Foodies Privacy Policy
Your privacy, on your terms
Last updated: 12 December 2025
Thank you for using Foodies. We help you discover restaurants, menus, and allergen-friendly dining experiences. This Privacy Policy explains what information we collect, how we use it, your rights, and the choices you have.
Foodies is operated by ZDT LTD, a company registered in England and Wales. We are the data controller for the purposes of UK GDPR and applicable data protection laws.
1. Information We Collect
1.1 Account & Profile Information
When you create an account or use the App, we collect:
- Name and email address
- Hashed password (we never store plain-text passwords)
- Dietary preferences and allergen restrictions
- Profile photo (if provided)
1.2 Usage Information
We collect information about how you use the App:
- Saved restaurants and lists
- Search queries and filters applied
- Likes, reviews, and comments
- In-app navigation and feature usage
- Posts and messages in community features
1.3 Device Information
We automatically collect:
- Device type and model
- Operating system and version
- App version
- Language and time zone settings
- Unique device identifiers
1.4 Location Information
With your permission, we collect:
- Approximate location to show nearby restaurants
- Location used for map features
You can enable or disable location access at any time in your device settings.
1.5 Purchase Information
When you subscribe to Foodies Pro:
- Subscription status and plan type
- Transaction identifiers
- Purchase timestamps
We never store full payment card numbers. All payments are processed by Apple or Google.
1.6 Communications
- Support requests and feedback you send us
- Survey responses
- Email communications
2. Legal Basis for Processing (UK GDPR)
We process your personal data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing the App and its features | Performance of contract |
| Account creation and management | Performance of contract |
| Processing subscriptions | Performance of contract |
| Responding to support requests | Performance of contract |
| Marketing communications | Consent (you can opt out anytime) |
| Location-based features | Consent (via device permissions) |
| Analytics and service improvement | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Legal compliance | Legal obligation |
3. How We Use Your Information
We use your information to:
- Provide personalized restaurant recommendations
- Enable dietary and allergen filtering
- Save your preferences, lists, and favorites
- Process and manage your subscription
- Enable community features (posts, threads, reviews)
- Send account updates and support responses
- Send marketing communications (with your consent)
- Analyze usage to improve the App
- Ensure security and prevent fraud
- Comply with legal obligations
4. How We Share Your Information
4.1 Service Providers
We share data with trusted service providers who process it on our behalf:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Hosting, authentication, database | Account data, usage data |
| RevenueCat | Subscription management | Purchase data, user identifiers |
| Google Maps | Map tiles and location services | Location data |
| Stream | In-app messaging and chat | Messages, user identifiers |
| OneSignal | Push notifications | Device tokens, user identifiers |
All service providers are bound by data processing agreements and confidentiality obligations.
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to:
- Comply with legal obligations
- Protect our rights and property
- Prevent fraud or security threats
- Protect the safety of users or the public
4.3 Business Transfers
If Foodies is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any change in ownership or use of your personal data.
4.4 With Your Consent
We may share your information in other ways if you give us specific consent.
We do not sell your personal information.
5. Your Rights
Under UK GDPR, you have the following rights:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Correct inaccurate or incomplete data |
| Erasure | Request deletion of your data ("right to be forgotten") |
| Restriction | Request we limit how we use your data |
| Portability | Receive your data in a portable format |
| Objection | Object to processing based on legitimate interest |
| Withdraw Consent | Withdraw consent at any time for consent-based processing |
How to Exercise Your Rights
- In-app:Update preferences, dietary info, and account settings in the App
- Account deletion:Use the delete account option in Settings
- Email:Contact privacy@foodiesai.london
We will respond to your request within 30 days. If we need more time, we will inform you and explain why.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until you delete your account |
| Usage data | 2 years from collection |
| Support communications | 3 years from last contact |
| Financial/subscription records | 7 years (legal requirement) |
| Deleted account data | 30 days after deletion request |
After retention periods expire, data is securely deleted or anonymized.
7. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS/HTTPS)
- Encryption at rest for sensitive data
- Least-privilege access controls
- Regular security monitoring and audits
- Secure password hashing
No system is completely secure. Please keep your login credentials safe and notify us immediately of any unauthorized access.
8. International Data Transfers
Foodies is based in the United Kingdom. Your data may be processed in:
- United Kingdom
- European Union
- United States (via service providers)
For transfers outside the UK/EU, we use appropriate safeguards including:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
- Binding Corporate Rules of service providers
9. Children's Privacy
Foodies is intended for individuals aged 16 and older. We do not knowingly collect personal data from children under 16.
If you believe a child under 16 has provided us with personal data, please contact privacy@foodiesai.london immediately. We will delete such data promptly.
10. Third-Party Links
The App may contain links to third-party websites and services (including restaurant websites and booking platforms). We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any personal data.
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. If we make material changes, we will notify you through:
- In-app notification
- Email to your registered address
We encourage you to review this Policy periodically.
12. Contact Us
For general support:
support@foodiesai.londonSupervisory Authority
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
https://ico.org.uk