Privacy Policy
Last updated: April 13, 2026
Fome ("we", "our", "us"), operated by Fome App, Inc., provides a restaurant intelligence platform that aggregates data from restaurant systems, review platforms, and social media to deliver analytics and operational recommendations. This Privacy Policy explains what information we collect, how we use it, and your rights.
1. Information You Provide
- Account details (email, name, restaurant information) when you sign up.
- Credentials and consent you provide via OAuth to allow Fome to access your connected accounts.
2. Google Business Profile Data
When you connect a Google Business Profile, we use Google APIs to access and collect:
- Location metadata (location IDs, names, addresses, business categories).
- Reviews, ratings, and review responses on your Google Business Profile.
- Account-level metadata needed to identify which locations belong to your account.
Fome's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Social Media Data
When you connect Facebook Pages or Instagram Business Accounts, we collect:
- Page / IG account metadata (IDs, names, handles).
- Post content metadata (caption, timestamp, permalink, media type, thumbnails).
- Post and account insights (impressions, reach, likes, comments, shares, saves, video views, clicks and similar metrics).
- Reviews and ratings for Pages and other publicly available feedback.
4. Tokens & Credentials
OAuth tokens and any refresh tokens necessary to access APIs are stored encrypted in our credential vault. We do not store plaintext passwords.
- To display review, social performance, and operational dashboards and reports to restaurant operators.
- To fetch Google Business Profile reviews and allow operators to draft and publish responses.
- To run backfills and scheduled syncs that keep metrics and reviews up to date.
- To investigate and remediate sync errors or support issues.
We retain review data, social metrics, and post metadata until you request deletion or disconnect the integration. OAuth tokens are kept while the integration is active. We may retain aggregate or anonymized data for longer periods for analytics and product improvement.
We use Google and Meta APIs to retrieve data. We do not sell your personal data. We may share data with our sub-processors for storage, hosting, and analytics (e.g., Supabase). Any third party we use is contractually bound to process data only for the purposes described.
- Access — request a copy of data we hold about your restaurant.
- Deletion — request removal of your data and tokens by emailing privacy@fomeapp.com.
- Rectification — request corrections to inaccurate data.
- Revocation — disconnect any integration at any time from within the app, or revoke access directly from the third-party provider (e.g., Google Account Security settings).
We use industry-standard safeguards, including encryption of credentials in a vault, TLS in transit, and reasonable access controls. No system is 100% secure; please contact us if you suspect a breach.
To request deletion of your data, email privacy@fomeapp.com. We will verify ownership and complete deletion within 30 days.
For privacy inquiries, email privacy@fomeapp.com.
Fome App, Inc. — fomeapp.com