1Who we are
Foodee is operated by Appify (Pty) Ltd, trading as Foodee ("we", "us", "Foodee"), a company registered in South Africa with its registered address at 7 San Sabastian Road, Ballito, 4420, KwaZulu-Natal.
Our Information Officer is Paul Landman. You can contact us about anything in this policy — including any request to see, correct, or delete what we hold about you — at hello@foodee.co.za.
Under POPIA, Appify (Pty) Ltd is the responsible party for the personal information described in this policy.
For POPIA purposes, we are the Responsible Party for the personal information described in this policy.
2What we collect
If you use Foodee without signing in
- A random device identifier we generate on your device the first time you open Foodee. This isn't your phone's identifier — it's a number we made up for your specific Foodee installation.
- Your approximate location, only while you're using Foodee. We use this to show you specials near you. It stays on your device. We never store your live location on our servers.
- The specials you save and the preferences you set (your default area, your preferred drive-time radius). These are stored against your device ID, not against you personally.
- Basic usage events (which specials you viewed, which you saved). These help us understand how Foodee is being used but aren't tied to your identity.
If you sign in (authenticated diner or Foodee+ subscriber)
Everything above, plus:
- Your email address (required for sign-in via magic link, and required for Foodee+)
- Your subscription status if you have Foodee+ (when it started, when it renews, whether it's active)
- Payment processing is handled by PayFast — Foodee never receives or stores your card details
If you're a restaurant
- Your business contact details (business name, owner name, phone number, email, physical address)
- The content you create on Foodee (your specials, photos, descriptions)
- Basic account information (when you signed up, when you log in)
- Aggregated analytics about how your specials perform (views, saves, tap-throughs)
If you join our waitlist (before launch)
- Your email address, the date you signed up, and optionally the area you're in — only to email you when Foodee opens for diners in your area, plus any major changes to this policy before launch.
3Why we collect it
For diners:
- To show you specials nearby (location)
- To remember your saved items between sessions (device ID, saves)
- To send you notifications about specials you saved if you've enabled them (device ID and notification subscription)
- To manage your subscription if you have Foodee+ (email, subscription status)
For restaurants:
- To verify you and run your account
- To display your content to diners
- To help you understand how your specials are performing
- To get in touch with you about your account
We do not use your data for any other purposes. We do not sell it. We do not share it with advertisers. We do not "may use it for marketing" — we will not.
4Where your data lives
Foodee's databases are hosted by Supabase, which operates data centres in multiple regions. We use the region closest to South Africa available. Hosting and processing infrastructure may include:
- Supabase (database, authentication, file storage)
- PayFast (subscription payment processing for Foodee+)
- Resend (email sending for diner magic-link sign-in and account notifications)
- Twilio (WhatsApp template messages for restaurant owner sign-in)
- Mapbox (mapping and geocoding services)
- Sentry (error reporting and monitoring)
In some cases your data passes through these services briefly to do their job. For example, when we look up your area name from your coordinates, your coordinates are sent to Mapbox to get back "Salt Rock" or whatever — but neither we nor Mapbox store those coordinates against your identity.
If any of these providers process your data outside South Africa, they do so under contracts that include POPIA-equivalent data protections.
5How long we keep your data
- Anonymous device records: as long as the device keeps using Foodee. Saves for specials that ended more than 7 days ago are automatically deleted.
- Authenticated accounts: as long as you have an account. If you delete your account, we delete your data within 30 days (some backup retention may extend this).
- Restaurant accounts: as long as the restaurant is on Foodee. If a restaurant is removed, their content is deleted within 30 days.
- Subscription records and payment-related logs: kept for 7 years for tax and accounting purposes, as required by SA law.
- Anonymous usage events: kept for up to 24 months in aggregated form for understanding how Foodee is used.
- Waitlist emails: deleted within 90 days of Foodee opening in your area, or sooner if you unsubscribe.
6Your rights under POPIA
You have the right to:
- Know what we have. Email us and we'll tell you what data we hold about you.
- Correct or update it. If something we have about you is wrong, tell us and we'll fix it.
- Have it deleted. Ask us to delete your data and we will, except for records we're legally required to retain.
- Object to processing. If you disagree with how we're using your data, tell us.
- Complain to the regulator. The Information Regulator handles POPIA complaints (inforegulator.org.za).
For most of these requests, email us at hello@foodee.co.za. We respond within 30 days.
If you're an anonymous diner, the data we hold isn't tied to your identity — but if you can prove you're the user of a specific device (typically by sharing the device ID Foodee shows you in Settings), we can act on it.
7Cookies and similar technologies
Foodee uses minimal browser storage:
- IndexedDB to remember your device ID, your saved specials, your preferences, and your authentication token if you've signed in. This is not a cookie but functions similarly. It's strictly necessary for Foodee to work.
- No third-party analytics cookies. We do not use Google Analytics, Meta Pixel, or any similar tracking.
- No advertising cookies. Foodee has no ads.
8Children
Foodee is not directed at children under 18. We do not knowingly collect data from children. If you believe a child has used Foodee, contact us and we'll delete any data we have about them.
9Security
We protect your data with industry-standard security: encrypted transit (TLS), encrypted at rest (database-level), authentication using rotating tokens, and access controls that limit who at Foodee can see what. We are honest that no system is unbreachable; we'll tell you if a breach affects your data.
10Changes to this policy
If we change this policy meaningfully, we'll tell you at least 30 days before the change takes effect, via email if we have one for you, or in-app otherwise. Trivial changes (typo fixes, clarifications) we may make without notice.
11Contact
Privacy questions, requests, or complaints: hello@foodee.co.za
If you're not satisfied with our response, you can contact the Information Regulator:
- Website: inforegulator.org.za
- Email: complaints.IR@justice.gov.za