Privacy Policy

1. Who we are

Amtly is operated by Dulguun Battur, who is based in Mongolia. Dulguun Battur is the controller responsible for the personal information described in this policy. “Amtly”, “we” and “us” mean Dulguun Battur operating the Amtly app and the getamtly.com website.

If you have a question about this policy or want to make a privacy request, email support@getamtly.com.

2. Account information

You can browse Amtly without an account. When you create one, we collect your email address and a display name, and you may add a profile photo. Accounts are handled by our authentication provider, Supabase Auth; if you sign up with an email and password, your password is stored by that provider as a salted hash and is never visible to us.

You can also sign in with Google or with Apple. In that case the provider confirms your identity and shares a basic account identifier, your email address, and — for Google — your name and avatar. We never receive your Google or Apple password. If you apply to claim or register a restaurant, we also collect the contact and business details you submit on that form.

3. Location

With your permission, Amtly uses your device location while you are using the app to sort restaurants by distance, show what is near you, and centre the map. iOS asks for “when in use” access only — Amtly never requests background location. You can decline and still use everything else; you simply will not see distance-sorted or nearby results.

Location used for nearby search is not stored on our servers as a history of your movements. There is one exception, and it is always your choice: when you post to Bites you can add a pin to the post. That pin is only saved if you confirm it in the composer, and it is then stored with the post and shown to anyone who can see the post. You can turn location access on or off at any time in iOS Settings → Privacy & Security → Location Services → Amtly, or in your browser’s site settings on the web.

4. Camera and photo library

If you choose to post to Bites or add a photo to a restaurant, Amtly asks for access to your camera or your photo library so you can take or pick that photo. We only receive the images you actually select — access to the permission does not give us your library.

Photos you post are uploaded to our storage provider and shown in the app together with your display name. Photo files may carry embedded metadata such as the time and place a picture was taken; if you would rather not share that, remove it before uploading or turn off location tagging in your camera app.

5. Content you create

We store what you submit: reviews (an overall rating, optional food, service, atmosphere and value ratings, and your written review), Bites posts, comments, likes, follows, the restaurants and posts you save, and reports you file about content. Reviews, Bites posts, comments and your display name and profile photo are public — anyone using Amtly can see them, and other people may report them.

Two parts of a review are deliberately not public. Whether you would recommend the place, and any private note you write to the restaurant, are stored separately from the public review and can be read only by you, by the approved owner of that restaurant, and by our administrators. Restaurant owners cannot edit or delete your private note.

If you email support, we keep that correspondence so we can answer you and keep a record of the issue.

6. Usage and device information

The getamtly.com website uses PostHog, a product-analytics service. It records page views, how long a page was open, and the clicks and form interactions its client captures automatically, along with basic technical information your browser sends — device and browser type, referring page, and an approximate location derived from your IP address. We use it to understand which pages are used and to find problems. The iOS app does not embed a third-party analytics SDK.

Inside the app we log a small number of first-party signals in our own database: which Bites posts were shown to you and how long you looked at them, so the “For You” feed can be ranked; and which sponsored cards were shown or tapped, so we can report performance to advertisers. These signals are tied to your account when you are signed in and are recorded without an account identifier when you are not.

7. Advertising

Amtly shows sponsored cards from a small set of advertisers we manage ourselves, and labels them as sponsored. Which one you see is chosen from context: the cuisine filter you are browsing and the dietary preferences you set in the app, matched against the advertiser’s chosen categories, plus a rotation weight. No advertising identifier (IDFA) is used, we do not build an advertising profile about you, and we do not track you across other companies’ apps or websites.

Advertisers receive aggregate performance figures — how many times a campaign was shown and tapped. They do not receive your identity, your email, your location or your content.

8. Why we use your information

We use the information above only for the purposes it was collected for:

• To create and secure your account, sign you in, and let other diners recognise you.
• To provide the features you ask for — nearby search, maps, saved places, reviews and Bites.
• To operate the community: showing your public content to others, ranking the feed, and passing your private review note to the restaurant you wrote it about.
• To keep Amtly safe: reviewing reports, enforcing our rules, preventing abuse and spam, and applying rate limits.
• To measure and improve the product, and to report aggregate advertising performance.
• To answer your support requests and to comply with our legal obligations.

Where data-protection law requires a legal basis, we rely on performance of our agreement with you (providing the account and the features you request), your consent (location, camera and photo access, which you can withdraw at any time in your device settings), our legitimate interests (security, abuse prevention, product improvement), and legal obligation where the law requires it.

9. Who we share it with

We do not sell your personal data and we do not share it for cross-context behavioural advertising. We share it only with the service providers that run Amtly, and only so they can provide their service to us:

• Supabase — authentication, database and file storage. Your account, your content and your uploaded photos are stored there.
• Vercel — hosting and content delivery for the getamtly.com website, which processes the requests your browser makes.
• PostHog — website product analytics, as described above.
• Map and location services used to draw maps and turn addresses into coordinates: CARTO and OpenStreetMap for web map tiles, Photon (Komoot) and Nominatim (OpenStreetMap) for place search, and Apple MapKit inside the iOS app. Your search terms and the map area you are looking at are sent to these services so they can answer; that request carries your IP address.
• Google and Apple — only if you choose to sign in with them, as identity providers, and Apple as the distributor of the iOS app.
• Legal and safety — we may disclose information where the law requires it, or to protect the rights, safety and security of our users, the public or Amtly.

Each provider acts as our processor and is bound to use the data only for the service it provides to us. Their own handling of information is governed by their privacy policies.

10. How long we keep it

We keep your account information and the content you post for as long as your account exists. When you delete a post, a review or a comment, it is removed from the app. Feed and advertising signals are kept in raw form only for a short operating window and are then pruned or aggregated.

After you delete your account, copies may persist briefly in encrypted backups before they are overwritten on the normal backup cycle. We may keep limited records for longer where the law requires it or where we need them to enforce our rules — for example, a record that a report was made and actioned.

11. Your rights and choices

Depending on where you live, you have rights over your personal information — to access it, correct it, delete it, obtain a copy, object to or restrict certain processing, and withdraw consent. Several of these you can exercise directly:

• Access and correct — view and edit your profile, your reviews and your posts in the app.
• Delete content — delete an individual post, comment or review at any time.
• Delete your account — permanently, from inside the app (see below).
• Permissions — turn location, camera and photo access on or off at any time in your device settings.

For anything else, email support@getamtly.com and tell us what you need. We will respond within a reasonable time and as applicable law requires. If you believe we have handled your information wrongly, you may also complain to your local data-protection authority.

12. Deleting your account

You can delete your Amtly account from inside the iOS app: open the Profile tab, tap Delete account, and confirm. The app warns you first — deleting permanently removes your account, photos, comments and saved places, and it cannot be undone.

The deletion removes your sign-in record and the data attached to your account, including your profile, your Bites posts and the photos stored with them, your comments, likes and follows, your saved places and saved posts, your reviews and any private notes in them, your restaurant applications, and the reports and blocks you created.

If you cannot reach the in-app control — for example, because you can no longer sign in — email support@getamtly.com from the address on the account and we will delete it for you.

13. Children

Amtly is rated 12+ because it carries user-generated content, and it is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, email support@getamtly.com and we will delete it.

14. Where your information is processed

Amtly serves diners in Mongolia, but the providers listed above operate infrastructure outside Mongolia, so your information is transferred to and processed in other countries whose data-protection laws may differ from your own. We take reasonable steps to protect your information wherever it is processed, and we use established providers that offer contractual data-protection terms.

15. Security

Traffic between the app and our servers is encrypted in transit. Access to your data is restricted by authentication and by database row-level security rules that keep private fields — such as a private note to a restaurant — readable only by the people who are meant to see them. No system is perfectly secure, but we work to protect your information and to limit who can reach it.

16. Changes to this policy

We may update this policy as Amtly changes. When we do, we revise the effective date at the top of this page and, for significant changes, give notice in the app or by email before the change takes effect. Continuing to use Amtly after an update means you accept the revised policy.

17. Contact us

Privacy questions and requests: support@getamtly.com. Amtly is operated by Dulguun Battur.