Privacy Policy
Last updated: 4 November 2026
Welcome to Stek! This Privacy Policy explains what personal information we collect, how we use it and what rights you have.
We believe discovering and sharing great places shouldn’t mean giving up control over your personal information.
1. About Stek
Stek is a free social food-discovery app that helps you find restaurants, cafés and other places, save your favorites and discover recommendations from people you trust.
Stek is independently developed and operated by Victor Verboog, an individual developer based in the Netherlands.
For questions about your privacy or requests concerning your personal information, contact [Support email address].
2. What information we collect and why
We collect information necessary to provide Stek’s features.
Account and profile information
When you create an account, we collect your email address, first and last name, account identifier and optional profile photograph.
This information allows us to create your account, maintain your profile and identify you to other users.
Saved and Loved places
We store the places you Save and Love, including relevant timestamps, to maintain your personal collection and provide personalized recommendations.
Social connections
We store Follow requests, accepted Following relationships and related activity to provide Stek’s social features.
Location
With your device’s permission, Stek uses your location to show nearby places, position the map and calculate approximate travel times.
Travel-time estimates are calculated on your device. We do not intentionally store a history of your movements or share your live location with other Stek users.
You can change Stek’s location permissions through your device settings.
Technical information
Our service providers may process IP addresses, device information, connection logs and security-related information necessary to operate and protect Stek.
Support communications
When you contact us, we process your email address and the information you provide to respond to your request.
Legal basis
Under the GDPR, we process personal information based on:
- Performance of our agreement: To provide accounts, Saved and Loved places, Following, recommendations, maps and other requested features.
- Legitimate interests: To protect Stek against misuse, maintain security and respond to certain support requests.
- Legal obligations: Where processing is required by law.
- Consent: Where specifically required, including for optional processing that legally requires your permission.
An email address and name are required to create an account. Profile photographs and device location access are optional, although some features depend on location access.
3. What other users can see
Stek is built around personal recommendations, so some information is visible to other users.
Your profile
Other registered users can find your profile through user search. Your name and optional profile photograph may be visible.
Your email address is not displayed to other users.
Following relationships
Stek uses an approval-based Following system.
When you accept someone’s Follow request, that person can see your Loved places and related recommendation activity.
Following is directional. Accepting a follower does not automatically give you access to their recommendations.
Saved and Loved places
Your Loved places may appear in your accepted followers’ feeds, friend profiles and recommendations.
Your Saved places are kept in your personal collection. Where supported by Stek’s social features, accepted followers may also see that you have Saved a particular place.
Saving a place does not publish a Loved activity post.
You can change your Saved and Loved places and manage your Following relationships through Stek.
4. Services we use
Stek uses external providers to operate its features.
Supabase — Accounts and database
We use Supabase for authentication, profile photographs, Saved and Loved places, and Following relationships.
Our primary Supabase database is hosted in the European Union. Some supporting services and operational processing may take place outside the EU.
Mapbox — Maps
We use Mapbox to display interactive maps.
Mapbox may process technical information, map requests and location-related data.
You can opt out of optional Mapbox telemetry through the privacy and attribution controls within Stek’s map. This does not prevent you from using the map.
Mapbox’s Privacy Policy is available at https://www.mapbox.com/legal/privacy.
Resend — Account emails
We use Resend to send essential emails, including account verification and password reset messages.
Resend processes email addresses, message content and delivery information, with email-related data stored in the United States.
We do not use Resend for marketing newsletters.
Resend’s Privacy Policy is available at https://resend.com/legal/privacy-policy.
GoDaddy — Website hosting
Our website is hosted by GoDaddy.
GoDaddy may process IP addresses, browser information and server logs necessary to deliver and protect the website.
Venue websites — Photographs
Stek displays venue photographs directly from external website URLs.
When your device loads these photographs, the originating website may receive your IP address and standard connection information.
External navigation applications
When you open directions in Apple Maps, Google Maps or another navigation application, that service processes navigation information under its own privacy policy.
Some providers process information outside the European Economic Area. Where required, international transfers are protected by applicable legal safeguards, such as adequacy decisions or Standard Contractual Clauses. You can contact us for details of the applicable safeguards.
We do not sell your personal information to advertisers.
5. How long we keep your information
We keep personal information only for as long as necessary to provide Stek and meet applicable legal obligations.
- Account and profile information: While your account remains active.
- Saved and Loved places: Until you remove them or delete your account.
- Following relationships: Until the relationship or relevant account is removed.
- Support communications: As long as necessary to handle your request and any related obligations.
- Technical and email delivery logs: For limited periods based on security, operational needs and applicable provider retention schedules.
You can permanently delete your account through Stek’s Settings.
When you delete your account, associated personal information is removed from the active service, except where retention is legally required or otherwise permitted.
Information in technical backups is removed according to the applicable backup retention schedules.
6. Your privacy rights
Under the GDPR, you have rights concerning your personal information.
Depending on the circumstances, you can:
- Request access to your information.
- Correct inaccurate information.
- Request deletion of your information.
- Restrict or object to certain processing.
- Receive your information in a portable format.
- Withdraw consent where processing relies on consent.
You can edit your profile and delete your account through Stek’s Settings.
For other privacy requests, contact [Support email address].
We will respond within the time limits required by law, normally within one month.
If you believe your privacy rights have been violated, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at https://autoriteitpersoonsgegevens.nl.
7. Website privacy and changes
Our website is hosted by GoDaddy.
We have not enabled optional website analytics, advertising trackers or marketing cookies. The website and its hosting infrastructure may use strictly necessary technical cookies or similar mechanisms.
If we introduce non-essential tracking technologies, we will request consent where required by law.
We may update this Privacy Policy as Stek evolves or legal requirements change.
The latest version will be available through Stek and on our website. We will inform users of material changes where appropriate.