Privacy policy

Who we are

GuestRound is run by Kieron Michel (“we”). We're the data controller for host accounts. For guest orders, the host of the event decides how the information is used, and we process it on their behalf. Questions? Email hello@guestround.app.

What we collect

• Hosts: your email address, your events, menus, places and settings.
• Guests: the first name you type, the place you pick, what you order or request (including times and notes such as a destination), and when.
• Notifications: if you turn alerts on, your device's push subscription.
• On your device: a random token so you can see your own orders and use “Same again”, plus your name and place so you don't retype them.
• Security: to stop spam we count requests using a one-way scrambled (hashed) version of your IP address. We don't store the IP itself.

Why we use it

To run the service you asked for: showing the menu, passing your order to your host, telling you when it's ready, and keeping GuestRound safe from abuse. Our lawful bases are performing our agreement with you (hosts), the host's legitimate interest in looking after their guests (guests), and our legitimate interest in security.

Who can see it

Only the event's host and the helpers they invite (helpers can be limited to certain services). We don't sell your data or share it with advertisers. Our hosting and database providers process it for us under contract.

Support payments

Optional support payments are processed by Stripe. Stripe receives the details you enter at checkout (e.g. email and card); GuestRound doesn't receive or store card details. See Stripe's privacy policy.

How long we keep it

Guest names, notes, places and alert sign-ups are removed automatically 90 days after an event ends; anonymous totals stay in the host's summary. Hosts can remove guest details sooner with “Delete guest data”. Host accounts are kept until you delete them.

Cookies and tracking

We don't use analytics, advertising or tracking tools. We only use essential storage on your device (your sign-in session, your guest token, name and place), so there's no cookie banner.

Your rights

Under UK GDPR you can ask to see, correct or delete your information, object to how we use it, or ask us to limit it. Hosts can delete their account from the account menu. Guests can ask the host, or email hello@guestround.app. You can also complain to the Information Commissioner's Office (ico.org.uk).

Changes

If we change this policy we'll update the date above.