How What Can I Eat Here handles your data.
This Privacy Policy explains how Prestige Worldwide Labs collects, uses, shares, protects, retains, and deletes information for the What Can I Eat Here website, Android app, iPhone app, and related services.
1. Overview
What Can I Eat Here helps users save dietary preferences, search restaurant menus, receive AI-assisted meal suggestions, save meals, and manage account features. The service is intended to make restaurant ordering easier, but it is not a medical device and does not replace professional medical, nutrition, allergy, or healthcare advice.
This policy applies to the What Can I Eat Here website, mobile applications, account portal, subscription features, AI menu analysis, support requests, and related tools operated by Prestige Worldwide Labs.
2. Data We Collect
We collect information that users provide directly, information created while using the service, and technical information needed to operate and secure the platform.
| Category | Examples | Required or optional |
|---|---|---|
| Account information | Name, email address, password hash, login status, email verification status, plan, referral information, and account status. | Required to create and manage an account. |
| Diet profile information | Diet style, calorie target, allergies, foods to avoid, nutrition goals, current weight, goal weight, weekly goal, and notes entered by the user. | Optional, but needed for personalized recommendations. |
| Restaurant and meal activity | Restaurant names, menu links or pasted menu notes, ZIP code or location text, cravings, search radius, saved orders, favorites, meal logs, calories, and user notes. | Optional, but needed for restaurant search, saved meals, and meal logging. |
| Subscription and payment records | Plan selection, PayPal subscription ID, subscription status, payment event IDs, and related webhook records. We do not store full payment card numbers. | Required only for paid membership features. |
| Technical and security data | IP address, user agent, app platform, app version, session cookies, mobile access tokens, timestamps, rate-limit counters, error context, and abuse-prevention logs. | Required to operate, secure, debug, and protect the service. |
| Support and communications | Messages sent to support, account deletion requests, admin notes, and records needed to respond to user inquiries. | Optional, collected when users contact us or request support. |
Biometric login, when enabled in the mobile app, uses the device operating system's authentication tools. We do not receive or store fingerprint, Face ID, or biometric templates.
3. How We Use Data
- Create, authenticate, secure, and maintain user accounts.
- Save dietary preferences and synchronize account information between the website and mobile apps.
- Analyze restaurant menus and provide personalized order suggestions.
- Save favorite meals, saved orders, meal logs, and plan preferences.
- Operate free and paid membership limits, including Plus features.
- Process subscriptions, payment status, account upgrades, and billing-related support.
- Prevent fraud, spam, abuse, unauthorized access, and excessive API usage.
- Provide customer support, account notices, service updates, and legally required communications.
- Improve the service, debug technical issues, and understand aggregate usage trends.
4. Sharing And Service Providers
We do not sell private account credentials, password hashes, payment card numbers, or individual diet profiles. We share information only as needed to operate the service, provide features requested by the user, comply with law, or protect the service.
- AI providers: Restaurant, menu, and diet profile information may be sent to OpenAI or another AI provider to generate recommendations.
- Payment providers: Paid subscription activity is processed through PayPal. PayPal handles payment information under its own privacy practices.
- Hosting, security, and infrastructure providers: Website hosting, storage, logging, email, and security systems may process information needed to operate the service.
- Delivery and ordering partners: If an Order for Me or delivery integration becomes available and a user chooses to use it, order details and contact or delivery information may be shared with the selected partner, such as DoorDash, Uber Eats, Grubhub, or a similar provider.
- Legal and safety reasons: We may disclose information if required by law, legal process, fraud prevention, account security, or protection of users and the service.
5. AI Menu Analysis And Health Notice
AI recommendations are generated from the information users provide and from available restaurant or menu information. AI can be incomplete or incorrect. Users with allergies, medical conditions, pregnancy-related dietary restrictions, medication interactions, or other health needs should verify ingredients with the restaurant and consult a qualified professional.
6. Security And Data Handling
We use reasonable administrative, technical, and organizational safeguards designed to protect user information. These include HTTPS, password hashing, server-side session controls, mobile token storage, rate limiting, limited admin access, and abuse monitoring. No online service can guarantee absolute security, but we work to reduce unauthorized access, misuse, and accidental loss.
7. Data Retention And Account Deletion
We retain account information while an account is active or as needed to provide the service. Saved orders, meal logs, AI usage records, subscriptions, support records, security logs, and admin records may be retained as needed for service operation, accounting, legal compliance, fraud prevention, dispute handling, and safety.
Users can delete their account online at https://whatcanieathere.com/account/delete. Account deletion removes the user account, saved orders, meal logs, and usage records from the active account system. A limited deletion or security record may be retained where necessary for fraud prevention, compliance, audit, chargeback handling, or legal obligations. Active PayPal subscriptions may also need to be cancelled through PayPal.
8. Your Choices And Controls
- Users can update profile details, diet preferences, allergies, ZIP code, saved meals, and account details through the website or app where available.
- Users can choose not to provide optional diet, weight, allergy, craving, or meal-log details, but personalized recommendations may be less useful.
- Users can sign out of the app and website, disable biometric login in the app or device settings, and clear browser cookies through browser settings.
- Users can request help, correction, export, or deletion assistance by contacting hello@whatcanieathere.com.
9. Cookies, Local Storage, And Mobile Storage
The website uses cookies and server-side sessions to keep users logged in and protect account access. The mobile app may use secure local storage for login tokens, stay-signed-in preferences, biometric-login settings, and basic app state. We may also use limited analytics or event logs to understand account activity, diagnose errors, and improve the service.
10. Advertising, Affiliates, And Sponsored Placements
The free plan may display advertisements or sponsored placements. Plus members may receive an ad-free experience where supported. We may use broad account plan, restaurant search, dietary category, and aggregate usage information to decide where sponsored placements appear. Affiliate or delivery partner links may identify that a user came from What Can I Eat Here, but we do not intentionally provide partners with private diet profile details unless the user chooses an ordering feature that requires those details.
11. Children
What Can I Eat Here is not directed to children under 13. Users under the age required by their country, state, or app store rules should not create an account. If we learn that we collected personal information from a child in a way that requires deletion, we will take reasonable steps to delete it.
12. International Users
The service is operated from the United States. If users access the service from another country, their information may be processed in the United States or other places where our service providers operate. Users are responsible for deciding whether the service is appropriate for their local requirements.
13. Changes To This Policy
We may update this Privacy Policy as the service changes, including new app features, subscriptions, AI providers, delivery integrations, advertising features, or legal requirements. The effective date above will be updated when material changes are posted.
14. Contact
For privacy questions, account deletion help, or data requests, contact:
Prestige Worldwide Labs
What Can I Eat Here
Email: hello@whatcanieathere.com