Last updated: 1 September 2026
Privacy
What Mantelier collects, why, and what you can ask us to do about it. Written to be read, not to be survived.
Who is responsible
Mantelier is run by Kylan Scheepstra, based in the Netherlands. For anything in this policy — including access, correction or deletion requests — write to hello@mantelier.app and you'll get a reply from a person.
Under the GDPR, we are the data controller for the personal data described below.
What we collect
When you join the waiting list
Your email address, and the date you submitted it. Nothing else — no name, no tracking pixel, no profiling. We use it once: to tell you when the app opens.
When you create an account
Your email address, a password (stored hashed — we never see it), a display name, and optionally a profile photo. Sign-in is handled by Supabase Auth.
What you create in the app
- Restaurants and hotels you save, visit or rate
- Photos you upload, including any caption
- Trips you plan and events you mark yourself as attending
- Friend requests, accepted friendships, and blocks
- Corrections you report about a venue's details
Most of this is private by default. Some of it can be shared with people you have accepted as friends. You choose which, and you can change it at any time.
If you claim a venue
If you are a chef, restaurateur or hotelier and claim a listing, we record who you are, which venue you claimed, and anything you submit for it — events, descriptions, photos. Submissions are reviewed by hand before they appear.
How you use the app
When you tap through from a venue to its own website or booking page, we record that a tap happened: which venue, which destination, which screen, and when. This tells us which listings are useful. We do not follow you to the other site and we do not know whether you booked anything.
Location
If you allow it, the app uses your device's location to show what is near you. Permission is asked at the moment it is needed, and you can refuse or withdraw it in your device settings without losing access to the rest of the app.
Technical data
Our hosting providers process standard technical data — IP address, device type, timestamps — as part of delivering the service and keeping it secure.
Why we are allowed to hold it
Account data and the content you create: because we need it to provide the service you asked for (contract). Waiting-list emails: because you gave them to us for that purpose (consent — withdraw any time by replying to any message). Usage data and security logs: because we have a legitimate interest in knowing whether the product works and in protecting it from abuse. Location: consent, which you give and withdraw in your device settings.
Who else sees it
Our processors
- Supabase — database, authentication and file storage
- Cloudflare — hosting and delivery of this website
- Apple — App Store and TestFlight distribution
- Google Fonts — typefaces on this website
These providers act on our instructions and may not use your data for their own purposes. Some of them operate outside the European Economic Area; where that happens, transfers rely on the European Commission's standard contractual clauses.
Other people in the app
People you accept as friends can see what you have chosen to share with them. Removing a friend or blocking someone takes effect immediately, on their next request — there is no cached access.
Restaurants, hotels and partners
We intend to share aggregated statistics with venues and partners — for example, how many people looked at a listing or tapped through to a booking page in a given month.
This is built so that individual people cannot be identified. Aggregates are suppressed entirely below five unique users, individual identifiers and precise timestamps are never included, and the underlying records are not readable by anyone outside Mantelier. We do not sell personal data, and we do not share data that can be traced back to you.
When the law requires it
If we receive a valid legal order, we comply. If we are permitted to tell you, we will.
How long we keep it
Account data and the content you create: for as long as your account exists. Waiting-list emails: until the app launches or you ask us to remove you, whichever comes first. Usage records: kept in aggregate; the underlying rows are retained no longer than we need them for that purpose.
Deleting your account
You can delete your account from within the app. This removes your profile, your saved places, your visits, your photos and your friendships. Aggregated counts that no longer identify you may remain, because there is nothing left in them to remove.
If you would rather we did it for you, write to hello@mantelier.app.
Your rights
Under the GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, and ask for it in a portable format. You can also object to processing we base on legitimate interest.
Write to hello@mantelier.app and we will respond within one month. If you are unhappy with how we handle it, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Children
Mantelier is not intended for children under 16. We do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.
Changes
If we change how we use your data in a way that matters, we will update this page and change the date at the top. If the change is significant, we will tell you in the app or by email rather than expecting you to notice.