Privacy

What we collect

Only what the product needs to work.

• Your account: email address and the display name you choose.
• A confirmation that you are 18 or over — the date you confirmed it, not your date of birth. We never ask for identity documents.
• What you write: table titles and descriptions, table chat messages, reservation notes, reports you file.
• What you do: which tables you joined or left, and when — this is what makes seat counts and notifications truthful.
• Basic technical data needed to serve and secure the site.

Optional and paid features

• A phone number, only if you turn on text alerts, with a record of that consent.
• Browser push tokens, only if you turn on push notifications.
• For paid memberships: plan, status and billing dates, and the customer reference our payment processor (Stripe) gives us. Stripe handles card details; we never store full card numbers.
• Which version of the Terms of Service and Community Safety Rules you agreed to, which version of this notice you acknowledged, and when.

What we do not collect

No date of birth, no government ID, no precise location tracking, no advertising or cross-site tracking profiles. We do not sell personal information.

Safety, moderation and audit records

To keep tables safe and to handle reports fairly we keep: reports and any evidence attached to them; blocks; moderation decisions (warnings, suspensions, bans), their reasons and end dates; appeals and our replies; and an audit log of staff actions. We use these to investigate reports, enforce the Community Safety Rules, stop banned people from returning, answer appeals and meet legal obligations. Where data-protection law requires a legal basis, we rely on our legitimate interest in member safety and, where applicable, legal obligations. The person you report is never told who reported them.

• Who sees them: only staff whose role needs them (for example the safety team), with every staff action logged. Staff who are themselves suspended lose access.
• Shared with: our hosting and database providers and Stripe, only as needed to run the service; law enforcement or courts only when the law requires it or someone's safety is at serious risk.
• Draft retention schedule (pending legal review): moderation and appeal records about 3 years after the case is closed; the minimum account identifiers needed to enforce an active suspension or ban for as long as it lasts plus about 1 year; billing and tax records for as long as tax law requires; your photos, stories and other optional content follow normal deletion when you delete them or your account. A specific legal hold (for example an open legal claim) can pause deletion of the records it covers until it ends. We do not keep all emails, usernames or activity forever.
• Your rights: you can ask to see, correct, export or delete your data through the Contact page, including while your account is suspended. Some records may be kept where the law allows, for example to defend a legal claim or prevent a banned person from returning; we will tell you when that applies.

Who can see what

• Public: a table's title, description, restaurant, time, seat counts and diners' first initials.
• Diners at that table: table chat, reservation details and each other's display names — only from the moment they joined, and not after they leave.
• Only you: your email address and your notification settings.
• Our safety team: reports, and the table and account context needed to act on them.

Reports are confidential

When you report someone, your name is never shown to the person you reported. Reports are readable only by our safety team, enforced by the database itself rather than by hiding a page.

Table chat has a lifespan

Chat opens when a table reaches its minimum, stops accepting new messages shortly after the meal, and stops being viewable after that. You cannot read messages sent before you joined or after you left.

Email

We use your email address for account and security messages, such as confirming your address and resetting your password — those are not optional. Notifications about your tables are optional and you control them in your notification settings, or by using the unsubscribe link in any of those emails.

Where your data lives

ToShareAMeal runs on Lovable Cloud, which stores data using Supabase and Cloudflare infrastructure. Access is restricted by row-level security rules so that one diner's data is not reachable from another diner's session.

How long we keep it

Account data is kept while your account exists. Table chat expires on the schedule above. Reports and moderation records are kept longer, because a safety history is only useful if it persists. Ask us to close your account and we will remove your profile and personal data, keeping only what we must for safety and legal reasons.

Your choices

• See or correct your profile from your account.
• Turn optional notification email off, per type or all at once.
• Ask for a copy of your data, or ask us to delete it: legal@toshareameal.com.
• Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

Children

ToShareAMeal is for adults. It is not intended for anyone under 18, and we remove accounts we learn belong to minors.

Contact

For privacy questions or legal requests concerning personal information handled by Becoming Solo LLC for ToShareAMeal, contact legal@toshareameal.com. Safety concerns: support@toshareameal.com.

Business correspondence:

Becoming Solo LLC 447 Broadway, 2nd FL #835 New York, NY 10013 United States

Send formal legal notices by mail to the address below, marked “Attn: Legal Department”. For routine support, use the email channels above.

Formal legal notices:

Becoming Solo LLC Attn: Legal Department 447 Broadway, 2nd FL #835 New York, NY 10013 United States

Controlling language

English is the controlling language of these policies. Translations are provided to help members understand them. If a translation differs from the English version, the English version controls our interpretation and application of the relevant policy, to the extent permitted by applicable law. Nothing in this provision limits rights or protections that applicable law provides.

This provision does not reduce any obligation we have under applicable law to provide a notice or information in a particular language.

This provision does not by itself decide which law governs, which courts have jurisdiction, or the language of any legal proceeding.

Which privacy laws apply

ToShareAMeal is based in New York City, and United States and New York laws apply to how we handle personal information. Depending on where you live, other data-protection laws may also apply and may give you additional rights or require a particular legal basis for using your information. We follow those laws where they apply.

Your privacy rights are not limited to New York law. Where the law requires a notice or information to be given in a particular language, we will provide it.