← Back to App

Privacy Policy

Last Updated: August 14, 2026

Welcome to DishDuo. We are committed to protecting your privacy. This Privacy Policy describes how DishDuo ("we", "us", or "our") collects, uses, stores, and protects your information when you use our mobile application and social restaurant matching platform.

By creating an account, hosting/joining a dinner lobby, or using any feature in DishDuo, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information to deliver a smooth matching experience, customize suggestions, and support premium group features:

  • Account Registration Info: Email address, password, profile display name, and linked relationship roles (e.g. "him/her" tags for Couple Mode authentication).
  • Geolocation Data: Current geographical coordinates (latitude and longitude) and text addresses. This is required to search and display local restaurants within your chosen search radius.
  • Swiping & Swipe Telemetry: History of liked, disliked, and superliked restaurant cards within a lobby. To build smart taste profiles, we also log swipe telemetry, such as the duration you view a restaurant card and the count of images browsed on a card.
  • Lobby Session History: History of dining sessions you have hosted or joined, synced securely to your cloud profile.
  • Payment Tokens: Secure authorization tokens and entitlement profiles generated by RevenueCat to verify your premium subscription status. We do not collect or store credit card details.

3. How We Use Information

DishDuo uses collected data for the following essential purposes:

  • To retrieve local restaurants matching your search preferences (distance, cuisine, pricing).
  • To compute restaurant matches and compromise consensus recommendations inside active lobby sessions.
  • To sync lobbies, partner swipes, and shared history logs reactively in real-time.
  • To verify, apply, and maintain premium features (such as Couple Mode, distinct themes, and telemetry-weighted consensus) across your account.
  • To automatically delete unverified or inactive accounts after 3 days of non-activity to protect platform resource integrity.

4. Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We share data only with the following service providers to make the application function:

  • Firebase (Google Cloud): Handles secure cloud hosting, user registration authentication, real-time database syncing, and transaction logs.
  • RevenueCat: Validates and manages premium app entitlements and billing receipts securely.
  • OpenStreetMap (Nominatim & Overpass): Used to convert latitude/longitude coordinates to search queries and fetch restaurant names. No personal identifying information (like your email or name) is ever sent to OpenStreetMap.

5. RevenueCat Payments

Purchases made through the app are processed securely via Apple App Store or Google Play Store billing channels and verified by RevenueCat. Your subscription details are bound to your unique client ID. Entitlements are updated securely on your profile document via webhook servers, guaranteeing secure transactions.

6. Location & Geolocation

IMPORTANT: Because DishDuo is a local restaurant matching application, it requires your device's geographical location to search within your radius. You can opt out of location sharing at any time via your device settings, but doing so will prevent you from hosting or joining matching lobbies.

7. Data Retention & Cleanup

Lobby histories and active sessions are stored securely in Firestore. If you wish to delete a specific lobby from your history, you can do so in the dashboard; this removes the record from both your profile and your partner's profile if linked.

To maintain database hygiene, accounts created via email/password that remain unverified or accounts that show zero sign-in activity for more than 3 consecutive days will be flagged and deleted automatically from Firebase Authentication and Firestore records.

8. Your Legal Rights

Depending on your location (such as under the European GDPR or California's CCPA), you possess specific rights regarding your personal information, including the right to access, correct, export, or request permanent deletion of your profile data.

To exercise any of these privacy rights, please write to us at the support email listed below.

9. Contact Us

If you have any questions or feedback regarding this Privacy Policy, or want to request a permanent deletion of your account and personal data, contact us at:

Email: support@dishduo.net