Privacy Policy
Dineyo helps people in Rwanda find restaurants, book tables, use deals and pay their bill. It is operated by Clover Technologies Private Limited, Kayciru, Kigali, Rwanda. This page explains what we collect, why, who we share it with and how you can delete it. Questions: support@dineyo.com.
What we collect
- Account details: your name, mobile number, and email if you give one. We use your number to log you in with a one-time code sent by SMS or WhatsApp. Restaurant owners also have a username and a securely hashed password, and may add a management number for alerts.
- Bookings: the restaurant, date, time, number of guests, the name and number for the booking, any note you add, the deal used, and whether you booked in the app.
- Payments: the bill amount, discount, wallet credit used, payment method and receipt number. Card and Mobile Money details are entered with our payment partners; Dineyo never sees or stores card numbers or PINs.
- Wallet, invites and Prime: your balance, promotional credit, who invited whom, and Dineyo Prime membership.
- Reviews you post, shown publicly with your first name and initial.
- Messages: whether you agreed to WhatsApp promotions, and replies you send to Dineyo on WhatsApp (for example STOP, or a restaurant tapping Confirm on a booking).
- Location: only when you tap "Near me", and only on your phone, to sort restaurants by distance. Your location is not sent to us or stored.
- App notifications: if you allow notifications, the app gives us a device token from Google's Firebase Cloud Messaging so we can send you booking updates, reminders, receipts and (if you keep them on) deal alerts.
- Technical data: a login cookie, basic server logs (IP address, browser type) kept for security, a record of messages we sent (type, time, masked number), and settings saved on your device such as light or dark mode.
Why we use it
- To run your account, bookings and payments, and to send you login codes, confirmations, reminders and receipts.
- To pass your booking to the restaurant, so they can hold your table and reach you.
- To pay restaurants their share of bills paid on Dineyo.
- To prevent fraud and misuse, and to meet tax and accounting rules.
- To tell you about deals: in the app if you leave deal alerts on, and on WhatsApp only if you agreed. You can switch either off in Account › Notifications, or reply STOP on WhatsApp.
We do not sell your personal data, and we do not show advertising based on it.
Who we share it with
- The restaurant you book or pay at: your booking name, number, party size, time and note, and your payment receipt.
- Payment partners: UrubutoPay (BK TecHouse), MTN Mobile Money and Pesapal, to process payments and payouts.
- Messaging providers: our SMS providers, and WhatsApp (Meta Platforms) for login codes, booking messages and promotions you agreed to.
- Google Firebase Cloud Messaging: to deliver app notifications.
- Our hosting provider (Hostinger), which stores the website and database.
- Authorities, if the law requires it.
How long we keep it
We keep your account until you delete it. Payment records are kept for 7 years for tax and accounting. Server logs are kept for up to 90 days. Daily database backups are kept for 14 days.
Your choices and rights
You can see your bookings, payments and wallet in your account, change notification settings, and delete your account at any time (see Delete your data). You can also ask us for a copy of your data or to correct it by emailing support@dineyo.com. These rights are set out in Rwanda's law on the protection of personal data and privacy (Law No 058/2021).
Security
Data is sent over HTTPS, passwords are hashed, and the database and uploaded files are stored outside the public website folder with restricted access.
Children
Dineyo is not meant for children under 16, and we don't knowingly collect their data.
Changes
If we change this policy we'll update the date above, and tell you in the app for important changes.