Privacy Notice

Who is responsible for your information

• If you order or leave feedback at a restaurant, that restaurant decides how your information is used — it is the personal information controller. We run TapNaDine for the restaurant and handle your information on its behalf, as its personal information processor. For questions about a particular restaurant, you can ask the restaurant or contact us.
• If you run a business on TapNaDine or work on its staff, we are the controller of your account and billing information.

What we collect from diners

• Your table session. When you tap a table card, or pick your table from a restaurant’s walk-in QR code, we start an ordering session for that table and set one cookie (tnd_session) that keeps you at your table. If you tap again from the same phone during your visit, the new session is linked to the last one, so your bill stays yours. It is needed for ordering to work. We use no advertising or analytics cookies. Your cart is kept only in your own browser until you order.
• Your orders. The items, options, quantities and notes you send, your table, the time, any tip you choose, how you said you would pay (cash or a QR transfer), and whether the restaurant marked it paid. We never process card or e-wallet payments — you pay the restaurant directly.
• Technical details. Your IP address and your browser’s user agent are recorded with each session, so that misuse — forged card links, spam — can be investigated. They are deleted after 30 days.
• Feedback, where the restaurant uses TapNaDine reviews: your rating and comment, and — only if you choose to give them — your name and contact details so the business can follow up. Contact details are deleted after 12 months. Your rating and comment are also emailed to the people the business has chosen to receive its review notifications; your name and contact details are never put in those emails. If you go on to post a public review, you leave TapNaDine for Google, and Google’s privacy policy applies there.
• Senior citizen and PWD discounts. When a cashier applies one, we record only how many eligible diners were at the table — never names or ID numbers. Those go on the restaurant’s official invoice.

Diners do not need an account, and we do not ask for your name to order.

What we collect from businesses and staff

• Staff sign-in details: email address, role and branch.
• Email addresses a business adds to receive review notifications and reports, which emails each one wants, and whether it confirmed or unsubscribed. Every one of those emails carries an unsubscribe link. If an address is removed, we keep a record of which emails were sent to it, without the address itself, so it is never sent the same one twice.
• A record of actions staff take in TapNaDine — who claimed, served, voided or settled an order and when — so a business can answer “who did this?”.
• Payment proof photos staff choose to take of GCash or Maya transfers. These can show the payer’s name or number and are kept as the restaurant’s payment records.
• Business details, subscription and billing records.

Why we use it

• To send your order to the restaurant, show you its status and your bill, and let staff serve and settle it — needed to provide the service you asked for.
• To keep TapNaDine secure and prevent abuse — our and the restaurants’ legitimate interest.
• To let a business follow up on your feedback — only with the contact details you chose to give, which you can ask us to delete.
• To meet legal obligations, such as the records a business must keep.

We do not sell personal information, and we do not use it for advertising.

Who can see it

• The restaurant you order from and its staff see your orders, table and feedback. Staff see only the branches they work at, and never your IP address.
• Service providers that run TapNaDine for us: our database and file storage provider (Supabase), our web hosting provider, our rate-limiting provider (Upstash), which briefly handles IP addresses to block abuse, and our email delivery provider, which sends businesses their review notifications and reports. They act only on our instructions. Some of them may store data on servers outside the Philippines.
• Government authorities, when the law requires it.

How long we keep it

• IP addresses and user agents: 30 days.
• Feedback contact details: 12 months.
• The copy of feedback kept to deliver a business’s daily and weekly emails: 30 days.
• Orders, bills and staff action records: kept as the restaurant’s business records while it uses TapNaDine, then deleted or returned to the business when it leaves, unless the law requires them to be kept longer.

How we protect it

Connections to TapNaDine are encrypted. Access is limited by role — staff see only the branches they work at, and the secrets behind table cards are never shown to them. Money and order changes are checked by the database itself and recorded in an audit log. If a personal data breach occurs that the law requires to be reported, the National Privacy Commission and the people affected will be notified within 72 hours of its discovery — by us, or, where it concerns diners, by the restaurant with our help.

Your rights

Under the Data Privacy Act you have the right to:

• be informed about how your personal information is used;
• access it, and get a copy in a commonly used format;
• have it corrected if it is wrong;
• object to its use, and have it erased or blocked;
• be compensated for damages from its misuse; and
• file a complaint with the National Privacy Commission (privacy.gov.ph).

To use any of these rights, email hello@tapnadine.com with “Privacy request” in the subject. For a diner request, tell us the restaurant, the date and the table so we can find your order. We reply within 15 days.

Data Protection Officer

Data Protection Officer, Zenigan Software Studio — hello@tapnadine.com

Changes to this notice

We will update this page when what we collect or how we use it changes, and change the date at the top. Material changes for businesses are also sent to the account owner by email.