Privacy policy

What we collect

We only collect what we need to run Vibbuzz:

• Account details: your name, your email address and the password you choose.
• Table activity: the tables you start or join, who approved you, your role at the table (host or guest), the items you order and your share of the bill.
• Payment status: whether your share is paid, the amount, the time and the payment reference returned by our payment provider.
• Notifications: if you turn on push notifications, a device token that lets us send them to your phone.
• Website forms: the details you type into the partner enquiry or account deletion forms, plus a one-way hash of your IP address and your browser's user agent, kept to stop spam.

We never receive or store your card number, expiry date or security code. Card details go straight to a licensed payment provider.

How we use it

• To create and secure your account and let you sign in.
• To let you start or join a table, send your orders to the restaurant and split the bill.
• To take payments through our payment provider and show everyone at the table what is paid.
• To send notifications you have switched on, such as a request to join your table.
• To answer your messages and requests, including deletion requests.
• To prevent fraud and abuse and to meet our legal obligations.

We do not sell your personal data and we do not use it for advertising.

Who can see your data

• The restaurant you dine at: your name, what you ordered and whether your share is paid for that visit, so it can serve you and close the table.
• Other guests at the same table: your name, the items you ordered and whether you have paid.
• Our payment provider: what it needs to process your payment.
• Our hosting provider, Hetzner Online, which runs our servers on our behalf.
• Public authorities, only when the law requires us to share it.

Where your data is stored

Our servers are hosted by Hetzner Online in Germany, in the European Union. When data leaves Egypt we transfer it with the safeguards required by the Personal Data Protection Law.

How long we keep it

• Account and table data: for as long as your account is open.
• After you ask us to delete your account: we delete your personal data within 30 days.
• Completed payment records: kept for the period Egyptian tax and accounting law requires, and used for nothing else.
• Website form submissions: for as long as we need them to follow up with you.

Your rights

Under the Personal Data Protection Law you have the right to:

• know what personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• withdraw your consent or object to processing;
• be told if a breach affects your personal data.

To use any of these rights, contact us as described below. You can also complain to Egypt's Personal Data Protection Centre.

Cookies

This website does not use analytics or advertising cookies, and we do not track you across other sites.

Security

All traffic between the app, this website and our servers is encrypted. Access to personal data is limited to the people who need it to run Vibbuzz.

Children

Vibbuzz is not directed at children. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date on this page, and tell you in the app when the change is significant.

Contact us

Send us a request through the form on our Delete account page, or use any other contact option listed at the bottom of this website.