Privacy Policy

Dine Dash is the data controller for personal data collected through this app. For any privacy-related questions please contact us at info@dinedash.uk.

Account data (diners) — name, email address, and phone number provided when you sign up, either directly or via Sign in with Apple or Sign in with Google. If you choose to add a profile photo, we store that too. Account data (restaurant owners) — name, email address, and phone number, provided when you sign up for a restaurant account. Payment data — when you pay for a meal or top up your in-app wallet, your card details are sent directly to our payment processor Stripe via Apple Pay, Google Pay, or PaymentSheet. We never see or store your full card number, CVC, or expiry. Stripe returns a payment reference (and the last 4 digits and brand for display only), which we store against your order or wallet transaction. Wallet data — your in-app wallet balance and top-up history, if you choose to use this feature. Dining session & order data — the restaurant, table, items ordered, session duration, and discount applied for each visit, along with any reviews or ratings you choose to leave and any loyalty badges you earn. Device & usage data — device type, OS version, and in-app activity for debugging and service improvement. Location data — approximate location (when you grant permission) to show nearby restaurants on the map. We do not store your precise location

To create and manage your diner or restaurant-owner account (legal basis: contract performance). To process orders and apply your speed discount at checkout (legal basis: contract performance). To take payment via Stripe, including wallet top-ups, and to process restaurant-owner payouts via Stripe Connect (legal basis: contract performance). To manage restaurant-owner subscriptions purchased via the App Store or Google Play (legal basis: contract performance). To show restaurants near you (legal basis: your explicit consent, revocable at any time in your device settings). To improve and debug the app (legal basis: legitimate interests). To comply with legal obligations such as fraud prevention (legal basis: legal obligation).

Stripe, Inc. — payment processing for diner payments, wallet top-ups, and (for restaurant owners) Stripe Connect payouts. Card details are submitted directly to Stripe and are subject to Stripe's Privacy Policy. Apple / Google — if you use Sign in with Apple or Sign in with Google, or purchase a restaurant subscription, those transactions are processed by Apple/Google under their own privacy policies. Firebase (Google) — used solely to authenticate your Sign in with Apple or Sign in with Google session. We do not use Firebase for analytics or advertising. Restaurant partners — the table, items ordered, and timing of your visit are shared with the restaurant you are dining at so they can prepare and serve your order. We do not sell your personal data to third parties, and we do not use advertising or tracking SDKs.

We retain account and order data for as long as your account is active, and completed transaction records for 3 years for accounting and tax purposes. Restaurant-owner records tied to financial or legal obligations may be retained in deactivated form after account deletion, as required by law.

You can delete your account at any time from inside the app: Profile → Delete Account. This permanently removes your profile, orders, reviews, sessions, badges, and wallet data. If you signed in with Apple, we also revoke your Apple sign-in token as part of deletion. You can also email info@dinedash.uk to request deletion, and we will process your request within 30 days

Stripe, Apple, Google, and Firebase (our payment, sign-in, and subscription processors) may process data in the United States. Appropriate safeguards are in place via Standard Contractual Clauses approved by the UK ICO.

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you. Rectification — correct inaccurate data. Erasure — request deletion of your data ("right to be forgotten"). Restriction — ask us to limit how we process your data. Portability — receive your data in a machine-readable format. Object — object to processing based on legitimate interests. Withdraw consent — withdraw location permission at any time in your device settings.

To exercise any right, email info@dinedash.uk. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

The Dine Dash app uses device local storage (AsyncStorage) to keep you signed in and remember app preferences. No advertising or tracking cookies are used.

Dine Dash is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this policy from time to time. We will notify you of material changes via the app. Continued use after notification constitutes acceptance of the updated policy.

Dine Dash — Privacy Team Email: info@dinedash.uk For data deletion requests, account questions, or to exercise your GDPR rights.