Privacy policy

Last updated: 6 October 2026. This policy covers the Dishbound website and Android and iOS apps.

Who is responsible

Dishbound is a brand of MJS Products & Design Pty Ltd, ACN 675 265 219, Australia. Contact us about privacy at marco@mjsproducts.com.au.

Information used by Dishbound

• Accounts: email address, account identifier, authentication information, display name and any profile photo, biography, website, language or country you choose to provide. Authentication is provided by Supabase. If you choose Google or Apple sign-in, we receive the account information that provider makes available with your authorization.
• Your activity: saved foods and places, trips and selected stops, follows, likes, comments, reviews, reports and notification preferences. Guest saves are stored on your device; account features store information with your account.
• Content you submit: photographs, videos, captions, messages, reviews and producer content, including menus, contact details, offers and booking information. Public posts and public producer pages can be seen by other people. Do not upload material you do not have permission to share.
• Bookings and rewards: the business and offer selected, booking date, party size, contact details and notes you submit, booking status and reward records. These are used to process your requests and are available to the relevant producer.
• Location: with your device permission, foreground location is used for nearby places and offers. You may instead search by town or region. Map and route features send the locations and searches needed to provide those features to Google Maps services. Dishbound does not require background location tracking.
• Notifications and technical information: when you enable push notifications, we store a push token, device name, platform, app version and registration activity to deliver updates. Hosting, authentication and map services also process technical request information such as IP addresses, device/browser information and service logs to operate and protect the service.

Why we use information

We use information to provide accounts, food discovery, saved trips, maps, community features, producer pages, bookings, offers and notifications; to respond to support and privacy requests; and to prevent abuse, moderate content and maintain security. We use consent for optional permissions and website analytics, performance of the service you request for account and booking functions, and legitimate interests where applicable for security, moderation and service administration. Legal requirements may also require processing.

Who receives information

Supabase provides account, database and media-storage services. Our website hosting infrastructure serves pages and assets. Google Maps services provide maps, place search and routing. Expo and platform push services (Google Firebase for Android and Apple for iOS) deliver notifications. Service providers process the information needed for these functions. When you make a booking, the relevant producer receives the details needed to handle it. Public content is visible to its audience. Information may also be disclosed where required by law, to address abuse or to protect rights and security.

Third-party websites and services you open, including Google Maps or a producer’s website, have their own privacy policies. Service providers may process data outside your country, including outside Australia and the European Economic Area. Contact us for information about applicable safeguards. Dishbound does not sell personal information.

Community safety checks

Cloudflare Turnstile checks authentication attempts for automated abuse using technical browser and network information. Posts, comments and attached photographs are sent to OpenAI for automated safety classification before publication. Flagged submissions may be reviewed by authorised Dishbound staff. Private messages are not sent through this automated classifier; reported messages may be reviewed by staff. Automated decisions can be wrong: contact marco@mjsproducts.com.au to request a human review. We retain moderation outcomes and necessary audit records to investigate abuse and resolve appeals.

Website cookies and analytics

We use device storage and session information for sign-in, saved preferences and guest trips. On the website, Google Analytics is enabled only after you allow it. It records page views and technical usage information; advertising personalization is disabled in our configuration. To reset that choice, clear Dishbound’s site data in your browser and choose “No thanks” when prompted. Clearing site data also removes local guest saves. The native apps do not use this website analytics component.

Retention and deletion

Account information is held while needed to provide the service. You can delete your account in the app under You → Delete account and private data, or on the website through your account settings. You can also request deletion without installing the app using our account deletion page.

Account deletion removes your login and the associated private records covered by the deletion process. Public moderation records, records required to resolve disputes or comply with law, and copies held by recipients may be handled separately. For removal of remaining uploaded media or personal information in public content, include those items in your deletion request so we can review and remove them where applicable. Backup and service logs may remain until their applicable retention cycle ends. We will explain any specific information we must retain and why when responding to a deletion request.

Your choices and rights

You can edit profile information and notification preferences, revoke location and media permissions in your device settings, and request access, correction, export or deletion by emailing us from your account email. Depending on your location, you may also have rights to restrict processing, object, withdraw consent or complain to your local data protection authority. We may need to verify your identity before acting on a request. Withdrawing an optional permission can affect the related feature.

Security and children

We use encrypted network connections and access controls to protect information. No service can guarantee absolute security. Dishbound is a food and travel service, not a service designed for children. Please contact us if you believe a child has provided personal information that should be removed.

Changes

We update this page when our practices change and update the date above. Where required, we will give additional notice or request consent for material changes.