Privacy Policy

• Account info — email, display name, optional phone, dietary preferences, allergens, role.
• Location — delivery address (mandatory) and zone membership. We do not track real-time location.
• Activity — your votes, orders, reviews, posts in the community feed, and which screens you visit.
• Payment — handled by Stripe. We never see your full card number.
• Push token — issued by Apple/Google via Expo, used to deliver notifications you opted into.

• Show you today's ballot for your zone.
• Match you with restaurants and couriers in your area.
• Send notifications you've opted into.
• Improve recommendations using anonymized, aggregated patterns.
• Comply with legal obligations.

• We do not sell your personal data.
• We do not run third-party advertising trackers in the dotted app.
• We do not share your delivery address or order history with anyone except the restaurant and courier fulfilling your order.

Personal data is shared only with: (a) restaurants and couriers fulfilling your specific orders, (b) Stripe for payment processing, (c) Resend for transactional email, (d) Sentry for crash reporting, (e) Supabase for image storage, and (f) law enforcement when legally required.

Personal data is stored in PostgreSQL hosted in the United States. Data is retained while your account is active. On account deletion, personal data is removed within 30 days. Anonymized analytics (aggregated counts, never tied to your account) may be retained indefinitely.

You can, at any time:

• Edit your profile and dietary preferences in-app.
• Toggle notification channels in Settings.
• Export your data — email privacy@dotteds.ai for a copy.
• Delete your account in Settings → Delete Account.

dotted is not intended for users under 13. If you believe a child has created an account, contact privacy@dotteds.ai and we'll remove it.

We'll notify you of material changes at least 14 days in advance via in-app banner or email.

Privacy concerns: privacy@dotteds.ai. General questions: hello@dotteds.ai.