Privacy Policy

1. Introduction

Welcome to Dinnduh™ ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account Information: Name, phone number, email address, initials
• Profile Information: Dietary preferences, restrictions, allergies, age range, gender
• Location Information: Home address, saved addresses (with your consent)
• Session Data: Restaurant voting preferences, dining session details
• Contact Information: Names and phone numbers of contacts you save for invitations

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Device type, operating system, browser type, IP address
• Location Data: Approximate location based on IP address or precise location (with permission)
• Cookies and Tracking: We use cookies and similar technologies to track activity on our Service

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our Service
• To suggest restaurants based on your location and preferences
• To facilitate dining sessions and coordinate with invited participants
• To send SMS verification codes and account-related notifications
• To personalize your experience and provide AI-powered recommendations (Genius tier)
• To process subscription payments and manage your account tier
• To send important service updates and security alerts
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with legal obligations and enforce our Terms of Service

4. SMS Messaging

By providing your phone number, you consent to receive SMS messages from Dinnduh™, including:

• Verification Codes: One-time passwords for account authentication
• Session Invitations: Notifications when you're invited to a dining session
• Account Notifications: Important updates about your account or sessions

Message Frequency: Message frequency varies based on your usage.
Opt-Out: Reply STOP to any SMS to unsubscribe from non-essential messages.
Help: Reply HELP for assistance.
Rates: Message and data rates may apply. Check with your carrier.

5. Third-Party Services

We use third-party services that may collect, monitor, and analyze information to improve our Service:

5.1 Google AdSense

We use Google AdSense to display advertisements. Google may use cookies and web beacons to serve ads based on your visits to our Service and other websites. You can opt out of personalized advertising by visiting Google Ads Settings.

5.2 Google Maps Platform

We use Google Maps APIs to provide location services, address autocomplete, and geocoding. Google's use of this information is governed by the Google Privacy Policy.

5.3 Anthropic Claude (AI)

For Genius tier users, we use Anthropic's Claude AI to provide personalized restaurant recommendations. We share anonymized voting patterns and preferences. Anthropic's use of data is governed by their Privacy Policy.

5.4 Stripe

We use Stripe to process subscription payments. Stripe collects payment information directly and we never store your full credit card details. See Stripe's Privacy Policy.

5.5 Supabase

We use Supabase for authentication, database, and storage services. See Supabase's Privacy Policy.

5.6 Twilio

We use Twilio to send SMS verification codes and notifications. See Twilio's Privacy Policy.

5.7 Meta (Facebook & Instagram) Pixel

We use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram and to show you relevant ads. Using cookies, it may collect information about your device and your actions on our Service, such as page views and account sign-ups. We may also send these measurement events to Meta from our servers (the Meta Conversions API); any contact identifiers included are hashed before sending. You can manage ad personalization in your Facebook ad preferences. Meta's use of this information is governed by the Meta Privacy Policy.

5.8 TikTok Pixel

We use the TikTok Pixel to measure and optimize our advertising on TikTok and to show you relevant ads. Using cookies, it may collect device and event information, such as page views and account sign-ups. TikTok's use of this information is governed by the TikTok Privacy Policy.

5.9 Analytics (Google Analytics & Plausible)

We use Google Analytics 4 and Plausible Analytics to understand how visitors use our Service. Google Analytics uses cookies and its use of data is governed by the Google Privacy Policy; you can opt out via Google's browser add-on. Plausible is privacy-focused and does not use cookies or collect personal data.

5.10 X (Twitter) Pixel

If we advertise on X (formerly Twitter), we use the X Pixel to measure the effectiveness of that advertising and to show you relevant ads. Using cookies, it may collect device and event information, such as page views and account sign-ups. X's use of this information is governed by the X Privacy Policy.

6. How We Share Your Information

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

• With Other Users: Your name and initials are visible to participants in your dining sessions
• Service Providers: We share information with vendors who perform services on our behalf (hosting, analytics, payment processing, SMS delivery)
• Legal Requirements: We may disclose information if required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, sale, or acquisition, your information may be transferred
• With Your Consent: We may share information for any other purpose with your explicit consent

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security audits and updates
• Access controls and authentication requirements
• Secure password hashing (never stored in plain text)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Data Portability: Request transfer of your data in a portable format
• Opt-Out: Opt out of certain data processing activities
• Withdraw Consent: Withdraw consent for data processing where consent was the legal basis

To exercise these rights, please contact us at the information provided in Section 12.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and share, and the right to opt out of the sale of your personal information (note: we do not sell personal information).

European Residents (GDPR)

If you are a resident of the European Economic Area (EEA), you have data protection rights under the General Data Protection Regulation (GDPR). We process your data based on legitimate interests, contractual necessity, or your explicit consent.

9. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory compliance.

10. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after any modifications indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Response Time: We aim to respond to all inquiries within 30 days.

13. Cookies Policy

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Types of Cookies We Use:

• Essential Cookies: Required for authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our Service
• Advertising Cookies: Used by Google AdSense, the Meta Pixel, the TikTok Pixel, and the X Pixel to measure ad performance and serve relevant ads