Privacy Policy

This explains what DiningBros collects, why, and what you can do about it. Short version: we keep what we need to run a food-rating community, we don't sell it, and you can delete it yourself.

What we collect

• Account: email address, password (stored hashed by our authentication provider, never readable by us), handle, display name, bio, school and an optional profile photo.
• What you post: ratings, notes, food photos, links to your TikTok, Instagram or YouTube videos, dishes and dining halls you add, and reports or blocks you file.
• Derived stuff: points, streaks, rankings and badges computed from your posts.
• Technical: IP address and browser or device details in server logs, used for security, rate limiting and debugging. We don't run advertising trackers or third-party analytics.

What's public

Your handle, display name, bio, school, profile photo, check-ins, notes, photos, video links, points, badges and leaderboard position are visible to anyone, signed in or not. Your email address is never shown publicly. Reports you file are only visible to admins.

How we use it

• to run the Service: show ratings, build leaderboards, verify school affiliation from your email domain;
• to keep it safe: review reports, enforce blocks, throttle abuse, ban accounts that break the Terms;
• to contact you about your account, such as password resets and email verification. We don't send marketing email.

Who else sees it

• Our hosting: data lives in a PostgreSQL database on a server we operate, fronted by Cloudflare for delivery and protection.
• Video platforms: when a video plays it loads from TikTok, Instagram or YouTube, which see your IP address and set their own cookies under their own privacy policies. Thumbnails are fetched from their public embed services.
• Legal: we'll disclose information if the law requires it or to protect people from harm.

We do not sell personal information and we don't share it with advertisers.

Cookies

The website uses one cookie: your sign-in session. The app stores your session on the device. That's it.

How long we keep it

As long as your account exists. Delete your account from Settings (or in the app) and your profile, posts, photos, points and badges are removed right away; server backups age out within 30 days. Server logs are kept for a short period for security.

Your choices

• Edit your profile, photo and school in Settings.
• Delete individual posts, or your whole account, yourself.
• Block anyone; neither of you will see the other's posts.
• Email us to ask for a copy of your data or to have something removed.

Children

DiningBros is for college students and is not directed at children under 13. If we learn we hold data from a child under 13 we delete it.

Changes

If we change this policy in a way that matters we'll post a notice before it takes effect.

Contact

Privacy questions or requests: hello@diningbros.com.