Privacy Policy

Account details. Your name and email address when you sign up, or the name and email your Google account shares with us if you use Google sign-in. We never receive your Google password.

Your dietary profile. The allergens you select (for example peanuts, dairy, shellfish) and the diets you follow (for example vegetarian, halal, keto), including anything you type in yourself. In some regions, allergy information counts as health-related data, so we treat it as sensitive: it is only used to flag dishes for you and to combine with your party, and never for advertising.

Party activity. Parties you create or join, the invite code used, and who else is in the party.

How you use the app. Which restaurants and dishes you open, how long a menu stays open, when you take directions, and photos you view. Reviews and ratings you write are stored with your account.

Restaurant accounts. If you manage a venue we store your venue name, address, cuisine, dishes, ingredients, and any photos you upload.

Technical data. Standard information needed to run and secure the service, such as device and browser type, approximate location derived from your connection, and error logs.

We do not collect precise GPS location in the background, and we do not track you across other websites.

To flag each dish Safe, Caution or Do Not Order against your profile; to show restaurant match badges; to combine a party's needs so a table can eat together; to remember a visit so we can ask how it went next time you open the app; to give restaurants anonymous, aggregated insight into their own menu; to keep accounts secure and prevent abuse; and to fix bugs and improve the product.

We do not sell personal information, and we do not use your allergy or diet data to target advertising.

Parties are opt-in. When you join a party using an invite code, the other members can see your display name and your allergy and diet chips — that is the point of the feature, so the group can pick somewhere everyone can eat. They cannot see your email, your reviews, or your browsing history.

Anyone with an active invite code can join, so only share codes with people you trust. A host can end a party at any time, and leaving a party stops any further sharing.

Restaurants see aggregated, de-identified analytics about their own venue only: how many menus were opened, which dishes were tapped most and least, average time spent on the menu, how often directions were taken, typical party sizes, busiest hours, and the mix of allergens and diets among viewers.

Restaurants do not see your name, email, or individual profile through analytics. If you leave a review, the venue can see your rating, your comment, and the display name attached to your account.

We use service providers to run SafePlate — hosting, database and authentication, email delivery, and an AI provider that helps restaurants turn ingredient text or a photo of an ingredient list into a structured list. These providers process data on our instructions only. We may also disclose data if legally required, or in connection with a business transfer.

Where UK or EU data protection law applies, we rely on: contract — to provide the accounts, menus and flags you ask for; explicit consent — for allergy and diet data, and for sharing it with a party, which you can withdraw at any time by editing your profile or leaving the party; legitimate interests — to keep the service secure and to improve it, and to give restaurants aggregated insight into their own venue; and legal obligation — where we must retain or disclose data.

Account and profile data is kept while your account is open. Party membership records are kept while the party is active and for a short period afterwards. Analytics events are kept in aggregated form so restaurants can see trends over time. Reviews stay published until you delete them or close your account. When you ask us to delete your account, we remove your profile, party history and reviews, and retain only what we must for legal or security reasons.

You can view and edit your allergens and diets at any time in Settings, leave or end a party, edit or delete a review, and ask us for a copy of your data, a correction, or full deletion. Depending on where you live you may also have the right to object to or restrict certain processing, to withdraw consent, and to complain to your local data protection authority.

To make a request, email privacy@safeplate.app. We respond within 30 days.

Data is encrypted in transit, access to your rows is enforced at the database level so one account cannot read another's, and dish and venue photos are served through expiring links. No system is perfect, so please use a strong, unique password and tell us right away if you think your account has been accessed by someone else.

SafePlate is operated from the United States and data may be processed in other countries by the providers described above, with appropriate safeguards for international transfers.

SafePlate is not intended for children under 13, and we do not knowingly create accounts for them. A parent or guardian should manage a child's dietary needs from their own account. If you believe a child has created an account, contact us and we will remove it.

If we make a meaningful change to this policy we will update the date above and tell you in the app before the change takes effect. Questions? Email privacy@safeplate.app.