1. What Information We Collect

a) Information you give us

• Your name and email address, when you create an account or subscribe to updates
• Your phone number, when you place an order or reserve a table
• Delivery and pickup addresses you save or enter at checkout
• Payment details, entered into a secure Stripe form inside the app. Stripe processes and stores these. Vinelier never receives or stores your full card number.
• Order and reservation details, including what you ordered and from which restaurant
• Dishes and restaurants you mark as favourites
• Searches you run in the app, including the text of your query and any filters you apply
• Feedback, reviews, and messages you send to our support team

b) Information we collect automatically

• Device type, operating system, app version, and browser type
• IP address
• A push notification token, if you allow notifications, so we can tell you about your order
• Cookies and similar technologies on our website, such as page visits and referring URLs
• A device identifier that we generate and store on your device, used to group activity coming from the same device
• Usage analytics — which dishes, restaurants, and screens you view, how you reached them, what you share, and how long a session lasts
• Crash, hang, and performance diagnostics from the app — including a truncated call stack — collected through Apple's MetricKit so we can find and fix problems

c) Location

The app asks for your location so it can show dishes and restaurants near you. You can decline and pick a city manually instead.

If you have a pickup order waiting and you grant background location access, the app lets the restaurant know when you are approaching, so your food is ready when you arrive. This runs only while that order is active and stops as soon as the order is collected. You can turn it off at any time in iOS Settings.

Voice search is converted to text on your device wherever iOS supports on-device recognition. We do not receive or store recordings of your voice.

2. How We Use Your Information

We use your data to:

• Create and manage your account
• Show you dishes, restaurants, and menus relevant to where you are
• Process your orders and table reservations, and pass the necessary details to the restaurant fulfilling them
• Take payment and issue refunds
• Send you notifications about the status of an order or booking
• Respond to your questions and support requests
• Keep the platform secure, detect fraud, and fix problems
• Send occasional product updates or announcements, which you can unsubscribe from at any time

We do not use your personal data for advertising, and we do not build advertising profiles.

3. How We Share Your Information

We do not sell your personal information, and we do not share it with advertising networks or data brokers.

We share data only with:

• Restaurants — the details needed to fulfil an order or reservation you placed with them, such as your name, phone number, and order contents
• Stripe — our payment processor, which handles card details, payouts, and refunds
• Supabase — our authentication and database provider, which stores your account data
• Apple — the Apple Push Notification service, used to deliver notifications to your device
• Hosting and infrastructure providers that run our servers
• Analytics providers on our website only, such as Google Analytics. Usage analytics from the iOS app are our own and stay on our servers — the app contains no third-party analytics, advertising, or tracking SDKs.
• Legal authorities, where we are required by law to disclose information

4. Legal Basis for Processing

If you are in the EU or EEA, we process your data on the following grounds under the GDPR:

• Performance of a contract — to create your account and fulfil your orders and reservations
• Consent — for location access, push notifications, and marketing emails, each of which you can withdraw at any time
• Legitimate interests — to keep the service secure, prevent fraud, and improve the product
• Legal obligation — to retain records such as transaction data where the law requires it

5. How Long We Keep Your Data

We keep your account data for as long as your account is open. If you delete your account, we remove your personal data within 30 days, except where we are legally required to keep it — for example transaction records, which we retain for the period required by accounting and tax law.

Background location is used only in the moment to tell a restaurant you are approaching, and is not retained after your order is collected.

6. Your Rights

Under the GDPR (if you're in the EU), you have the right to:

• Access your data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Withdraw consent at any time
• Request data portability
• Object to processing based on our legitimate interests
• Lodge a complaint with your national data protection authority

To exercise any of these rights, or to ask us to delete your account and the data attached to it, email us at [email protected]

7. Cookies

We use cookies on our website to:

• Remember your preferences
• Analyse website traffic
• Improve functionality

You can disable cookies in your browser settings, though some features may not work properly. The iOS app does not use advertising cookies or third-party trackers.

8. Data Storage and Security

Your data is stored on servers in the European Union and handled by trusted providers. Traffic between the app and our servers is encrypted in transit. While no system is completely secure, we take appropriate measures to protect your information from unauthorised access, alteration, or loss.

9. Children

Vinelier is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, contact us and we will delete it.

10. Third-Party Links

Vinelier may contain links to third-party websites or platforms, such as restaurant sites or our social accounts. We are not responsible for their privacy practices. Please read their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page, with a new last updated date at the top.