Privacy policy (Draft)

Who we are

Hungry Vegan (“we”, “us”) runs hungry-vegan.com and the Hungry Vegan apps for iPhone and Android. On the website you can find vegan and vegetarian places and read their menus; in the apps you can also request a table. Restaurants manage their listing and bookings from the website. Our full company details will be added here before this policy is final.

Questions about your data go to hello@hungry-vegan.com.

The website and the apps

• Diners don’t sign in on the website. You can browse every restaurant and menu without an account, and we don’t collect anything about you while you do. Diner accounts, profiles, allergies and table requests live in the apps, where you sign in with Apple or Google.
• Restaurants sign in on the website with an email and password that we set up for them, to manage their listing and the requests they receive. The website holds restaurant accounts only.

What we collect

We keep only what Hungry Vegan needs to work:

If you use Sign in with Apple and choose to hide your email, we only receive the relay address Apple creates for us. We don’t run advertising, we don’t sell data, and we don’t use analytics or tracking cookies. We don’t ask for your location: places are sorted and filtered by what you choose.

Your allergies

Allergies are information about your health, so we treat them with extra care. They’re entirely optional, kept in your profile in the app, and used for one thing only: when you request a table, the allergies on your profile are copied into the request so the restaurant can see them.

• You add, change and remove them yourself in the app.
• Restaurants only see the allergies attached to requests you send them.
• Menus and ingredient lists come from restaurants and can be incomplete. Always check with the restaurant before you order.

Table requests and bookings

You request tables in the app. A request contains the name for the booking, the party size, the day and time, any note you write and your allergies. It goes to the restaurant you chose, which can confirm it or decline it, sometimes with a short reason that you’ll see. You can withdraw a request the restaurant hasn’t answered yet. We record whether you or the restaurant cancelled, so both of you see what happened.

The restaurant keeps the booking as its record of your visit, even if you later delete your account. If you’d like old bookings removed, email hello@hungry-vegan.com and we’ll arrange it with the restaurant.

Restaurant accounts and photos

Restaurant accounts are set up by us when a restaurant asks to be listed. We store the account’s email address and its sign-in, and the details the restaurant adds: its name, description, address, phone number, location on the map, opening hours, menu and photos. All of the listing is public, because that’s the point of a listing. The bookings a restaurant receives are visible only to the account that manages it.

Photos uploaded from the dashboard are stored with our hosting provider and shown publicly on the listing. Before a photo is uploaded, the browser resizes it and saves a fresh copy, which drops hidden details such as where the photo was taken. Please only upload photos you have the right to use, and avoid photos where guests can be recognised.

Who can see your information

• You can see your profile, allergies and bookings in the app.
• Restaurants see the table requests you send them: name, party size, day and time, note and allergies. They don’t see your email address or phone number.
• Everyone can see restaurant listings, menus and photos.
• We can access data when we need to fix a problem, keep the service safe or answer your request.

Services we rely on

We use a few trusted providers to run Hungry Vegan. They process data only to provide their service to us:

• Google Firebase hosts the website and stores accounts, profiles, bookings, listings and photos.
• Apple and Google confirm who you are when you sign in to the apps with Sign in with Apple or Google.
• Firebase App Check helps keep bots and abuse away from our data. In the apps it uses Apple’s App Attest. On the website it runs only on the restaurant login and dashboard, using Google reCAPTCHA Enterprise, which checks that requests come from a real browser by sending information about the browser and device, and how the page is used, to Google. Google’s Privacy Policy and Terms of Service apply to reCAPTCHA. The public pages diners browse don’t load it.
• OpenFreeMap provides the map tiles; your browser fetches them directly, so they see your IP address.
• Photon by Komoot turns an address into a map position when a restaurant searches for theirs.
• Unsplash serves some of the stock photos on restaurant pages, so your browser contacts it to load them.

Some of these providers may process data outside the UK. Where they do, we rely on the safeguards they offer for international transfers.

Storage on your device

On the website, browsing stores nothing about you, except your recent searches if you use search. When a restaurant signs in, the browser also keeps the sign-in session (so they stay signed in), a short-lived App Check token, and a small note that a restaurant account is signed in, so the site can link straight to the dashboard. The bookings a restaurant looks at are kept in memory only while the page is open, and are gone when it’s closed or the restaurant signs out.

The apps keep your sign-in session on your phone. None of this is used for tracking, and you can clear it at any time in your browser or phone settings. We don’t use advertising or analytics cookies, so there’s no cookie banner.

How long we keep things

• Your diner account, profile and allergies: until you delete your account, which you can do yourself in the app.
• Bookings: kept as the restaurant’s record. Ask us if you’d like old ones removed.
• Restaurant accounts: until the restaurant leaves Hungry Vegan or asks us to close the account.
• Listings, menus and photos: until the restaurant changes or removes them, or leaves Hungry Vegan.

Your choices and rights

You’re in control of your information:

• In the app, change your name, phone and allergies whenever you like, and withdraw a table request that hasn’t been answered yet.
• Delete your diner account in the app. Your profile and sign-in are removed straight away.
• Restaurants can change their listing from the dashboard, reset their password from the login page, and ask us to close their account.
• Ask us for a copy of your data, or to correct or delete something, by emailing hello@hungry-vegan.com.

If you’re in the UK or the EU, you also have the right to complain to a data protection authority. In the UK that’s the Information Commissioner’s Office (ico.org.uk). We’d appreciate the chance to put things right first.

Changes and contact

Hungry Vegan isn’t meant for children under 13. If we make important changes to this policy, we’ll update the date at the top and tell you in the apps.

For anything about your privacy, email hello@hungry-vegan.com.