Privacy Policy
Dineyo helps people in Rwanda find restaurants, book tables, use deals and pay their bill. It is operated by Clover Technologies Private Limited, Kayciru, Kigali, Rwanda. This page explains what we collect, why, who we share it with and how you can delete it. Questions: support@dineyo.com.
What we collect
- Account details: your name, mobile number and email address. We use your number to log you in with a one-time code sent by SMS or WhatsApp. Restaurant managers also have a username and a securely hashed password, and may add a management number for alerts.
- Profile details you choose to add: your date of birth, gender, anniversary, the area you live in and your dining preferences. They're optional. We use them to send you birthday and anniversary offers and to suggest places you may like; restaurants don't see them. You can change or remove them any time in My account.
- Bookings: the restaurant, date, time, number of guests, the name and number for the booking, any note you add, the deal used, and whether you booked in the app.
- Payments: the bill amount, discount, wallet credit used, payment method and receipt number. Card and Mobile Money details are entered with our payment partners; Dineyo never sees or stores card numbers or PINs.
- Wallet, invites and Prime: your balance, promotional credit, who invited whom, and Dineyo Prime membership.
- Reviews you post, shown publicly with your first name and initial.
- Messages: whether you agreed to WhatsApp promotions, and replies you send to Dineyo on WhatsApp (for example STOP, or a restaurant tapping Confirm on a booking).
- Video guide views: when someone opens our video guides page (dineyo.com/videos) or the Video guides tab, we record the time, IP address, browser and device, the page that linked there, and which videos were played and how far. We use this to see whether the guides are useful to restaurants. It is kept for 6 months, then deleted.
- Location: only when you tap "Near me", and only on your phone, to sort restaurants by distance. Your location is not sent to us or stored.
- App notifications: if you allow notifications, the app gives us a device token from Google's Firebase Cloud Messaging so we can send you booking updates, reminders, receipts and (if you keep them on) deal alerts.
- Technical data: a login cookie, basic server logs (IP address, browser type) kept for security, a record of messages we sent (type, time, masked number), and settings saved on your device such as light or dark mode.
Why we use it
- To run your account, bookings and payments, and to send you login codes, confirmations, reminders and receipts.
- To pass your booking to the restaurant, so they can hold your table and reach you.
- To pay restaurants their share of bills paid on Dineyo.
- To prevent fraud and misuse, and to meet tax and accounting rules.
- To tell you about deals: in the app if you leave deal alerts on, and on WhatsApp only if you agreed. You can switch either off in Account › Notifications, or reply STOP on WhatsApp.
We do not sell your personal data. We use advertising cookies, which you can turn off (see below).
Who we share it with
- The restaurant you book or pay at: your booking name, number, party size, time and note, and your payment receipt.
- Payment partners: UrubutoPay (BK TecHouse), MTN Mobile Money and Pesapal, to process payments and payouts.
- Messaging providers: our SMS providers, and WhatsApp (Meta Platforms) for login codes, booking messages and promotions you agreed to.
- Google Firebase Cloud Messaging: to deliver app notifications.
- Our hosting provider (Hostinger), which stores the website and database.
- Authorities, if the law requires it.
Advertising cookies (Meta and Google)
To see whether our ads on Facebook, Instagram and Google bring people to Dineyo, and to show Dineyo ads to people who visited us, we use the Meta Pixel and Google tag (Google Analytics and Google Ads), unless you turn ad cookies off. They record the pages you open on Dineyo and actions such as signing up, booking a table and paying a bill (with the amount). When you sign up, book or pay, Dineyo also sends Meta these actions with your email address and phone number in scrambled (hashed) form, so Meta can match them to its users; Meta does not get your password, card or MoMo details. If you tap "Turn off" on the cookie notice or use the Cookie choices button below, none of this happens from then on. You can change your choice at any time with the Cookie choices button on this page.
How long we keep it
We keep your account until you delete it. Payment records are kept for 7 years for tax and accounting. Server logs are kept for up to 90 days. Daily database backups are kept for 14 days.
Your choices and rights
You can see your bookings, payments and wallet in your account, change notification settings, and delete your account at any time (see Delete your data). You can also ask us for a copy of your data or to correct it by emailing support@dineyo.com. These rights are set out in Rwanda's law on the protection of personal data and privacy (Law No 058/2021).
Security
Data is sent over HTTPS, passwords are hashed, and the database and uploaded files are stored outside the public website folder with restricted access.
Children
Dineyo is not meant for children under 16, and we don't knowingly collect their data.
Changes
If we change this policy we'll update the date above, and tell you in the app for important changes.