What we collect, and why.

Restaurant guests

When you sign in to a restaurant's TableReview page, we store your phone number and a securely hashed PIN (never your PIN in plain text), plus your loyalty point balance, activity history, and any redemptions or reward submissions you make. This information is used only to run the loyalty program for that restaurant. Checking your balance, confirming redemptions, and letting the restaurant see genuine activity.

Restaurant owners and staff

Admin and staff accounts store a name, email address, and a securely hashed password, along with the restaurant's own configuration (branding, rewards, growth actions) and activity logs for actions taken in the dashboard.

Website analytics

We log page visits (path and referrer) to understand which pages are useful. We do not use Google Analytics or any third-party tracking or advertising service. Each visit is tagged with a one-way hash of your IP address, browser, and date, not your raw IP address, so we can estimate unique visits without identifying you personally.

What we don't do

We don't sell your data. We don't share it with advertisers. We don't use tracking cookies for advertising. TableReview doesn't use cookies for sign-in at all; your session is kept in your browser's local storage on your device.

Where your data lives

All data is stored on our own private server, not a third-party cloud database provider. Backups are kept for a limited time to protect against data loss and are not used for any other purpose.

Your choices

You can ask us to tell you what data we hold about you, or to delete your guest or staff account and associated data, at any time. Message us on WhatsApp to make a request, and we'll confirm once it's done.

Changes to this policy

If this policy changes in a way that affects how your data is handled, we'll update the date at the top of this page.