Privacy Policy

1. Who this policy covers

Bite! lets residents and members of participating estates order food, book tables, and manage club membership links. This policy applies to the Bite! iOS and Android apps and the related API at https://taapi.bigfoot-it.com.

2. Data we collect

• Account: name, email, password (hashed), cellphone number.
• Sign in with Apple or Google: identity token, and name/email if the provider sends them.
• Profile: optional physical address.
• Orders and bookings: items, venue, fulfilment, amounts, guest name and phone, special instructions.
• Membership: membership number, application form answers, optional photo/selfie, SMS OTP to the club-on-file number.
• Device: authentication tokens in secure storage, optional Face ID/biometrics flag (biometric data stays on the device), optional push token.
• Payments: we receive payment status from Peach Payments. We do not store full card numbers.

We do not request GPS or collect precise location. Delivery eligibility uses a typed address checked against the estate boundary on the server.

3. Why we collect email addresses

Email is the identifier you use to sign in. We store it on your account and may use it for transactional messages about the account, an order, or a table booking (for example a receipt or booking confirmation). Sign in with Apple or Google may supply an email from that provider.

We do not use email for advertising, lookalike audiences, or selling lists.

4. Why we collect cellphone numbers

A cellphone number is required to register with email/password, and required to place an order or table booking. Sign in with Apple or Google can skip the number at account create; we then collect it at the first order or booking.

We use cellphone numbers only to:

• let the venue confirm, update, or complete your order or booking (including “ready for collection” and delivery/gate access);
• send transactional SMS where the estate has SMS enabled;
• send a one-time membership-link code to the cellphone stored on the club membership record.

We do not use cellphone numbers for advertising, lookalike audiences, or selling lists. We do not sell phone numbers.

5. Legal basis (South Africa — POPIA)

We process this information to perform the service you request (orders, bookings, membership) and to operate our hospitality platform. Where consent is required (camera/photos, notifications, Face ID), the operating-system prompt is the consent.

6. Who we share with

• The estate/venue you ordered or booked with (kitchen, host, portal users) — so they can fulfil the request. That is fulfilment, not a sale of data.
• Peach Payments — to take card payment. We store payment status, not PAN.
• WinSMS — to deliver transactional SMS.
• Apple, Google — if you use their sign-in.
• Hosting and Expo/EAS — to run and update the app.

We do not sell personal information. We do not use it for third-party advertising. We do not share your number with other estates except the venue fulfilling that order or booking.

7. Retention

Account and order records are kept while the account is active and as required for tax, dispute, and operational records. If you delete your account we deactivate the login and remove or anonymise profile fields including phone number, email, name, and address. Historical order tickets at a venue may remain with that venue as their operational record. Request deletion in the app (Profile → Delete account) or on the web at Delete your Bite! account.

8. Your rights

You may access and update name, phone, and address in Profile. You may delete the account in the app (Profile → Delete account) or on the web at Delete your Bite! account. You may email privacy@bigfoot-it.com for POPIA requests.

9. Children

Bite! is not directed at children under 13. We do not knowingly create accounts for children.

10. International

Data is processed in South Africa and by processors who may store data in other regions under contract.

11. Changes

We will post updates on this page and change the “Last updated” date.