Privacy Policy

Last updated: July 11, 2026

DineFlowBook ("we", "us", or "our") operates the DineFlowBook mobile application and related backend services (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect information when restaurants and their authorized staff use our platform to manage bookings, orders, guests, menus, and operations.

By creating an account, signing in, or using the Service, you agree to the collection and use of information as described in this Privacy Policy.

1. Who This Policy Applies To

This policy applies to:

• Restaurant administrators and managers who register and manage a restaurant account.
• Restaurant employees who are invited or created by a manager to use the app for daily operations.
• Guest or customer information that restaurant users enter into the Service to manage reservations, orders, and CRM records.

DineFlowBook is a business tool used by restaurants. Guest data is typically collected and entered by the restaurant on behalf of its customers. Restaurants are responsible for obtaining any consent required from their guests under applicable law.

2. Information We Collect

2.1 Account and authentication data

• Name
• Email address (where provided)
• Phone number
• Restaurant code and restaurant identifier
• User role (for example, manager or employee)
• Hashed password or authentication credentials
• One-time passwords (OTP) used during onboarding or verification
• Session tokens used to keep you signed in

2.2 Restaurant and operational data

• Restaurant name and branch/outlet details
• Bookings, reservations, table counts, meal types, and service notes
• Orders, billing amounts, and revenue-related records
• Menu items, buffet schedules, and uploaded menu images
• Daily notes, message templates, and staff assignments
• Dashboard analytics, KPIs, and operational reports

2.3 Customer and guest data entered by restaurants

• Name, phone number, and email address
• Birthday, anniversary, address, and notes
• Visit history, booking history, and spend summaries
• Feedback, reviews, ratings, comments, and optional review photos

2.4 Device and technical data

• Device type, operating system, and app version
• IP address, request logs, and API usage metadata
• Crash, error, and performance logs where enabled
• Locally stored session data through app storage (for example, AsyncStorage)

2.5 Content you upload

If you upload images (such as menu photos), those files are transmitted to our servers and may be stored using third-party media hosting providers.

3. How We Use Information

We use collected information to:

• Provide, operate, and maintain the Service
• Authenticate users and secure accounts
• Send OTP codes and service-related communications
• Enable bookings, orders, guest management, and reporting features
• Improve reliability, security, and user experience
• Respond to support requests and enforce our Terms
• Comply with legal obligations and prevent fraud or misuse

4. How Information Is Shared

We do not sell your personal information. We may share information only in these cases:

• Within your restaurant account: authorized managers and employees of the same restaurant may access operational data based on their role.
• Service providers: we use trusted third parties to host data, deliver messages, and store media, including:
  • Cloud database hosting (MongoDB)
  • Image hosting (Cloudinary)
  • SMS delivery for OTP (Twilio, when configured)
  • Email delivery for OTP and notifications (SMTP providers, when configured)
• Legal requirements: when required by law, court order, or government request, or to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.

5. Third-Party Apps and Links

The Service may allow you to open third-party apps such as WhatsApp, phone dialer, or email clients to contact guests. When you use those features, you are leaving DineFlowBook and interacting directly with the third-party service under that provider's own terms and privacy policy. We do not control how third-party apps process information once you use them.

6. Data Retention

We retain information for as long as your restaurant account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Restaurants may update or delete certain operational records through the app where those features are available. Account deletion requests can be submitted using the contact details below.

7. Security

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS), hashed passwords, access controls, and role-based permissions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on applicable law, you may have the right to:

• Access, correct, or update your account information
• Request deletion of your account or certain data
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Lodge a complaint with a data protection authority

Restaurant users can update profile details in the app where available. To request account deletion, see our Account Deletion page. For other requests, contact us using the details below.

9. Children's Privacy

The Service is intended for use by restaurants and authorized adult staff. It is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

10. International Data Processing

Your information may be processed and stored on servers located in India or other countries where our service providers operate. By using the Service, you consent to such processing subject to applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest version. Material changes may be communicated through the app, website, or email where appropriate. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

12. Contact Us