Privacy Policy

Last updated: 27 August 2026 · Applies to the NearEats iPhone app and to neareats.12f.dk.

The short version

There is no account and no NearEats server. Your saved places, your visited history and your search results live on your phone. To show you what's nearby, the app asks OpenStreetMap and Apple Maps what is around a coordinate. The app also sends anonymous usage analytics, including session recordings, to PostHog — that is described in full in section 3, because it is the part people most deserve to know about. Nothing is sold to anyone.

1. Who we are

NearEats is made by 12F ApS, a company registered in Denmark. For the purposes of the GDPR, 12F ApS is the data controller for the analytics described in section 3. You can reach us through 12f.dk.

2. What stays on your phone

These never leave your device, and we cannot see them:

• Your location. The app asks for "when in use" location access so it knows what "nearby" means. It is used to build a search, and to work out how far away and how long a walk each place is.
• Saved places and your "been here" journal. Stored in the app's own storage on the device.
• Cached search results. Venues found near you are kept locally for up to 30 days, so the app is fast and works with a poor connection.

There is no account, no sign-up, no email address and no login, so there is no profile of you anywhere to attach any of this to.

3. Analytics — what the app sends to PostHog

This is the section that matters. We would rather tell you exactly what happens than hide behind "we care about your privacy".

NearEats includes PostHog, a product-analytics tool, so we can see whether the app is working and being used. It is configured with:

• Usage events. In practice this is a single event when the app becomes active. It carries no venue, no search and no location.
• Session replay. The PostHog SDK records how the app is used — the screens and interactions of a session — so we can see where the app confuses people. Because those screens include the map and the venue list, a recording can show roughly where you were when you used the app. Text input is masked by the SDK, but you should assume a session recording shows what the app showed you.
• Technical information that the PostHog SDK collects automatically: a randomly generated device identifier, device model, operating system version, app version, locale, and your IP address (which PostHog uses to derive a coarse, city-level location, and which is not stored against a name because we do not have one).

Data is sent to PostHog's EU infrastructure at eu.i.posthog.com and held in a project shared across 12F's apps, tagged so NearEats' events can be told apart. PostHog acts as our data processor. We do not sell it, share it for advertising, or combine it with anything else.

Being straight with you about two things:

• Analytics is currently on by default, and the current version of the app has no setting to turn it off. We are not going to pretend otherwise. An in-app opt-out is planned.
• Until that ships, the way to stop it is to not install the app, or to remove it.

If you want your analytics data deleted, contact us (section 7) and we will remove what can be identified from the request.

4. Services the app talks to

To do its job, NearEats makes requests to these services. Each receives only what it needs to answer, and none of them receives an account, a name or an email address, because the app has none.

• OpenStreetMap (Overpass API) — overpass-api.de, overpass.kumi.systems, overpass.private.coffee. Receives a coordinate and a search radius; returns the venues around it. This is the app's main source of opening hours, diet options, accessibility and amenities. Map data © OpenStreetMap contributors.
• Apple Maps / MapKit — used to draw the map, to search for venues, to turn coordinates into addresses, and to work out walking times. Apple's own privacy policy applies to what MapKit does.
• Nager.Date — date.nager.at. Receives a year and a country code, and returns that country's public holidays, so opening hours can be read correctly around them. It receives no coordinate and nothing about you.
• Wikimedia — commons.wikimedia.org, en.wikipedia.org, wikidata.org. Used to fetch a photo or a short description for a venue when one exists.
• PostHog — eu.i.posthog.com, as described in section 3.

When you tap through to a venue's own website, phone number or directions, you leave NearEats and whatever is at the other end applies instead.

5. What we never do

• We do not sell your data. Not to anyone, not in any form.
• We do not show ads, and no venue can pay to appear higher in your list.
• We do not ask for an account, an email address or a sign-in.
• We do not use advertising identifiers, and the app does not ask for App Tracking Transparency permission, because it does not track you across other companies' apps or websites.
• We do not upload your saved places or your visited history.

6. Purchases

NearEats is a one-time purchase on the App Store. Apple handles the payment — we never see your card details, your billing address or your Apple Account. Refunds, re-downloads and Family Sharing are all handled by Apple under Apple's terms.

7. This website

neareats.12f.dk uses Umami, a privacy-focused analytics tool that we host ourselves. It sets no cookies, collects no personal data and does not follow you between sites. It records page views, referrers and coarse country-level information, plus which "Get the app" button gets clicked, so we can tell which parts of this page are useful.

8. Children

NearEats is not directed at children and does not knowingly collect data from them. It has no social features, no messaging, no user accounts and no user-generated content.

9. Your rights

If you are in the EU or the UK, the GDPR gives you the right to access, correct, delete, restrict or object to the processing of your personal data, and to complain to your national supervisory authority — in Denmark, Datatilsynet.

In practice, most of what NearEats holds is on your own phone, and deleting the app removes it. For the analytics described in section 3, contact us and we will help.

Our legal basis for the analytics is our legitimate interest in understanding whether the app works. If you would rather we did not, tell us — and see the honest note in section 3 about the opt-out that is not there yet.

10. Changes to this policy

If what the app does changes, this page changes with it, and the date at the top moves. We will not quietly broaden what we collect and leave this page saying something else.

11. Contact

Questions, deletion requests, or something on this page that does not match what you see the app doing: get in touch through 12f.dk. If you think something here is wrong, please tell us — we would rather fix it than defend it.