SpotoGoFind it. Pin it. Go.

Privacy Policy

Last updated: 28 October 2026 (new name: Spotogo, formerly Spotogo)

Spotogo (“we”) is an Android app, made by ftwco., that pins restaurants you discover in Instagram and YouTube food reels on a map. This policy explains what data Spotogo uses, where it goes, and the choices you have.

1. Your account

• Email address: to log you in. When you log in with a code, we email you a 6-digit code. It’s stored only as a scrambled (hashed) value and expires after 10 minutes.
• Google sign-in (optional): your Google account ID, verified email and name. We ask Google only for these basic details (openid email profile).
• Sign-in limits: to stop abuse, we count code requests per email address and per IP address for an hour.
• Username and name: the username you pick (required) and an optional display name. Both are public: anyone on Spotogo can find your profile by them.
• Your login stays active on a phone until you log out. You can log out of all phones at once.

Google user data. If you sign in with Google, we use your name, email address and Google account ID only to create your Spotogo account, log you in and keep your spots in sync. We don’t use Google user data for advertising, don’t sell it, and don’t transfer it to anyone except as needed to run Spotogo (our server host, Cloudflare). Spotogo’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Spotogo’s access at any time in your Google Account permissions.

2. Your saved spots

• What: restaurant names, addresses, map positions, your notes, and the link and creator of the reel each came from.
• Where: in your Spotogo account on our server (Cloudflare), so they sync between your phones, and as a copy on each phone you’re logged in on, so the map works offline. Logging out removes the copy from that phone; the spots stay in your account.
• Spots you save are public: they appear on your profile and on the maps of people who follow you, with your rating. Verified profiles (creators verified by Spotogo) can also keep a Private list that only they see. Spots you saved as private before stay private, and private spots stay private if a profile stops being verified (it just can’t add new ones).
• If you respot someone’s public spot, the original owner’s username is kept with your copy, and their spot shows how many times it was respotted.
• We keep them until you delete them or delete your account.

3. Profiles, follows and alerts

• Your public profile shows your username, name, public spots, how many followers you have and how many people you follow, and the lists of followers and following.
• Following someone is public (it appears in those lists). You can unfollow at any time.
• Alerts (optional): if you turn on the bell on a profile, we store your phone’s notification token in your account and send alerts through Firebase Cloud Messaging (Google) when that person adds a public spot. The alert contains their username, the spot’s name and its rating. Turn it off with the bell, or block notifications in your phone’s settings. Logging out removes the token.

4. Data that stays on your phone

• Your location: if you allow it, Spotogo uses it to show where you are on the map. Your exact location never leaves your phone and isn’t stored in your account. When you share a reel, Spotogo may send an approximate position to the place-search service below so that nearby restaurants rank first.
• Creator profile cache: public profile details (name and photo) of creators whose reels you saved, kept so their pages open quickly.

5. Services Spotogo uses

To do its job, the app makes requests to these services directly from your phone. They see your IP address and the request, under their own privacy policies:

• Instagram and YouTube: to read the public caption, title, cover image and creator of a reel you share, and public creator profile pages. When you watch a reel in Spotogo, it plays in Instagram’s or YouTube’s own embedded player, which loads from them. Spotogo doesn’t sign you in to either and doesn’t connect your accounts.
• OpenStreetMap Nominatim and Photon (komoot): to turn restaurant names and addresses into map positions. Search text, and sometimes an approximate position, is sent.
• Ola Maps (Krutrim): to find restaurants in India by name. This one goes through our server, not directly from your phone: Ola receives the restaurant name and area being looked up (and sometimes an approximate position), not your account details. Place data © Ola Maps, © OpenStreetMap contributors.
• OpenFreeMap: map tiles. unpkg and Google Fonts: the map’s code and fonts.
• Google Maps: when you tap “Let’s go”, the destination opens in Google Maps.
• Cloudflare: runs our server (your account and spots) and this website.
• Resend: sends the login-code emails (it receives your email address and the code).
• Firebase Cloud Messaging (Google): delivers alerts, if you turn them on (it receives your phone’s notification token and the alert text).
• GitHub: hosts app downloads and older shared-spot links.

6. Sharing a spot

When you share a spot, the app makes a short link (spotogo.in/s/…). To do that, our server keeps the shared spot (name, address, map position, reel link and creator) under that link, together with your account ID, so anyone you send the link to can open it. These links are deleted when you delete your account. If the app can’t reach our server, it shares a longer link that carries the spot inside it instead, and nothing is stored.

7. Restaurant accounts

Restaurants sign in separately (“For restaurants” on the login screen) to claim their place and run its official page. When a restaurant sends a claim:

• We store the place (name, address, map position), the claimant’s role, a phone number, the restaurant’s GST number (GSTIN) and an optional note, with the account that sent it.
• The claim is emailed to Spotogo’s team, who check the GSTIN by hand on the government’s public GST portal (its registered name, address and status). The GSTIN isn’t shown on the official page.
• Once approved, the details the restaurant enters (hours, contact, prices, signature dishes) are public on its official page. Restaurants only ever see totals from diners (saves, ratings, dishes ordered), never who saved them.
• Claims and official pages are deleted with the restaurant’s account.

Spotogo doesn’t connect to Instagram or YouTube accounts. Instagram and YouTube connections made while that was being tested were deleted on 28 October 2026.

8. Deleting your data

In the app: Profile → your initial (top right) → Delete account. This immediately and permanently deletes your account, username, all your saved spots (public and private), your lists, your follows and followers, alert tokens, and, for restaurant accounts, your claims and official pages. You can also email us; see Delete your data.

9. Children

Spotogo isn’t directed at children under 13. Restaurant accounts are for adults acting for their business.

10. Changes and contact

We’ll update this page if anything changes, and change the date above. Questions or requests: privacy@spotogo.in.