Privacy Policy

This Privacy Policy explains how Infinity TechHub - F.Z.E (“Company”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use the EatIn mobile application and related services (the “App”) across the Gulf Cooperation Council (“GCC”) region.

By creating an account or using EatIn, you agree to this Privacy Policy. If you do not agree, please do not use the App.

1. Who we are

2. Information we collect

We may collect the following categories of information:

• Account & identity: name, phone number, email address, profile photo (optional), and authentication data (OTP verification).
• Delivery details: delivery addresses, location coordinates (when you allow location access), and service-area checks.
• Order information: restaurant selections, menu items, quantities, special instructions, coupons, scheduled delivery times, order status, and cancellation reasons.
• Payment information: payment is processed by Stripe. We do not store full card numbers on our servers. We may receive payment status, amount, currency, and transaction references needed to fulfill and refund orders.
• Device & technical data: device identifiers, platform (iOS/Android), app version, push notification tokens, IP address, and basic diagnostics needed to operate and secure the App.
• Communications: messages you send us (or that restaurants handle in relation to your order), support notes, and in-app feedback.
• Usage data: interactions with the App such as browsing restaurants, cart activity, and feature usage, used to improve reliability and service quality.

3. How we use your information

• Create and manage your EatIn account.
• Verify your identity via OTP (phone or email).
• Show nearby or available restaurants and confirm service coverage.
• Place, schedule, track, modify, and cancel orders.
• Process payments and refunds through Stripe.
• Share necessary order and delivery details with the restaurant fulfilling your order.
• Send transactional push notifications and updates about your orders (where permitted).
• Provide customer account features such as order history, profile updates, and account deletion.
• Prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations and enforce our Terms & Conditions.
• Improve App performance, safety, and user experience.

4. Legal bases / legitimate purposes

We process personal data to perform our contract with you (providing ordering and account services), to pursue legitimate interests in operating a secure platform, and where required by applicable UAE and GCC laws. Where consent is required (for example, certain device permissions such as location, camera, or notifications), we request it through the operating system and you may withdraw permission in device settings.

5. How we share information

We share personal information only as needed to operate EatIn:

• Partner restaurants: We share order details, your name, phone number, delivery address/location, and related instructions so the restaurant can prepare and deliver your order. For order-specific support issues, the respective restaurant is responsible for assisting you regarding that order.
• Payment processor (Stripe): to process payments and refunds securely.
• Infrastructure & messaging providers: such as hosting, analytics limited to service operation, maps/geocoding providers, and push notification services (for example Apple Push Notification service / Firebase Cloud Messaging) to deliver the App.
• Legal & safety: if required by law, regulation, court order, or to protect rights, safety, and integrity of users, restaurants, or the Company.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell your personal information.

6. Location, camera, and notifications

• Location: used to help you set delivery addresses, check service availability, and support delivery fulfillment. You may decline location access and enter an address manually where the App allows.
• Camera / photo library: used only if you choose to set or update a profile picture.
• Push notifications: used for order and account updates. You can disable them in device settings.

7. International transfers

EatIn is offered in the GCC. Your data may be processed in the UAE and in other countries where our service providers operate (for example payment or cloud providers). We take reasonable steps to ensure appropriate protection consistent with this Policy and applicable law.

8. Data retention

We retain account, order, and transaction records for as long as needed to provide the service, resolve disputes, meet accounting/tax/legal requirements, and enforce our agreements. When you request account deletion, we delete or anonymize personal data associated with your account, except information we are legally required to retain (for example certain payment or order records).

9. Account & data deletion

You can request deletion of your EatIn account and the personal data linked to it. You may also update profile information in the App, revoke device permissions in system settings, and contact us at info@eatin.ae for access or correction requests where applicable.

How to request deletion

• In the app: Open EatIn → Profile → Delete Account → confirm.
• Outside the app: Email info@eatin.ae with the subject “EatIn Account Deletion Request”, including the phone number and/or email used for your account.

24-hour restoration window

• After you request deletion, your account enters a pending deletion period of 24 hours.
• If you log in again within 24 hours, the deletion request is cancelled and your account is restored with your existing data.
• If you do not log in within 24 hours, your account and associated personal data are permanently erased.
• After permanent erasure, registering again with the same phone or email creates a new (fresh) user account. Previous profile details, saved addresses, and history are not restored.

What we erase after 24 hours (if you do not restore)

• Profile details (name, phone number, email, profile photo)
• Saved delivery addresses
• Device and push-notification tokens linked to your account
• Other personal data we are not legally required to keep

What we may retain

We may retain limited records where required for tax/accounting, fraud prevention, payment disputes, chargebacks, or legal compliance (for example certain order and payment records), only for as long as necessary.

10. Children

EatIn is intended for users aged 18 and above. Users under 18 may use the App only with the consent and supervision of a parent or legal guardian who accepts this Policy and our Terms on their behalf. If you believe we have collected data from a minor without proper consent, contact us and we will take appropriate action.

11. Security

We use reasonable administrative, technical, and organizational measures to protect personal information. No method of transmission or storage is completely secure; please protect your device and OTP codes.

12. Third-party links and services

The App may open maps or other third-party services. Their privacy practices are governed by their own policies. Payment card data is handled by Stripe under Stripe’s privacy terms.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Continued use of EatIn after an update means you accept the revised Policy, except where applicable law requires additional consent.

14. Contact

For privacy questions or requests:

For issues about a specific order (food quality, delivery timing, missing items, etc.), please contact the restaurant that fulfilled that order, which is responsible for order-level support.