Privacy

The short version

We hold the least we can get away with: enough to let you sign in, sit at a table, and keep the money straight. We do not sell any of it, we do not advertise, and there are no third-party trackers or analytics in this app.

What we hold

Your username, display name, and a sign-in address built from your username. That address is internal and cannot receive mail.

An email address, only if you add one. It is used for invitations, meal confirmations, and password resets. Leave it blank and you simply get in-app notifications instead. Hosts can see whether you have one on file, not what it is.

Which clubs you are in and your role in each. Seats you have asked for, guests you bring, menus you write, reviews you leave, and messages sent to a club mailbox.

Your balance in each club and every entry behind it. We do not hold card details, bank details, or any payment credentials, because we never take payments.

Who sees what

Other members of your club see your display name, whether you have a seat, and how many guests you are bringing.

Hosts and co-hosts of a club additionally see balances in that club, the club mailbox, and reviews with names attached.

Cooks see review scores and comments about their meals, with no names.

Platform admins can see that a club exists and who runs it. They cannot read a club's balances, reviews or mailbox unless they are a member of it.

Nobody outside your club sees anything. A club you are not in is indistinguishable from a club that does not exist.

Where it lives

The app runs on Google Firebase. The database and the server code are hosted in Google's europe-west1 region in Belgium. Google processes this data on our behalf as our provider.

Outbound email goes through Resend, which sees the address, subject and body of any message we send you.

If you are outside the European Economic Area, your data is stored there. If you are inside it, it stays there.

How long

Account and club records stay while your account is open. Invitations expire after 72 hours and password reset links after two hours; both are stored only as a hash, so a copy of our database cannot be used to redeem one.

Ask us to delete your account and we will remove your profile and contact address. Entries that another person needs, such as what a meal cost and how it was divided, may be kept in a form that no longer identifies you.

Your rights

You can see and correct most of your own data in the app. For a copy of everything, correction of something you cannot edit, or deletion, write to us.

If you are in the UK or EU, you also have the right to object to processing and to complain to your data protection authority.

Cookies

We set no advertising or analytics cookies. Firebase stores a sign-in token in your browser so you stay signed in. Clearing your browser storage signs you out.

Contact

Write to hello@ladleclub.com. Naveh Collective is the data controller.