How we use your data
The short version
- You can use TableTalk without an account. We give your phone a random ID so it can remember your ratings.
- Your dish ratings are public, but not your name in full. Others see your first name and your rating. Photos you add are public too.
- Your bill photo stays on your phone. We send it to AI once to read it, then keep only the dishes and prices.
- Pal is an AI. It is always marked "AI". It can be wrong — for allergies, always ask the staff.
- The restaurant sees your feedback and any chat with it. It gets your email or phone only if you choose to leave them.
- No ads, no tracking cookies, no selling your data.
- You can delete everything in Profile › Settings › Privacy & security › Delete my data.
Who we are
TableTalk is run by Delipal SRL, a Romanian limited liability company, registered office Strada Traian Demetrescu nr. 12, biroul 2, etaj E, ap. 2, Brașov, județul Brașov, Romania, Trade Register no. J2022000215086 (EUID ROONRC.J2022000215086), tax code (CUI) 45523018 ("TableTalk", "we").
For anything about your data, write to info@tabletalk.app. We answer within one month.
What data we use
What you give us
- Your first name, if you type it (for example, to name your table's party).
- Email or phone, only if you choose to: to sign in, to get a receipt, or to let a restaurant reach you.
- Google sign-in, if you use it: your Google name, email and profile photo.
- Your bill: a photo you take, which we read into dishes, prices and a total.
- Ratings, notes and photos of dishes, the service and the visit.
- Messages you send to Pal, to the restaurant, or in the follow-up chat after a rating.
- Voice notes, if you tap the microphone. We turn them into text and do not keep the recording.
- Payments and tips, if the restaurant offers them. Your card details go straight to Stripe. We never see or store them.
- Split-bill details, if you split with friends: your name and, if you add it, your Revolut username, shared with your table.
What we create when you use the app
- A random device ID, so your phone can remember your ratings and visits without an account.
- Which restaurant and table you checked in at, and when. A check-in ends after 4 hours.
- Your location, only if you allow it, to find restaurants near you and sort them by distance. Your position is sent to Google Places to find the restaurants around it, and to OpenStreetMap to name your area. We do not store it.
What we do not collect
- No advertising or analytics trackers, and no tracking cookies.
- Your diet and allergy choices stay on your phone. We do not receive them unless you write them in a message.
Why, and on what legal basis
| What for | Legal basis (GDPR art. 6) |
|---|---|
| Running the app you asked for: reading your bill, saving your ratings, Pal's answers, splitting and paying | Providing the service you use — 6(1)(b) |
| Showing ratings and photos publicly, so other diners can choose | Our legitimate interest in an honest public guide, balanced by showing your first name only — 6(1)(f) |
| Passing your feedback to the restaurant you rated | Providing the service — 6(1)(b) |
| Letting a restaurant call you back, when you ask for it | Providing the service you asked for — 6(1)(b) |
| Sending you a restaurant's offers and news | Your consent, asked separately and never pre-ticked — 6(1)(a). You can withdraw it at any time. |
| Keeping the service safe: spam checks on notes, abuse prevention, security logs | Legitimate interest — 6(1)(f) |
| Accounting records of payments | Legal obligation — 6(1)(c) |
If you write health details (such as an allergy) in a message, we use them only to answer that message.
AI in TableTalk
We use Google's Gemini AI models. Here is where, and what you should know:
- Pal, the chat helper, is an AI. Every message it writes is marked "AI". It answers from the restaurant's menu and other guests' ratings. It can make mistakes. For allergies, always confirm with the staff.
- The follow-up chat after a rating starts with Pal. The restaurant's team reads it and can join; when they do, you see their name.
- Reading your bill and matching it to the menu is done by AI. You check the result before you rate.
- Translations of menus, reviews and the app are made by AI.
- Diet tags (vegetarian, vegan, keto…) are worked out by AI from the listed ingredients. Halal and kosher come only from the restaurant.
- Review drafts: if you ask, AI drafts a review from your ratings. You edit it and post it yourself.
- Spam checks: AI checks notes before they appear publicly. A note it flags is held back and not shown publicly; the rest of your rating still counts.
- Waiters' cartoon portraits are drawn by AI from a selfie and are marked "AI portrait".
No decision about you is made by AI alone with any legal or similarly significant effect on you (GDPR art. 22). AI never decides what you pay; a bill is only ever payable once it matches the menu by rule.
What you send to an AI feature is processed by Google as our service provider. Google does not use it to train its models.
You and the restaurant
When you rate a visit, chat with a restaurant or leave your contact with it, the restaurant decides what to do with that data and is responsible for it. TableTalk handles it on the restaurant's behalf. The restaurant sees:
- your ratings, notes and photos for its dishes and service, and the name of the waiter who served you;
- your messages in its chats;
- your name, email or phone — only if you chose to leave them with that restaurant;
- tips and payments made at its tables.
To exercise your rights over that data, you can write to the restaurant or to us — we will pass your request on.
Who else receives data
We never sell your data. We share it only with the services that make TableTalk work:
| Service | What for | Where |
|---|---|---|
| Google Firebase | Database and sign-in | Belgium (EU) |
| Google Gemini | The AI features above | EU / USA |
| Netlify | Hosting the app | USA |
| Stripe | Card payments and tips (Stripe is responsible for your card data) | EU / USA |
| EmailJS | Sending receipts and sign-in codes by email | Singapore / USA |
| Resend | Sending reports and notices to restaurant teams by email | USA |
| Google Maps / Places, TripAdvisor | Restaurant details, public reviews, and restaurants near you if you share your location | USA |
| OpenStreetMap (Nominatim), Komoot (Photon) | Naming your area, and finding a place you type in the search | EU |
Where a provider is outside the EU, the transfer is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses, as set out in that provider's data processing agreement.
Some content is public by design: dish ratings with your first name, dish and venue photos, and waiters' portraits. Reviews you post on Google or TripAdvisor follow those sites' own rules. We may also have to give data to public authorities when the law requires it.
What is stored on your phone
TableTalk does not use cookies. It saves things in your browser's own storage so the app works: your device ID, language, ratings, your bill photos, your diet choices, your app lock and your current visit. This is needed for the app to work, so we do not ask for consent for it. You can clear it at any time in Profile › Settings › Privacy & security › Forget me on this phone, or by clearing your browser's site data.
How long we keep it
- Your bill photos: only on your phone, until you delete them.
- Your account, contacts and private history: until you delete them.
- Public dish ratings: after you delete your data, they stay as anonymous ratings with no name.
- Your feedback to a restaurant (ratings and notes): until you delete your data. After that, the ratings stay with no name or note.
- Chats with a restaurant: 12 months after the visit.
- Messages to Pal: kept without your ID, to improve answers, for 12 months.
- Payment records: as long as accounting law requires (in Romania, up to 10 years).
If you work at a restaurant
If you use Pal as a waiter or the dashboard as a manager, we also use:
- your name, your email (stored as a code, used to sign you in) and your role;
- your selfie, only to draw your cartoon portrait once — the selfie is not kept, the drawing is, and guests see it marked "AI portrait";
- guest feedback that names you, your tables and your tips, including tips recorded at the till;
- if you receive card tips: your Stripe account, which Stripe opens and checks in your own name.
Your restaurant sees your tables, feedback and tips. AI is never used to score, rank or judge your work.
Your rights
- Access — ask what data we hold about you and get a copy.
- Correction — fix anything wrong or incomplete.
- Deletion — in the app (Delete my data) or by email. Some records, such as payments, we must keep by law.
- Restriction — ask us to pause using your data while a question is settled.
- Portability — get your data in a common format.
- Objection — object to uses based on our legitimate interest, such as public ratings.
- Withdraw consent — at any time, for anything you agreed to. It does not affect what was done before.
Write to info@tabletalk.app. We may ask you to prove the data is yours, for example from the phone that holds it.
Age. You must be 14 or older to use TableTalk. Agreeing to a restaurant's offers relies on your consent, which the law lets you give alone only from 16: under 16, a parent must agree for you.
Complaints
You can complain to the data protection authority where you live or work. In Romania: ANSPDCP, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest · anspdcp@dataprotection.ro · +40 318 059 211 · dataprotection.ro.
Changes
If we change this policy, we update the date at the top. If a change matters to you, we tell you in the app before it applies.