1. What we collect

• Account details: your name, email address, password (stored hashed), profile photo and bio, and, if you sign in with Google or Apple, the name and email they share with us.
• Your taste: the answers you give in onboarding, every swipe, the places you like, pass on and save, and the taste profile we build from them.
• Places you log: visits, ratings, reviews, dishes and photos, including whether you marked a visit private.
• Dinelists: the lists you make, the places in them, who you invite to collaborate, and the lists you save.
• Cities: the cities you add and, only if you allow it, your device location while you use the map or distances.
• Split the Tab: the receipt photos you scan, the items read from them, the names you type and the shares worked out.
• Group sessions: the sessions you start or join and your swipes inside them.
• Usage: the pages you open, the device and browser you use, and error reports, so we can keep the app working.

2. What it is used for

• Running DineList: signing you in, showing your lists and visits, matching friends in a session.
• Recommendations: your swipes, visits and answers decide which places you see and in what order.
• Reading receipts and generating insights: a receipt photo or a restaurant's reviews are sent to an AI model provider to be read; the result comes back to you.
• Messages: a verification code when you sign up, emails you have switched on in Settings, and in-app alerts such as session invites.
• Safety and support: spotting abuse, fixing bugs and answering you when you write to us.

3. Who else sees it

Your public profile, public reviews and public dinelists are visible to anyone, including people without an account. Collaborators on a dinelist see each other's names and handles. We never show your email address to other members, and we do not sell your data. We share data only with the providers that run DineList for us:

• Google (Places for restaurant details and maps; Sign in with Google) and Apple (Sign in with Apple).
• AI model providers, to read receipt photos and to generate insights and summaries.
• Our hosting, database, email delivery and error-reporting providers.

Each of them may only use the data to provide their service to us.

4. Bringing over your Dinesurf history

If you booked with Dinesurf using the same email address, DineList can bring your bookings, saved spots and lists over. We only do this when you ask us to, on the "From Dinesurf" screen or in Settings, and visits that come over are private until you decide otherwise.

5. How long we keep it

For as long as you have an account. Deleting your account from Edit Profile removes your profile, lists, visits, reviews and photos; receipt photos are removed when you delete the tab or the account. We keep server logs for a short period and anything the law requires us to keep.

6. Your rights

Under the Nigeria Data Protection Act and, where it applies, the GDPR, you can ask for a copy of your data, have it corrected or deleted, object to how we use it, or withdraw consent you gave. Most of this you can do yourself in the app; for the rest, email us and we will answer within 30 days. You can also complain to the Nigeria Data Protection Commission.

7. Cookies and storage

DineList keeps your sign-in token and a few preferences in your browser's local storage so you stay signed in. We do not use advertising cookies or trackers.

8. Children

DineList is for people aged 18 and over. We do not knowingly collect data from anyone younger.

9. Changes

When this policy changes in a way that matters we will tell you in the app, and the date at the top will move.

10. Contact

Dinesurf, Lagos, Nigeria. Privacy questions and requests: hello@dinelists.com.