Privacy Policy

Effective October 30, 2026

Who we are

BiteFlip ("we", "us") runs the BiteFlip app and website at https://biteflip.app. Contact us at hello@biteflip.app.

What we collect

• Account details: your email address, a password (stored only as a one-way scrambled hash we can't read), and the nickname you choose. If you use "Continue with Google", we receive your name, email and profile photo from Google.
• Profile and preferences you choose to add: a short bio, favorite cuisines, and dietary preferences (for example vegetarian or halal). These are used only to filter restaurants and suggest matches.
• Location: when you allow it, your device's location, used to find nearby restaurants. We save your last location and search distance on your account so you aren't asked every time. If you type a place instead, that text is used to look up the area.
• Your activity in the app: restaurants you like, pass on or save; sessions you start or join; matches; and visit feedback ("Did you go?").
• Usage information: which pages and buttons are used, so we can see what works and fix what doesn't. Our servers also see your IP address, which we use to block abuse such as repeated login attempts.
• Guest use: if you browse without an account, we store a random device ID in your browser so your guest session continues next time.
• Waitlist: if you join a waitlist, your email address, plus the city and IP address you joined from.
• Restaurant owners: the email address used to claim a restaurant and any reservation link you add.

Cookies and browser storage

We use one cookie to keep you signed in, and browser storage for small conveniences such as remembering your guest session. We don't use advertising or cross-site tracking cookies.

How we use it

• To show restaurants near you and remember what you liked.
• To match you with friends who join your session, and to tell you when you match.
• To send account emails: password resets, match notices, and "did you go?" follow-ups.
• To give restaurant owners totals about their own restaurant (see below).
• To keep the service secure and working, and to improve it.

Who can see what

• Friends you swipe with see your nickname and the restaurants you both liked. They don't see your email, your location, or places only you liked.
• Restaurant owners see totals for their own restaurant only: how many people saved it, match rates, and busy times. They never see who you are.
• Public restaurant pages show totals such as "12 diners saved this", never names.

Companies that help us run BiteFlip

We share only what each one needs to do its job:

• Our hosting and database provider, which stores the app and its data.
• Google Maps Platform, which provides restaurant listings and photos. It receives the map area being searched.
• OpenStreetMap services, used as a backup restaurant source and to look up places you type in.
• Our email provider, which delivers account emails.
• Google, if you choose "Continue with Google".
• An error-monitoring service, which receives technical details when something breaks.

We don't sell or rent your personal information, and we don't share it for advertising. We may disclose information if the law requires it, or to protect people's safety.

How long we keep it

We keep your account data while your account exists. Password-reset links expire after 1 hour. Mutual sessions expire after 24 hours. When you delete your account, your details, likes, saves, matches and preferences are permanently removed right away. Usage records that remain are kept without your name or account attached.

Your choices and rights

• Delete your account: Profile → Delete my account. This is immediate and permanent.
• Edit your details: Profile → Edit profile.
• Location: you can turn off location access in your browser or phone settings at any time and type a place instead.
• Access or a copy of your data: email hello@biteflip.app. Depending on where you live (for example California or the EU), you may have the right to know, correct, delete or get a copy of your data, and to not be treated differently for asking. We'll respond within 30 days.

Security

Connections to BiteFlip are encrypted, passwords are stored as one-way hashes, and each restaurant owner can only see their own restaurant's totals. No system is perfectly secure, but we take reasonable steps to protect your data and will notify you if a breach affects you.

Children

BiteFlip is not for children under 13, and we don't knowingly collect their information. If you believe a child has signed up, contact us and we'll delete the account.

Changes to this policy

If we make meaningful changes, we'll update the date above and let account holders know by email or in the app before they take effect.