Privacy Policy

Information the Application obtains and how it is used

You can view restaurant menus without registering or creating an account. Using multiplayer ordering, splitting checks, and settling bills at a table requires a temporary table session (identified by a session PIN and table/session identifiers). Creating a restaurant account requires email registration and setting up restaurant profile information.

Depending on how you use Platterify, we may process:

• Account and Profile data: Email address, Supabase user ID, name, authentication session, profile/settings metadata, and Stripe Connect merchant account identifiers for restaurant managers and staff.
• Session and Ordering data: Table ID, session PIN, temporary guest alias/username, items ordered, order submission timestamps, quantities, claimed order items, tips, tax, and order statuses.
• Payment data: Stripe checkout session ID, Stripe payment intent ID, captured and refunded amounts, and webhook event metadata. Payment card details (card number, expiration date, CVV) are handled directly by Stripe and are not collected or stored by Platterify.
• Technical & On-device data: IP address, device user agent, session cookie/token identifiers, theme preferences, and standard server-side logs.

We use this information to provide and secure the Application, authenticate users, submit and coordinate table orders, synchronize session states, calculate bills, manage Stripe payments, prevent abuse, enforce rate limits, and comply with legal obligations.

Information collected automatically

The Application does not include third-party advertising SDKs, precise GPS location access, camera access (except standard camera scanner for scanning QR codes on your device, which is processed locally and not uploaded), photo library access, or contacts access.

Some technical information may still be processed automatically by the Application and service providers, including IP address, device type, operating system, app/platform logs, request headers, transaction identifiers, and security or abuse prevention logs.

Location information

Platterify does not request or collect precise GPS location. Service providers may infer approximate location from IP address as part of normal network, fraud prevention, security, or payment processing operations.

Third-party access to information

We do not sell personal data. We share information only as needed to operate the Application, provide user-requested features, process payments, prevent fraud or abuse, comply with law, or protect the Application and its users.

The Application integrates with these third-party services:

• Supabase - authentication, database, realtime subscriptions, and serverless APIs.
• Stripe - payment processing, checkout, Stripe Connect payouts, and merchant services.

Children's privacy

Platterify is intended to be used by parents, guardians, caregivers, or adults. Account creation, setting up restaurant profiles, and payment checkouts should be handled by an adult. We do not knowingly collect personal information from children without appropriate parental or guardian consent.

If you believe a child has provided personal information through Platterify, contact the Service Provider so the information can be reviewed and deleted where appropriate.

Data retention and deletion

Account data, menus, order history, and payment metadata are generally kept while your account or restaurant session is active or as needed to provide the Application. Temporary guest session data is generally closed once a table session is finalized or settled.

If you request account deletion, Platterify deletes the Supabase auth user and user-owned server records linked to that account. Some limited records may be retained where needed for legal, security, audit, anti-fraud, payment, or service integrity purposes, such as account deletion audit records and purchase/webhook records.

Your choices

• You can sign out at any time from the Application.
• You can manage your profile settings or request account deletion from your settings.
• You can clear local app data by clearing your browser cache/cookies.

International transfers

The Service Provider and third-party providers may process information in countries other than the country where you live. These countries may have different data protection rules.

Security

Platterify uses Supabase authentication, database row-level security, secured database access, and service-provider security controls to help protect user data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

The Service Provider may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

Contact

For questions about this policy, contact the Service Provider through the contact email address at lapwingsoftwarestudio@gmail.com.