Privacy
Your details are never sold, and never shared with stores or advertisers. Stores only see your order's dishes, notes, code, allergies and the optional "order for" name. When checking a complaint about an order, the business that runs the store, and we, can also see the diets declared for that order, and every look is logged.
Ordering as a guest
You don't need an account. We keep an anonymous cookie so you can edit your order, and a scrambled (hashed) form of your internet address to stop abuse. Neither tells us who you are.
If you sign in with Google
We keep:
- your Google account ID and email address, so you can sign in
- a sign-in cookie on your phone, for up to 30 days, or until you sign out
- your usual party size and diets, if you save them
- your allergies, only if you save them and agree. Allergies are health information: we use them only to fill in your answers, and you can remove them at any time
Orders you place while signed in are linked to your account, so they show under "Your orders" on your account and "Something new" can suggest dishes you haven't had at that store. An order with allergies is linked only while you've agreed to us saving your allergies: remove your saved allergies and those orders are unlinked. We never use an order's allergies to personalise anything. Your saved preferences only fill in the questions for you, and you can change them before every order. We keep each order (its dishes, notes, code, allergies and any "order for" name you type) for the store's records, with your answers to the questions (party size, what you feel like, budget and diets), the diets you chose on the menu, and what the menu said about each dish's allergens and diets at the time, so a complaint can be checked against what was really ordered and "Start a new order" can fill the questions in again. The allergies, diets and dish details are deleted a year after the order. Stores never see your email or Google account.
We use your saved details only to fill in the questions for you, so your suggestions fit. Pikadish is never paid for your details, and they are never sold.
What stores see
Your order's dishes, notes, code, allergies and the optional “order for” name. Never your email or Google account, whether you're signed in or not.
Counting what menus are missing
At stores that use it: when your answers leave no combo that fits, or only one or two dishes for someone, your phone sends your answers (party size, diets, allergies and budget) to us, and we add one to an anonymous count for that store. The count names only the needs that could have caused it: the specific diet (such as gluten-free), the specific allergy (such as peanuts), a budget or dishes for kids, with the week and the time of day (morning, lunch, afternoon or evening). We use your answers only to work that out, and we don't keep them, or anything that links the count to you or your order. To stop abuse, we also keep a scrambled (keyed hash) form of your internet address (for IPv6, its network prefix) with the time it was sent, only to limit how often counts can be sent, and delete it once it's over an hour old, always within a day. Stores only ever see totals of 5 or more, and never one party's answers.
Deleting your data
Delete your account and we delete your account, email, saved preferences and allergies straight away. Copies in our database provider's short-term recovery backups expire within 30 days.
Who we are
Pikadish is operated by Coffee To Code Pty Ltd (ABN 56 702 712 650), which is responsible for your data.
Questions, or want a copy or correction of your data? Email hello@coffeetocode.com.au.
Unhappy with how we handled your data? Email us at hello@coffeetocode.com.au; if we don't resolve it, you can complain to the OAIC (oaic.gov.au).
We follow the Australian Privacy Principles (Privacy Act 1988).