Legal
Privacy Policy
How B4Eat collects, uses and protects your personal data, and the choices you have.
Last updated:
On this page
At a glance
We never sell your data
Your personal data is never sold or rented to third parties.
Location only at check-in
We read your location when you check in, never in the background.
Receipts are temporary
Receipt images are deleted once your visit is verified.
You are in control
Access, correct or delete your data at any time from the app or by email.
01Who we are
B4Eat is a gourmet discovery app built and operated by B4 Labs (“B4 Labs”, “we”, “us”). This policy explains what personal data we collect when you use the B4Eat mobile app, this website and related services (together, the “Services”), why we collect it and the choices you have.
B4 Labs is the data controller for the personal data described in this policy. You can reach us at any time at support@b4eat.app.
02Data we collect
We only collect what we need to run the Services and keep them fair and secure.
- Account data: your name, username, email address, password (stored hashed) and optional profile photo.
- Location data: your device location at the moment you check in at a restaurant, used to verify the visit. We do not track your location in the background.
- Receipt data: photos of receipts you choose to share, and the venue, date and total we extract from them for verification.
- Content you create: reviews, ratings, photos and comments you post.
- Rewards data: your B4E points balance, level and activity history.
- Device and usage data: device model, operating system, app version, IP address, crash logs and in-app interactions.
- Communications: messages you send to our support or partnership teams, including through the contact form on this website.
03How we use your data
- To create and manage your account and provide the core features of the app.
- To verify check-ins and receipts and award B4E points under the loyalty program.
- To publish your reviews and show relevant restaurant recommendations.
- To detect and prevent fraud, abuse and fake visits or reviews.
- To answer support requests and send important service notices.
- To analyse aggregated usage and improve the Services.
- To send marketing messages, only where you have opted in. You can opt out at any time.
04Legal bases
Depending on the activity, we rely on one or more of the following legal bases:
- Contract: processing needed to provide the Services you signed up for.
- Legitimate interests: keeping the platform secure, preventing fraud and improving our products.
- Consent: precise location at check-in, marketing messages and optional cookies. You can withdraw consent at any time.
- Legal obligation: complying with applicable laws, such as tax and accounting rules.
06International transfers
Our service providers may process data in countries other than your own. When we transfer personal data internationally, we use appropriate safeguards, such as standard contractual clauses, and only work with providers that offer an adequate level of protection.
07Data retention
We keep personal data only for as long as needed for the purposes described above.
- Account data is kept while your account is active.
- Receipt images are deleted after verification is complete; extracted visit details are kept with your rewards history.
- Support messages are kept for up to 24 months after the request is closed.
- Some records may be kept longer where the law requires it.
When you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep it to meet legal obligations. Public reviews are anonymised rather than removed, unless you delete them first.
08Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal data we hold about you and receive a copy.
- Correct inaccurate or incomplete data.
- Delete your data and your account.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time, without affecting earlier processing.
- Lodge a complaint with your local data protection authority.
You can delete your account from the app settings at any time. For any other request, email support@b4eat.app or use our contact form. We respond within 30 days and may ask you to verify your identity first.
09Security
We protect your data with encryption in transit and at rest, strict access controls, optional two-factor authentication and regular security reviews. No system is completely secure, so please use a strong, unique password and never share your verification codes. We will never ask for your password by email or phone.
10Children
The Services are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will delete it.
12Changes to this policy
We may update this policy from time to time. When we make material changes, we will notify you in the app or by email before they take effect. The date at the top of this page shows when it was last updated.
13Contact
For privacy questions or to exercise your rights, email support@b4eat.app or reach us through the contact page.