Privacy policy

Last updated: July 27, 2026

Auzoko is an app for discovering shops in your area. This policy explains in plain language what data we process, what we use it for, and what rights you have. The short version: we ask for the minimum needed to make the app work, there are no ads, no cross-app tracking, and we never sell your data to anyone.

1. Data controller

Julen Palazuelo (Auzoko project), Bilbao, Spain.
Contact: julenpalazuelo44@gmail.com

2. What data we process, and why

• Account data (name, email and user identifier). Used to create and maintain your account, save your favorites, and handle your support requests. Stored in our database, managed by Supabase.
• Precise location. Used solely to show you nearby shops, calculate distances, and center the map. Processed on your device while you use the app; search providers only receive the coordinates of the search area. We never store your location on our servers, nor do we build movement histories. You can use the app without granting location permission by picking an area by hand.
• Favorites.Shops you save are linked to your account so you don't lose them when you switch devices.
• Change reports. If you report that a shop has changed or closed, we store the report content linked to your account to review it and prevent abuse.
• Search history. Stored only on your device. You can clear it from the app itself, and it disappears when you uninstall it.
• Optional usage statistics.Only if you opt in, we measure screens visited and aggregate actions — for example, a search, opening a shop, saving a favorite, or sending a report — to improve Auzoko. We never send your name, email, account identifier, location, search terms, or report text. The provider may use a pseudonymous, install-level technical identifier to group these events. You can withdraw consent under Profile -> Privacy; doing so stops measurement and resets that local identifier.

All of the above is used exclusively to run and improve the app. There is no advertising profiling, no ad SDK, and no tracking across other apps or websites.

3. Providers and data sources

To function, Auzoko relies on these services:

• Supabase - hosts the database and the account system (authentication). Your account, favorites, and report data live here.
• Google Places API - provides shop information (name, hours, ratings, photos). It receives the coordinates of the search area to return nearby results, per Google's privacy policy.
• OpenStreetMap (Overpass) - an alternative open source of shops, used the same way.
• Apple Maps - renders the map on iOS, per Apple's privacy policy.
• Amplitude - only after you opt in, receives the aggregate usage events described above to provide us with product analytics, per its privacy policy. We never send it account data, location, or content you enter.

We do not share your account data with any of these providers for their own purposes.

4. Legal basis

We process your data on the basis of the performance of the service you request when creating an account (GDPR art. 6.1.b) and your consent for location access and optional statistics (GDPR art. 6.1.a), which you can withdraw at any time from iOS settings or your Auzoko profile, respectively.

5. Retention and deletion

We keep your data for as long as you have an account. You can delete your account from the app itself(Profile -> Delete account): deletion is immediate and removes your account, favorites, and associated report data. You can also ask us to do it by email.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction, and portability by writing to julenpalazuelo44@gmail.com. If you believe we haven't handled your data properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es).

7. Minors

Auzoko is not directed at children under 14, and we do not knowingly create accounts for them. If we detect an account belonging to a minor of that age, we will delete it.

8. Security

Data travels encrypted (HTTPS/TLS) and access to the database is restricted by row-level security policies: each user can only access their own data.

9. Changes to this policy

If we change this policy, we'll update the date on this page and, if the change is significant, we'll tell you inside the app.