Privacy notice

Data controller: Abel Almirall Díaz, self-employed, established in Portugal. For anything about your data, write to contact@delids.com.

This application lets a restaurant run its loyalty programs. To work it stores: the email and name of the Google account you sign in with, the restaurant you belong to, and the operations you carry out (participation recorded and rewards handed over). The legal basis is performance of the service you use as part of that restaurant’s staff.

About customers, the restaurant can only see their display name and their relationship with that restaurant: which programs they take part in, how far along they are, and which rewards they have earned or redeemed. That person’s activity in other businesses on the platform is not accessible to the restaurant.

If a customer deletes their account, their personal data —name, birthday and QR code— is erased and their pending rewards are cancelled. Participation and redemptions already recorded at the restaurant are kept anonymously, as “Deleted customer”, so the business’s records do not change retroactively.

If you delete your restaurant in the app, its programs, the progress your customers had in them and that restaurant’s rewards —including those already earned and not yet redeemed— are erased immediately and irreversibly, along with your staff’s access. It does not affect those people’s accounts or their activity at other restaurants on the platform. That data cannot be recovered from the app. Pausing or archiving a program, by contrast, erases nothing: it only stops accepting sign-ups and participation.

A customer’s personal QR code contains no personal data: it is a random identifier that only the server can resolve, and the person can replace it from their app at any time.

Where it is stored. In Supabase (PostgreSQL), on servers in the European Union (Ireland), with row-level access control. Processors involved: Supabase (database), Google (sign-in), Vercel (hosting for the website and both apps) and Resend (sending this site’s contact form). Resend sends the emails from Ireland but keeps its logs in the United States.

Your rights. You can request access to your data, its rectification or its erasure, as well as restriction of processing, portability and objection, by writing to contact@delids.com. You may also complain to the data protection authority in your country.

Retention. Your data is kept while you are part of a restaurant on the platform. After that it is deleted, except for the activity kept anonymously at that restaurant.

Data controller: Abel Almirall Díaz, self-employed, established in Portugal. Privacy contact: contact@delids.com.

What data we process. The name and email of the Google account you sign in with, to identify you. The display name you choose, which is what restaurants see. Your birthday, only if you give it to us: day and month only, never the year. And your activity: which programs you take part in, how far along you are and which rewards you have, with their dates.

Why and on what basis. To keep your loyalty programs and let restaurants record your participation and hand over the rewards you have earned: performance of the service you sign up for. Your birthday is kept with your consent, in case your restaurants offer something for your birthday in the future; today it is not shared with any of them. You can withdraw that consent at any time by removing it in “Profile”. We do not use your data for advertising and we do not sell it.

What each restaurant sees. Only your display name and your activity at that restaurant: your programs, your progress and your rewards there. Never your email, your birthday, or what you do at other restaurants on the platform.

Your QR code contains no personal data: it is a random identifier that only our server can resolve. You can replace it whenever you like from “My code”.

On your device the app stores your latest QR code, so it works offline, and your language. The code is removed when you sign out. We do not use advertising or tracking cookies.

Where it is stored. In Supabase, on servers in the European Union (Ireland). Processors involved: Supabase (database), Google (sign-in), Vercel (hosting for the website and both apps) and Resend (sending this site’s contact form). Resend sends the emails from Ireland but keeps its logs in the United States.

Your rights. You can access your data and correct your name and birthday in “Profile”, and erase them by deleting your account there. For anything else —restriction, portability or objection— write to contact@delids.com. You may also complain to the data protection authority in your country.

If you delete your account, your name, birthday and QR code are erased, your record is unlinked from your Google account and your unredeemed rewards are cancelled. Participation and redemptions already recorded by restaurants are kept anonymously, as “Deleted customer”, so their records do not change retroactively. If you sign up again with the same email you start from scratch: that history is already anonymous and cannot be recovered. The same happens if the account is deleted from the platform’s administration.

If a restaurant deletes a program or closes its account, you lose the progress and the rewards you had there, including any you had already earned but not redeemed. That decision is the restaurant’s, not Delids’, and the data cannot be recovered from the app. Your account and whatever you have at other restaurants are not affected.

Retention and minimum age. We keep your data while you have an account. You must be 14 or older to use the app.

If you write to us through the contact form, we use your name, email, restaurant name and message only to reply to you, on the basis of your request. The message reaches us by email through Resend, which sends it from Ireland and keeps its logs in the United States. We keep those messages for 12 months and then delete them. You can ask us to delete them sooner by writing to contact@delids.com.

This website measures visits with Umami, a cookieless analytics tool that identifies nobody and does not track people across sites: it only counts page views, where each visit comes from and what kind of device it uses. There are no advertising or tracking cookies, and the fonts are served from the site itself. It is hosted on Vercel, which logs requests in order to serve and protect it.