Privacy Policy

Effective October 8, 2026

Will’s List is an invite-only iPhone app for discovering restaurants. This policy describes the information used to provide your membership.

Account and invitations

We collect your email address to process access requests, record approval, send sign-in codes and invitations, and manage your membership. Sign-in codes and session credentials are stored as hashes. Invitation records include the recipient’s email, delivery status and redemption status. People you invite receive an invitation email.

Location and searches

You may type a neighborhood or optionally share your device location for a nearby search. Search requests send the chosen area or coordinates to our server. Operational request logs and search-processing services may process this information. We record search category, radius and result counts to understand use of the app.

Saved places

Favorites, recently viewed places and custom lists are stored on your device. Saving or removing a place is also reported as a usage event, described below. Account deletion clears these lists from the device where you delete your account.

Membership purchases

Apple processes subscription payments. We receive transaction identifiers, an account token, product, subscription status and renewal dates to verify your access. We do not receive your full payment-card details. Purchases are associated with your signed-in membership. Deleting your account does not cancel an Apple subscription; manage renewal through your Apple Account.

Usage and diagnostics

Our own server receives app interaction events, such as opening a place, saving or sharing it, and tapping directions. Each event and search carries a random ID that the app creates when it is installed. This ID is not linked to your account, email or advertising identifier, and we use it only to understand how the app is used. Reinstalling the app creates a new ID. We also receive technical crash and hang diagnostics through Apple’s MetricKit framework. Server logs support security, delivery troubleshooting and reliability.

Service providers

We use hosting and email-delivery providers to operate the service, and Apple to distribute the app and process purchases. Map, directions and business links open the selected provider’s service, which has its own privacy practices. We do not sell personal information, run advertising, or use advertising tracking identifiers.

Deletion and retention

Choose Account → Delete account in the app to remove your sign-in sessions, email challenges, admission and account records. Your email is removed from other members’ invitation records. We retain a keyed, non-readable identifier and the number of invitations already used so deletion cannot reset the lifetime invitation allowance. A purchase account token and transaction records may remain for subscription restoration and financial reconciliation, without a retained email association after deletion.

Sign-in challenges expire after ten minutes and are pruned after 24 hours during subsequent sign-in requests. Sessions expire after 90 days and are pruned during subsequent sign-in requests; deletion revokes them immediately. Backup copies persist until replaced by the normal backup rotation, which retains the two most recent successful backups. If recovery from a backup is needed, deletion requests must be reapplied before returning the restored database to service. Contact us for requests concerning historical diagnostics or provider-held records.

Restaurant and business data

The business information Will's List shows you — names, ratings, hours, reviews, and photos — comes from publicly available Google Maps listings and NYC public open data. This is information about businesses, not about you.

Children's privacy

Will's List is not directed at children under 13, and we do not knowingly collect data from children.

Changes to this policy

If this policy changes, we'll update this page and revise the effective date above.

Contact

Questions about this policy or your data? Email privacy@willslist.co.