Privacy Policy

Last updated: 26 May 2026

The short version: We collect what we need to run the app for you. We don't sell your data. We don't share it with advertisers. You can delete your account at any time.

1. Who we are

Table for Two is a personalised date-planning app built in London, currently in private beta.

For privacy questions, contact us at: privacy@tablefortwo.app

2. What data we collect

Data	Why	Lawful basis
Email address	Sign-in via magic link	Contract
Name	Personalise the app for you	Contract
Partner's name (optional)	Personalise paired recommendations	Contract
Date preferences (budget, interests, dietary, energy, indoor/outdoor)	Generate tailored recommendations	Contract
Saved plans, wishlist, journal entries	Store your date history and ideas	Contract
Booking click-throughs	Track which venues you visited so we can show return status	Legitimate interest
Feedback and bug reports	Improve the product	Legitimate interest
Product usage events	Understand how the app is used, fix issues	Consent
Location (approximate, if you allow)	Show local weather for date planning	Consent
Error logs	Diagnose crashes and bugs	Consent

3. How we use your data

To provide the app — sign you in, save your preferences, generate personalised date plans
To improve the product — understand which features work, fix bugs
To communicate with you — respond to feedback, send magic link emails

We do not use your data for advertising, profiling for third parties, or automated decision-making with legal effects.

4. Who we share data with

Service	Purpose	Location
Supabase	Authentication, database, event storage	EU (AWS Frankfurt)
Vercel	Hosting, web analytics (if consented)	EU / US
Resend	Transactional email delivery (magic links)	US
Formspree	Feedback form processing	US
Sentry	Error monitoring (if consented)	US
Open-Meteo	Weather data (no personal data sent beyond coordinates)	EU

Where data is processed outside the UK, we rely on Standard Contractual Clauses or adequacy decisions as appropriate. All processors are bound by their own GDPR-compliant data processing agreements.

5. Cookies and local storage

We use browser local storage (not traditional cookies) to keep you signed in and store your preferences offline. We also use optional analytics that require your consent. See our Cookie Notice for details.

6. How long we keep your data

Account data — kept while your account is active. Deleted within 30 days of an account deletion request.
Usage events — retained for up to 12 months, then deleted or anonymised.
Feedback submissions — retained for up to 24 months.
Authentication logs — managed by Supabase per their retention policy.

7. Your rights

Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Delete your account and data
Export your data in a portable format
Withdraw consent for analytics at any time
Object to processing based on legitimate interests
Restrict processing in certain circumstances

To exercise any of these rights, email privacy@tablefortwo.app or use the "Delete my account" option in the app's Preferences page.

We aim to respond to all requests within 30 days.

8. Account deletion

You can request account deletion from the Preferences page in the app, or by emailing privacy@tablefortwo.app. We will delete your account, profile, preferences, saved plans, and usage data within 30 days.

9. Children

Table for Two is not intended for anyone under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy as the product develops. We'll notify you of material changes via email or an in-app notice. The "last updated" date at the top will always reflect the current version.

11. Complaints

If you're unhappy with how we handle your data, please contact us first at privacy@tablefortwo.app. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).