Privacy policy
Last updated: 28 September 2026
Operator: Ryan Enterprises, Haryana, India · GSTIN 06NRJPS6923K1ZV
Contact: ryanshawplasma@gmail.com
The short version
If you scan a QR code and order food without signing in, we keep your order and almost nothing about you. We do not know your name unless you type it. We do not track you across the internet. There are no advertising cookies, because there is no advertising.
If you choose to make an account, we keep a bit more, and you can ask for all of it back or ask us to delete it.
1. What is collected, and why
If you order without signing in
Your order — items, quantities, notes, total, tax
Why — To cook it and bill it
Kept for — 8 years (tax law)
Table number, or vehicle make/colour/plate for drive-in
Why — To bring the food to you
Kept for — Plate: 90 days. The rest: 8 years
Name and phone, only if you type them
Why — So staff can call your order
Kept for — 90 days
A random device identifier stored in your browser
Why — So "your order" still works if you refresh the page
Kept for — 90 days
Payment method and reference
Why — To reconcile what was paid
Kept for — 8 years
Delivery address and the map pin, only on a delivery order
Why — To bring it to your door. The venue and the rider carrying it see it
Kept for — Kept with the order
We do not collect: your contacts, your browsing history, anything from other apps, or your identity from any third party.
Your location is never tracked. If you tap *Use my location* — to see places near you, or to fill in a delivery address — the point is sent to our server once, to turn it into an address or a list of nearby places, and the place you chose is remembered in your own browser. It is stored by us only as part of a delivery order you place.
If you create an account
Additionally:
Your phone number or email
Why — It is how you sign in
A display name, if you give one
Why — To greet you
Your order history across our venues
Why — So you can see it
Loyalty points and referral code
Why — To run the loyalty scheme
Automatically
That a QR code was scanned, and when
Why — To know which tables are busy. Not linked to you
Server logs — IP address, page, timestamp, errors
Why — Security and debugging. Retained for up to 30 days
If you run a venue on Dino Business
For owners, managers and staff who use the venue's side of Dino, in the Dino Business app or in a browser:
Your name, email and phone number
Why — It is how you sign in, and how the venue sees who did what
The venue's bank account number, IFSC, PAN and the papers you upload, owners only
Why — To verify the venue and pay it what it has taken. The details go to Razorpay for that and nothing else. A photographed paper is read by Google (Cloud Vision, or Gemini) to fill in the form
The names, phone numbers, pay and attendance of the people who work there, only if the venue uses payroll
Why — To work out wages. These people may not have an account; the venue enters them
Menu photographs, and a photograph of a cheque or document you choose to upload
Why — To show the menu, and to read bank details off the page instead of typing them
Notes on orders, replies to reviews, and questions typed to the assistant
Why — To run the venue. A question to the assistant is sent to Google (Gemini) to be answered
The venue's map pin and the area it delivers to
Why — To show guests where it is and to price a delivery
When a device's notifications last checked in
Why — So new-order alerts go to devices that still exist
The categories on our app store listings
App stores ask every app to declare, from a fixed list, the kinds of data it collects. We declared the Dino Business listing broadly, so it names some categories that Dino does not collect today. The table below lists every category we declared and says exactly what it means here. Where the answer is "not collected", that is the whole truth. If it ever changes, this page will change before the feature does.
Name, Email Address, Phone Number
At Dino — Staff sign-in; a guest's name and number, only if they type them
Physical Address
At Dino — The delivery address on a delivery order
Other User Contact Info
At Dino — Contact details somebody else enters: a guest's number typed at the till, or a staff member's details in payroll
Precise Location
At Dino — A point you choose to share, such as the venue's map pin or "Use my location". Never tracked in the background
Coarse Location
At Dino — Not collected separately. Only the point you chose, as above
Payment Info
At Dino — A venue's bank account for payouts. A guest's card and UPI details go straight to Razorpay and never reach us
Other Financial Info
At Dino — A venue's payout papers, and staff pay in payroll
Purchases
At Dino — Orders and bills
Photos or Videos
At Dino — Menu photographs, payout papers, and photographs a guest attaches to a review
Customer Support
At Dino — Messages you send us for help
Emails or Text Messages
At Dino — Only the messages you send us. Dino never reads your inbox or your texts
Other User Content
At Dino — Order notes, reviews and replies, and questions typed to the assistant
Gameplay Content
At Dino — The result of a venue's spin-the-wheel after an order, and any coupon it won
User ID
At Dino — Your account's identifier
Device ID
At Dino — The random device identifier described above, and the notification token of a device that switched alerts on
Product Interaction
At Dino — Which of Dino's screens are used, from the server's own logs
Other Usage Data
At Dino — Not collected beyond the server logs above
Other Diagnostic Data
At Dino — Errors and server logs, kept up to 30 days
Audio Data
At Dino — Not collected. Voice search, where offered, is turned into text by your phone's or browser's own speech service, and Dino receives only the text
Contacts
At Dino — Not collected. Dino never reads your address book
Browsing History
At Dino — Not collected. Dino cannot see pages outside Dino
Search History
At Dino — Not collected. What you search for on a menu is not stored
Sensitive Info
At Dino — Not collected
Environment Scanning, Hands, Head
At Dino — Not collected. The camera is used only to take a photograph you choose to upload or to read a code. It does not map your surroundings or track your hands, face or head
2. What is not done
• Your data is not sold, ever.
• Your data is not shared with advertisers. There are no ad networks in this application.
• No third-party analytics that profile you across sites.
• Venues see only their own guests' orders. A company operating four cafes sees those four; it cannot see any other operator's.
3. Who else touches it
Supabase
What they do — Database and authentication
Where — Seoul, South Korea
Vercel
What they do — Runs the application
Where — Seoul, South Korea, with static files served from its global network
Razorpay
What they do — Processes payments, if you pay online. For a venue, verifies its bank details and papers and pays it out
Where — India
Renflair
What they do — Sends the one-time code, if you sign in by phone
Where — India
What they do — Sign-in with Google if you choose it, delivering notifications you switched on, looking up an address you type, reading a photographed payout paper, translating a menu, and answering the staff assistant
Where — Global
Upstash
What they do — Counts requests by network address to stop abuse; the counts expire within minutes
Where — Global
The delivery partner (uEngage), only on a delivery they carry
What they do — Your name, phone number and address, to reach your door
Where — India
Each of these acts on our instructions and cannot use your data for their own purposes.
4. How long things are kept
Tax records: about 8 years. Section 36 of the CGST Act 2017 requires a registered business to retain its books and invoices for 72 months from the due date of the annual return. We cannot delete an invoice on request, and neither can anyone else. This is the law, not a policy choice.
Everything identifying: 90 days by default. After that, an automatic sweep strips names, phone numbers, number plates and device identifiers from old orders. What remains is the bill: what was sold, for how much, and how much tax.
Your account: until you close it.
5. Your rights
Under India's Digital Personal Data Protection Act 2023 — and, if you are in the EU or UK, the GDPR — you may:
• See what we hold. From the app: your account → "Download my data".
• Correct it. Edit your profile, or write to us.
• Have it deleted. Your account → "Delete my account". This removes your profile, your points and every link between you and past orders. The orders themselves become anonymous rather than disappearing, for the tax reason above.
• Withdraw consent at any time, by deleting your account.
• Complain to the Data Protection Board of India, or your local supervisory authority.
We answer within 30 days. There is no charge.
6. Children
This service is not directed at children under 18. We do not knowingly collect their data. A child can, of course, order a sandwich at a table without an account — that is a transaction, not a profile.
7. Security
• All traffic is encrypted in transit (HTTPS).
• Every table in the database enforces row-level security, so one venue's data is unreachable from another venue's session — this is enforced by the database itself, not by application code that could be bypassed.
• Prices, discounts and tax are calculated on the server. Nothing a browser sends can change what something costs.
• Payment card details never reach our servers; they go directly to the payment provider.
No system is perfectly secure. If there is a breach affecting you, we will tell you and the Data Protection Board without undue delay.
8. Cookies
We use exactly two kinds of browser storage:
1. A session cookie, if you sign in. It keeps you signed in. It is not used for tracking. 2. Local storage for your cart and your device identifier, so a refresh does not lose your order.
There are no advertising or cross-site tracking cookies.
9. Changes
If this policy changes materially we will say so in the app before the change takes effect.
10. Contact
ryanshawplasma@gmail.com · +91 83071 10579 · Ryan Enterprises, Haryana, India
Grievance Officer: Ryan Enterprises — ryanshawplasma@gmail.com · +91 83071 10579. A complaint is acknowledged within 48 hours and resolved within one month.