Privacy Policy

1. Introduction

Dishy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the Dishy mobile application and any related websites and services (together, the "Services").

2. Information We Collect

Information You Provide

• Account Information: name, email address, and password when you create an account.
• Profile Information: profile photo and home location (optional).
• Preferences: dietary restrictions, allergens, and cuisine preferences.
• User Content: ratings, reviews, photos, and any text or media you submit.

Information Collected Automatically

• Precise Location Data: with your permission, we collect your device's GPS coordinates to show nearby restaurants and dishes. You can revoke this permission in your device settings at any time.
• Search Queries: the search terms you enter and the location associated with each search, retained to improve recommendations and to power features like "recent searches."
• Device Information: device type, operating system, and app version.
• Usage Data: how you interact with the Services, including views, taps, and feature usage.

We do not knowingly collect biometric data, payment card numbers, or government identifiers.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services.
• Generate personalized dish and restaurant recommendations based on your search query, location, and preferences.
• Authenticate your account and protect against unauthorized access.
• Communicate with you about updates, features, and support requests.
• Analyze usage patterns to debug, improve performance, and design new features.
• Detect, investigate, and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

4. How We Share Your Information

We share information with the following categories of recipients, only as needed to operate the Services:

• Service Providers and Subprocessors. We rely on third parties who process data on our behalf, under contractual restrictions limiting their use of it. These currently include:
  • Amazon Web Services (AWS): hosting our database and application infrastructure in the United States.
  • Google LLC: Maps Platform, Places API, and search APIs (via Serper) for restaurant lookup, geocoding, and nearby place discovery. Receives your search location.
  • OpenAI, L.L.C.: large-language-model inference used to generate dish recommendations. Receives your search query and approximate location as context.
  • Perplexity AI, Inc.: large-language-model inference used to generate dish recommendations. Receives your search query and approximate location as context.
  • Apify Technologies s.r.o.: public-web-data collection used to gather publicly posted restaurant reviews. Does not receive personal data about you.
  • Groq, Inc.: language-model inference used to extract dish mentions from public restaurant reviews. Does not receive personal data about you.
• Other Users. Your public profile information, ratings, reviews, and any photos you choose to share may be visible to other users of the Services. Your home location and email are not shared with other users.
• Legal and Safety. We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of Dishy, our users, or the public.
• Business Transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising.

5. Location Data

The Services use your device's location to:

• Find nearby restaurants and dishes.
• Calculate distance and travel context for results.
• Set your home location for personalized recommendations.

You can deny or revoke location access in your device's settings at any time. If you do, the Services will fall back to a default location and some features will be limited.

6. Automated Processing and AI

Some Dishy features rely on third-party large-language-model services (currently OpenAI and Perplexity AI) to generate dish recommendations from your search query and approximate location. These providers act as our service providers under their commercial API terms, which prohibit them from using your data to train their general-purpose models.

AI-generated content can be inaccurate or out of date. Restaurant menus, prices, hours, and dish availability change frequently and may not match what is shown in the Services. Always confirm with the restaurant directly.

7. Data Security

All communication between the Dishy app and our servers is encrypted using TLS 1.2 or higher. Communication between our servers and the third parties listed in Section 4 is also encrypted in transit. We use industry-standard access controls, authentication, and isolation on our infrastructure.

No system is perfectly secure. While we work to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services. Specifically:

• Account and profile data: retained while your account exists.
• Search history (queries and associated location): retained to power personalized recommendations and to improve our recommendation quality.
• User Content (reviews, ratings, photos): retained until you delete it or your account.
• Logs and diagnostic data: retained for a limited period for debugging and security.

When you delete your account, we delete or anonymize associated personal data within a reasonable period, except where we are required to retain it for legal, tax, or fraud-prevention purposes.

9. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access and receive a copy of the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your information ("right to erasure").
• Object to or restrict certain processing.
• Withdraw consent where our processing is based on consent.
• Port your data in a structured, machine-readable format.

To exercise any of these rights, contact us at support@dishyai.com. We will respond within the time required by applicable law. We will not discriminate against you for exercising these rights.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA, including the right to know what personal information we collect about you, the right to delete it, the right to correct it, and the right to opt out of the sale or sharing of personal information. As stated in Section 4, we do not sell your personal information and we do not share it for cross-context behavioral advertising. To exercise your California rights, contact us at support@dishyai.com.

11. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@dishyai.com and we will delete it.

12. International Users

Dishy operates from the United States and our infrastructure is located in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data protection rules than your country.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website and in the App and update the "Last updated" date above. If the changes are material, we will provide additional notice (for example, via email or an in-app notice). Your continued use of the Services after the update constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, contact us at:

Email: support@dishyai.com