Privacy Policy
Last updated: 2026-07-24
This policy explains what Hidangi collects, why, and the choices you have. Hidangi never processes food payments — guests pay at the counter — so we hold no card or bank data for a meal.
Our role
For a restaurant’s own account and its guests’ order data, the restaurant is the data controller and Hidangi is its processor, handling data on the restaurant’s instructions. For the Owner account you create with Hidangi, we are the controller.
What we collect
We collect only what the product needs to work:
- Owner account: your name and email as shared by Apple or Google when you sign in. Hidangi never sets or stores a password for Owners.
- Restaurant data: menu, tables, hours, settings and staff you create.
- Guest orders: the phone number a guest enters (stored encrypted), the items ordered, and the marketing-consent choice. A guest never needs an account.
- Technical signals for abuse prevention: a hashed IP and a browser marker. Raw IP addresses are not stored.
How we use it
To take and route QR orders, run reminders and analytics for the restaurant, send transactional email, and prevent abuse. We show restaurants estimated sales, never actual payments, because no payment passes through Hidangi.
AI processors
When a restaurant uses the optional AI features, the menu text or image you provide is sent to our AI processors (a text provider and an image provider) to generate the result. Guest personal data is never included in an AI request. Only the restaurant’s own content is processed.
Marketing consent
A guest is added to a restaurant’s marketing list only if they explicitly tick the consent box at checkout. An unticked box is never treated as consent, and consent can be withdrawn at any time.
Retention and deletion
Order and analytics data is retained while an account is active. A long-inactive Free account may be scheduled for deletion after notice. You can delete your account and data at any time; deletion is recoverable for 30 days, after which data is deleted or anonymised and cannot be restored.
Your rights and contact
You can access, correct or delete your data. Restaurant guests should contact the restaurant, which controls their data; for the Hidangi account itself, or any privacy question, write to hello@hidangi.my.