Your data, in plain sight.

This page explains what happens to the data you give golino: on the website, in the app and when you ask for a suggestion. First, the short version:

• we use your data only to make golino work. We don't sell it, we don't run ads and we don't give it to restaurants;
• your places, your ratings and your notes are seen by you. Others only see what you choose to show;
• golino doesn't search for people and doesn't read your contacts. There are no public profiles;
• where you are is used only for the suggestion of that moment, and we don't keep it;
• whenever you want, we delete everything.

Who handles your data

The data controller is Golino App Srl, Via Piave 6, Noventa di Piave, Venezia, 30020. For any question about your data write to privacy@golino.app. We answer within a month, as the law requires, and usually much sooner.

When you visit the website

The website is hosted by Vercel, which receives your IP address, the type of browser, the page requested and the time: they are needed to deliver the page to you and to protect the website from abuse, and Vercel keeps them in its technical logs for a limited time. We do this on the basis of a legitimate interest: without it, the website doesn't work and can't protect itself (Article 6(1)(f) of European Regulation 2016/679). We serve the fonts ourselves: when you open the pages your browser doesn't contact Google Fonts.

The demo phone, the map and the other screens on the home page work inside your browser, on made-up places: they don't send anything to anyone and don't use artificial intelligence, they pick with a simple rule.

If you apply for the trial

With the trial form we collect:

• name and email, to answer you;
• city, how many places you've saved, what phone you use and who you go out with, to pick a varied group.

They are used to assess your application and to contact you about the trial: you ask for this by filling in the form (Article 6(1)(b) of the Regulation). We don't ask for anything else, we don't use them for advertising and we don't sign you up to any newsletter.

We keep them until the end of the trial, and in any case no longer than twelve months after you sent them. Then we delete them.

If you only leave your email

With “Notify me” we keep the address, the day you left it, the page you left it from and, if you got there from a campaign link, the name of the campaign. Nothing else: no name, no location.

It is used to send you a single email when golino opens to everyone, and to understand which pages and which campaigns work: you ask for this by leaving the address (Article 6(1)(b) of the Regulation). The email is kept in a Neon database in Europe. We keep it until we have written to you that golino is open, then we delete it; before then, if you want, we delete it straight away.

When you use the app

The app is at app.golino.app. Your data is kept in a Neon database, separate from the website's one. We use it to make golino work for you, which is the service you ask for by signing in (Article 6(1)(b) of the Regulation).

To sign in we ask for your email and send you a six-digit code. No password. We keep your email, the name you want to be called by, your language, the day you first signed in and the last one. Of the code we keep only a fingerprint, not the code itself: it expires after ten minutes, and after a day we delete it. To stop people trying to guess codes we count requests for one hour, here too only with fingerprints, without the email written out and without the network address.

If you sign in with Google, Google tells us your email and your name, and nothing else: no photo, no contacts, no places. Signing in with Google doesn't give golino any access to Google Maps.

To remember that you've signed in, the app uses a single technical cookie, which lasts ninety days. “Sign out” switches it off on all your phones. It's a cookie the service needs, and that's why we don't ask for your permission.

If you connect Google Maps, it's a separate permission, which Google asks you for in a window of its own. golino reads only two things: your lists of saved places, with your notes, and the reviews you've written, with their rating. It doesn't read your location history, your routes, your photos or anything else in your account.

Of the places we keep what's in your export: name, address, the Maps link, the list you put it in, your note and your rating. We don't take other people's ratings, reviews or opening hours from Google. To keep your places up to date when you save a new one, we keep the permission Google gives us, encrypted. You can remove the permission whenever you want with “Disconnect Google Maps”, below your places on the app's home page: there you choose whether to keep the places already imported or delete them, and your account stays. You can also remove it from your Google account. Either way, from then on we receive nothing more. If you delete your account, we remove the permission ourselves, and we delete the imported places.

What we receive from Google we use in line with Google's Data Portability API policy and the Google API Services User Data Policy, including the Limited Use requirements. It means that Google data is used only to make golino work for you: we don't use it for advertising, we don't sell it, it isn't used to train models, nobody reads it unless you ask us to or it's needed for security or by law, and it's passed on to others only to give you suggestions, as explained below. golino's use of information received from Google APIs, including the Data Portability API, adheres to the Data Portability API User Data and Developer Policy and the Google API Services User Data Policy, including the Limited Use requirements.

What you mark in golino: whether you've been there, your rating, your note, the lists you want golino to pick from and the order you prefer. It's kept in your own space, together with your places.

Where you are: when you ask for a suggestion you can tap “Use my location”, and only then does your phone ask your permission to use its location. If you say no, or don't tap it, you pick a city yourself. Your location is used to work out, at that moment, how far you are from each place, and to show you roughly which street you're on, so you can see it's right: for that we send it to Google Maps, which answers with the street. We don't keep it and we don't send it to anyone else. The model that writes the suggestions gets only the distance from each place, rounded (for example “800 m”), never where you are.

Who sees your places

To begin with, only you. In golino you can't search for anyone by name or by email, and there are no profiles to browse. Others see something of yours only in two cases, and it's always you who decides.

Together. If you invite someone to choose with you, that person sees the list you share, and there you both mark been there, rating and note. Your other lists stay yours.

People who follow you. Only someone who has received a link from you can follow you; the link is for one person and lasts seven days. They see:

• the name you chose when you signed in;
• the places in the lists you've switched on for your followers (at first they're all off);
• whether you've been there and your rating.

They don't see your email, your notes, the reviews you've written on Google, when you went, where you are, what you ask golino or who else follows you. You can switch off a list or remove a person whenever you want, from your profile, and they don't get notified.

If someone who follows you brings your places into their answers, when they ask for a suggestion golino may send to the model that picks (see how golino picks places) the name of those places, the city and your rating: never your name and never your notes.

What you show others can always be photographed or copied: golino can't prevent that. That's why lists start switched off.

If you write about other people

In notes people sometimes write who they went with (“with Marco, birthday dinner”). Only you see those notes, and whoever chooses with you on the shared list. Only write about others what they wouldn't mind reading. To invite someone golino doesn't ask for your contacts: you send the link yourself, however you like.

If you take part in the trial on claude.ai

Until the app is ready, the trial runs on a version of golino that works on claude.ai, Anthropic's service, with your Claude account.

• What you upload: the file you download from Google (Takeout) with your saved places, your lists, and the notes and ratings you gave. The file is read in your browser and isn't kept.
• What is saved: your places, your lists and what you mark in golino (been there, rating, note), in a space reserved for you inside the trial.
• Who sees it: you, and the person you choose to share your places with. Whoever runs the trial can access it to fix a problem; they don't do it for any other reason.
• The suggestions: they are requested from Anthropic's model through your Claude account, under your account's rules. There you write where you are yourself (a street, an area, a city), and golino doesn't read your phone's location.

At the end of the trial, or earlier if you ask us, we delete everything about you.

How golino picks places

When you ask for a suggestion, golino takes your places from the list you chose, in the city you chose or within the distance you chose from where you are. If for someone you follow you've switched on “In my answers”, it also takes the places from the lists that person lets you see, in the same city or within the same distance. An artificial intelligence model by Anthropic (Claude) looks at which ones suit what you feel like and writes the sentence that explains why.

The order, instead, is set by golino, with a fixed rule: what you've put at the top of your profile counts more (for example “You liked it” or “Close to you”). So for the same request the order is always the same, and each suggestion says why it's the first, the second or the third. If you want a different order, you change it from your profile.

In the trial on claude.ai, for now, it's still the model that puts the places in order: the fixed rule comes with the app.

In the app the request to the model is made by golino's server, never by your phone. The model receives:

• what you feel like, as you write it;
• at most 80 of your places, already in order: the name, the city, the names of the lists you put them in, and your rating, the beginning of your note, the occasions you marked them for and the dishes you liked, if you have them, and how far they are from you, rounded, if you used your location;
• of the places of people you follow that you haven't saved yourself, only the name of the place, the city, how far it is and the highest rating the person you follow gave it: never their notes, their lists or their name.

So the data of those places, with your ratings and your notes, goes through Anthropic every time you ask for a suggestion. It doesn't receive your name, your email, your exact location or the full list of your places. And it doesn't do these things:

• it doesn't suggest places you haven't saved, you or the people you've brought into your answers, and no place shows up because it paid;
• it doesn't write the guides' citations: the name of the publication and the link come from articles that were found and opened; if nobody has written about a place, the card says nothing;
• it doesn't decide anything for you that has effects on you: it suggests, and you choose.

It can get things wrong: a distance, a place that has closed in the meantime, a craving misunderstood. Before you set off, open the place on Maps with the link you find in every suggestion.

Anthropic is based in the United States. In the app we use its service for businesses: what we send it isn't used to train models and is kept only for a short time, for security. In the trial on claude.ai, instead, your Claude account's rules apply.

Guides and critics

Next to the places golino shows the name of the publication that wrote about them and the link to the article, without logos and without made-up summaries. If you write for a publication or run a restaurant and something isn't right, write to us: we'll correct it or take it down.

Who else sees it

Only the services that make golino work, which handle it on our behalf and only for that:

• Vercel, which hosts the website and the app;
• Neon, which stores the app and the emails of people who only leave their address;
• Resend, which sends the sign-in codes and delivers the applications to us;
• Anthropic, for the suggestions, as explained above;
• Google, only if you sign in with Google, connect Google Maps or accept the statistics.

They are based in the United States: the transfer takes place with the safeguards provided for by the Regulation (EU-US adequacy decision or standard contractual clauses). Nobody else receives your data, unless a court or an authority asks us for it.

Statistics

We count how many people look at the pages and where they come from with Vercel Web Analytics, which doesn't use cookies and doesn't recognise who you are: the counts are only totals, and that's why we don't ask for your permission.

If you accept, we also count visits and applications with Google Analytics, in aggregate form. How, and with which tools, is explained on the Cookies page (in Italian), where you can also change your mind.

How we protect it

Everything travels encrypted. There are no passwords to steal, and of the sign-in codes we keep only the fingerprint. The Google Maps permission is encrypted. The key for requesting suggestions is only on the server, never on your phone. Everyone can request a limited number of codes and suggestions, to stop abuse. For this, and to understand how useful golino is, we count when you ask for a suggestion: with a fingerprint, not with your email, and after 35 days we delete it. No system is one hundred per cent secure: if something happens that affects your data, we'll tell you, and we'll tell the Italian Data Protection Authority as the law requires.

Deleting everything

We keep the app's data as long as you have an account. To delete it, in the app go to the bottom of the home page and tap “Delete account”: we ask you to confirm, and we delete it straight away. If you prefer, write to privacy@golino.app from the email you sign in with and we'll do it ourselves within a month. Together with the account we delete your places, ratings, notes, the Google Maps permission, the links to follow you, the people you follow and your place in the trial. People who followed you no longer see your places.

Your rights

You can ask us at any time to see, correct or delete your data, to restrict its use or to receive a copy of it, and you can object to its processing. Just send an email to privacy@golino.app. If you think we aren't handling it properly you can contact the Italian Data Protection Authority, the Garante per la protezione dei dati personali.

Children

golino isn't meant for people under 14: for them Italian law requires parental consent to use artificial intelligence services (Law 132/2025, Article 4).

If this page changes

When golino adds something that affects your data (for example a new provider), we write it here first, with the new date at the top. If the change concerns data you've already given us, we'll also tell you directly.