Reported by the community”. To also request the removal of your texts or photos already published, use the contact address above.

Tipp.food Privacy Policy

Last updated: 1 September 2026

This notice describes how Tipp.food processes the personal data of users and people who use the service, pursuant to Regulation (EU) 2016/679 (GDPR) and applicable legislation on the protection of personal data.

Tipp.food is a platform through which people can discover and report dishes, specialties and products that they consider worth trying, also indicating where to find them.

1. Data controller

The Data Controller is:

Studio Scivoletto S.r.l. Unipersonale

Via Catagirasi snc 97015 Modica (RG) – Italy VAT No. 01194800882 Certified email (PEC): studioscivolettosas@pec.it Email: info@studioscivoletto.it Legal representative: Giambattista Scivoletto

For any request relating to the protection of personal data or to exercise the rights provided for by the GDPR, you may write to info@studioscivoletto.it.

2. What data we process

Using Tipp.food’s public pages does not necessarily require the creation of an account.

When the user decides to register, log in, report a Tipp or use certain features, we may process the following categories of data:

Account data: email address, nickname chosen by the user, technical account identifiers, creation date, avatar or profile image, and technical information necessary to manage authentication and the session.
Content submitted by the user: reported Tipp, associated Venue and locality, texts and reasons entered, photos of the Tipp, photos of the Venue that may be proposed, subsequent changes to the user’s contributions, and information relating to moderation.
Technical data: IP address or its cryptographic representation when necessary for security and abuse-prevention purposes, request identifiers, date and time of operations, and technical information relating to the session and requests made to the systems.
Location data: only when the user voluntarily chooses to use the device’s geolocation feature.

3. Registration, access and magic link

Tipp.food uses a passwordless authentication system based on sending a magic link or a temporary code to the email address provided by the user.

To manage this process, the email address and the technical identifiers necessary to create and maintain the session are processed.

The tokens and codes used for authentication have a limited duration. Temporary tokens used for the magic link are stored in protected form and are subject to automatic expiration.

The user’s session is managed through browser local-storage technologies. Tipp.food does not use application cookies to maintain the session.

4. Nickname and public profile

Each user may choose a public nickname, used to identify their contributions on the platform.

The nickname may appear:

on the user’s personal public page;
next to published reports;
in the list of reported Tipp;
on other public pages where a contribution is attributed to its author.

The avatar selected by the user, if any, may also be public.

The email address, Cognito identifiers and other technical account identifiers are not published.

To ensure stability of public addresses and prevent impersonation, nicknames that have been used are not recycled. In the event of account deletion, the nickname may therefore remain reserved in a form not associated with the identity of the former user.

5. Reports and published content

When a user reports a Tipp, they may provide information about the product or dish tasted, the Venue where they found it, their own description of the experience and photographs.

Content may be subject to moderation before publication.

Once approved, the following may become publicly visible:

author’s nickname;
avatar;
report text;
approved photographs;
date of the report;
associated Tipp, Venue and locality;
other information necessary to contextualize the contribution.

Emails, internal identifiers, IP addresses and technical account information are not published.

6. Moderation and changes

Tipp.food reviews content before or after publication according to the editorial processes provided for by the platform.

The user may propose changes to the text of their reports, add photographs or propose photographs of the Venue. Such changes do not automatically become public.

During review, the previously approved version remains online. The new content becomes public only after approval.

Authorized administrators may access the data necessary to examine reports, photographs, revisions and other information connected with the moderation process.

7. Photographs and metadata

Photographs uploaded by users are stored on private infrastructure and undergo technical processing before public use.

Tipp.food removes EXIF metadata and any unnecessary GPS coordinates from images, while preserving the orientation and visual content of the photograph.

Approved images may be made publicly visible. Images still under review or rejected are not published.

Rejected photographs are retained for a limited period and subsequently deleted according to the service’s technical retention policies.

8. Geolocation

Tipp.food may offer a feature for identifying Tipp or localities close to the user’s location.

Location is requested only following a voluntary action by the user and after authorization through the browser or device permission system.

Coordinates are used temporarily to determine the relevant locality and are not stored in the user’s profile or permanently associated with their account.

To determine the locality, coordinates may be transmitted by our systems to Google Places services. In this case, Google receives the request from Tipp.food’s backend systems and not the identity of the user’s account.

The resulting locality may be temporarily stored in the browser session to enable geographical browsing.

9. Text improvement and artificial intelligence systems

Tipp.food may use artificial intelligence services to assist with certain editorial activities.

When the user uses the text-improvement feature for a report, the original text may be transmitted to OpenAI systems to produce a stylistically improved version.

In this process, the user’s email address, nickname or internal identifier are not intentionally transmitted to OpenAI.

OpenAI may also be used for editorial activities and the enrichment of information relating to Venues, using data such as the name, locality, address, categories and information available about the Venue.

Tipp.food configures such requests so as not to require the application-level storage of responses by the service when this option is available.

The integration with Google Gemini currently used by the system is limited to the technical verification of service availability and does not send user content.

10. Google Places and Google Maps

Tipp.food uses Google Places and Google geographic services to identify, verify and organize the Venues and localities present on the platform.

Depending on the feature, the following may be transmitted to Google:

Venue name;
locality or address;
Google Place ID;
Venue coordinates;
temporary user coordinates when the user voluntarily uses the nearby-search feature.

Emails, nicknames, report texts or user photographs are not intentionally transmitted to Google as part of these backend operations.

The “Directions” button on the website instead leads directly to Google Maps. In this case, the user accesses an external Google service subject to Google’s terms and privacy notices.

11. Purposes of processing

Personal data are processed for the following purposes:

creating and managing the account;
authenticating the user and maintaining the session;
enabling the submission, management and publication of Tipp;
publicly attributing contributions through the chosen nickname;
managing photographs and other content;
moderating and reviewing reports;
managing changes and revisions;
identifying Venues and localities;
providing the geolocation features requested by the user;
sending magic links and other communications strictly connected with the service;
preventing abuse, unauthorized access and improper use;
maintaining the security and technical reliability of the platform;
complying with any legal obligations;
handling requests relating to data-subject rights.

12. Legal bases

Depending on the specific activity, processing may be based on:

the performance of the service requested by the user and of pre-contractual measures taken at the user’s request, pursuant to Article 6(1)(b) GDPR;
the legitimate interest of the Controller in ensuring security, preventing abuse, maintaining the integrity of the platform and properly managing content, pursuant to Article 6(1)(f) GDPR;
compliance with legal obligations, pursuant to Article 6(1)(c) GDPR;
the data subject’s consent when a specific feature requires it and consent constitutes the appropriate legal basis.

Use of geolocation also requires the technical authorization provided by the user through their browser or device.

13. Email communications

The email address is used for authentication through a magic link, for communications necessary for the operation of the account and for any communications strictly connected with activities requested by the user.

Tipp.food does not use the email address to send advertising communications based solely on registration for the service.

Transactional emails are sent through Resend, to which the data necessary for delivery are transmitted, such as the email address, any nickname, message content and magic link or temporary code.

14. Data retention

Data are retained for the time necessary for the purposes for which they are processed and for the operation of the platform.

In particular:

magic-link tokens and technical data connected with temporary authentication have a limited duration and are automatically deleted;
incomplete and unclaimed report drafts expire after 24 hours;
rejected photographs are retained for 30 days;
rejected revisions are retained for 90 days;
the main logs relating to authentication and profiles are retained for 30 days;
the main application logs are retained for 90 days;
approved content is retained for as long as it remains published or as long as there is a legitimate purpose for retaining it;
account data are retained until the account is deleted, except for data that must be retained for legal obligations, security or the protection of rights.

Backup copies and point-in-time recovery systems may temporarily retain previous versions of data for the period provided for by the relevant technical backup policies.

15. Account deletion

The user may request deletion of their account.

Deletion entails removal of the authentication account, profile, sessions, tokens and avatar.

Content already published may, depending on the choice made and the applicable conditions, be deleted or retained in anonymized form. In the event of anonymization, the links to the account are removed and the author is indicated in a neutral form, for example as “Deleted user”.

The previously used nickname may remain reserved in a technical register lacking the former user’s email and identifiers, in order to prevent it from subsequently being assigned to another person.

16. Data providers and recipients

To provide the Tipp.food service, technological providers are used that may process data within the scope of their respective functions.

These include:

Amazon Web Services (AWS), for hosting, databases, authentication, image storage, APIs, security and infrastructure;
Resend, for sending transactional emails and magic links;
Google, for Google Places, geocoding and geographic services;
OpenAI, for certain text-improvement and editorial-support features.

These parties process data according to their respective contractual terms and, where applicable, as processors or independent data controllers in relation to the specific activities performed.

17. International transfers

Some of the providers used by Tipp.food belong to international groups or may process data through infrastructure located also outside the European Economic Area.

When processing involves an international transfer of personal data, the Controller adopts or verifies the existence of the safeguards required by applicable law, such as adequacy decisions, the Data Privacy Framework where applicable, standard contractual clauses or other instruments provided for by the GDPR.

18. Security

Tipp.food adopts technical and organizational measures intended to protect personal data and processed content.

The technical measures implemented include:

HTTPS connections;
authentication through Amazon Cognito;
access control through IAM;
private storage of photographs;
signed and temporary URLs for images and uploads;
encryption of data on the AWS services used;
credential management through AWS Secrets Manager;
protection of the administrative area through network and backend controls;
WAF;
rate limiting and anti-abuse measures;
removal of EXIF/GPS metadata from photographs;
content moderation;
protections against concurrent changes;
backups and point-in-time recovery of the main data resources.

19. Cookies and similar technologies

Tipp.food currently does not use application cookies, advertising systems, profiling tools or analytics platforms.

The browser’s localStorage and sessionStorage are used for authentication, session operation and certain preferences.

For more information, you may consult the Cookies and similar technologies page.

20. Minors

Tipp.food is not specifically designed for minors.

The rules governing minors’ use of the service and any minimum age requirement are defined in the Terms and Conditions of Service.

If the Controller becomes aware that a minor’s personal data have been processed in breach of the applicable conditions, it may take the measures necessary to delete the account or the data concerned.

21. Data-subject rights

In the cases provided for by the GDPR, the data subject may exercise the rights recognized by Articles 15 et seq., including:

obtaining confirmation as to whether or not personal data concerning them exist;
accessing their personal data;
requesting their correction or updating;
requesting their deletion;
requesting restriction of processing in the cases provided for by law;
objecting to processing in the cases provided for;
receiving their data in a structured, commonly used and machine-readable format where the conditions for portability are met;
withdrawing consent at any time for processing based on consent, without affecting the lawfulness of processing carried out before withdrawal.

Tipp.food also has technical tools that allow the data associated with an account to be extracted in order to handle access and portability requests.

To exercise your rights, you may contact the Controller by writing to:

Email: info@studioscivoletto.it Certified email (PEC): studioscivolettosas@pec.it

The Controller may request the information strictly necessary to verify the requester’s identity before processing the request.

22. Complaint to the supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority for the protection of personal data if they believe that their data are being processed in breach of applicable law.

For data subjects in Italy, the competent authority is the Garante per la protezione dei dati personali.

The possibility of applying to the competent judicial authority in the cases provided for by law remains unaffected.

23. Automated decision-making and profiling

Tipp.food does not use users’ personal data for advertising-profiling activities and does not adopt decisions based solely on automated processing that produce legal effects or similarly significantly affect the user.

Any ranking, counting or ordering systems present on the platform concern Tipp, Venues and other service content and do not constitute personal profiling of the user within the meaning of Article 22 of the GDPR.

Tipp.food does not use user data to personalize advertisements and, at present, does not use behavioral advertising systems.

24. Deletion, anonymization and published content

When an account is deleted, Tipp.food removes or anonymizes personal data according to the procedures described in this notice and in the Terms and Conditions of Service.

The user may request:

deletion of the account while, where applicable, retaining contributions already published in anonymized form;
deletion of the account and their content, within the technically and legally applicable limits.

When a contribution is anonymized, the links to the account, the email address and the author’s personal identifiers are removed. The content may be publicly attributed to a “Deleted user”.

The previously used nickname may remain technically reserved to prevent its future assignment to another person, without retaining the email or identifier of the deleted account in the relevant register.

Any residual copies present in backup or point-in-time recovery systems are progressively deleted according to normal technical retention cycles and are not used for ordinary purposes.

25. Content and photographs after account deletion

Texts and photographs published through Tipp.food are connected with the operation of the catalogue and may contribute to the description of Tipp and Venues reported by other people as well.

The retention of such content after account deletion depends on the choice made by the user, the nature of the content and the provisions of the applicable Terms and Conditions.

When content is retained in anonymized form, Tipp.food removes the link to the author’s identity.

When deletion of the content is requested and applicable, Tipp.food removes the relevant data and files from its operational systems, without prejudice to the technical time required and any copies temporarily present in backup systems.

26. Data relating to other people

Users must avoid entering personal data of third parties that are not necessary for the report in texts, photographs or other content published on Tipp.food.

In particular, before uploading a photograph, the user must verify that they are entitled to publish it and pay attention to the recognizable presence of other people.

Tipp.food may reject, obscure or remove content containing irrelevant personal data of third parties, inappropriate images or other elements incompatible with the platform’s rules and applicable law.

Anyone who believes that content published on Tipp.food infringes their rights may contact info@studioscivoletto.it, preferably indicating the link to the page concerned.

27. Nature of the provision of data

Providing data necessary merely to consult public pages is not required, except for technical data inevitably connected with communication over the Internet.

To create an account and use restricted features, however, it is necessary to provide certain data, in particular the email address and nickname.

Failure to provide the data necessary for authentication or for using a specific feature may make it impossible to provide that part of the service.

Geolocation is optional. The user may use Tipp.food without granting access to their device’s location and may select a locality using the other tools made available by the platform.

28. Links to external websites and services

Tipp.food may contain links to websites or services operated by third parties, such as Google Maps to provide directions to a Venue.

When the user chooses to follow one of these links, they leave Tipp.food and access the third party’s service.

The processing of data subsequently carried out by the external website or service is governed by the terms and privacy notices of its operator.

Tipp.food does not control the data-processing methods independently carried out by external websites accessed through such links.

29. Changes to this notice

This Privacy Policy may be updated to reflect:

regulatory changes;
developments in Tipp.food features;
changes to the technological providers used;
changes in the ways data are processed or retained;
new security or privacy-management measures.

The updated version is published on this page with the date of the latest update.

In the event of substantial changes that significantly affect the processing of registered users’ data, Tipp.food may provide specific information through the website or by means of the available contact details, where appropriate or required by law.

30. Privacy contacts

For information about this Privacy Policy, to exercise the rights provided for by law or to report a problem relating to the processing of personal data, you may contact:

Studio Scivoletto S.r.l. Unipersonale Via Catagirasi snc 97015 Modica (RG) – Italy VAT No. 01194800882

Email: info@studioscivoletto.it Certified email (PEC): studioscivolettosas@pec.it

Privacy requests will be handled in accordance with the terms and procedures provided for

Google Maps and Google Places

Integration of 6 October 2026.

Tipp.food includes Google Maps features and content through Google Places. Their use is subject to the Google Maps Additional Terms of Service for End Users and the Google Privacy Policy, referenced in this notice.

In searches for localities and Venues, Tipp.food systems transmit the search terms and the necessary geographical context to Google. When the user voluntarily activates a location-based feature and grants device permission, coordinates may also be used to search for nearby Venues through Google Places. These backend requests do not include the email or Tipp.food account identifier. The processing carried out by Google to provide these services is described in its Privacy Policy.

With “Directions”, Tipp.food opens a destination in the external map service selected by the user, according to the options available on the device. If the service is Google Maps, the Google references indicated above apply; for other services, the terms and privacy notice of the relevant operator apply.