Your privacy matters.
Last updated: 18 October 2026. This notice covers GoDinner accounts, shared meals, foodies circles and the Munich launch waitlist.
Who is responsible?
GoDinner is a project by Giovanni Buonaiuto. For privacy questions, access requests, or to withdraw your consent, email info@godinner.app.
Account creation and privacy
GoDinner is for adults aged 18 and over. Email account creation requires your name, surname, date of birth, email and password. Your birth date stays in your owner-only profile; only your derived age is shared with relevant meal hosts and guests. Passwords are handled by the sign-in service and are not displayed in profiles. We record the date and version of your privacy notice acknowledgement and terms acceptance in a private account record. These acknowledgements are not consent to marketing. Account processing is necessary to provide the requested service under Article 6(1)(b) GDPR.
Foodies circles and invitations
We store circle names, membership and invitations to help you arrange meals with friends. Relevant circle members can see shared friend details including name, surname, photo, age, nationality, languages and interests. Signed-in people opening a valid circle invitation can also see the inviter’s account email. Private meals are restricted to their host, invitees and eligible participants. Your birth date, quiz answers and preferences are not part of shared participant details.
Accounts and shared meals
When you sign in, we store your account identity, name, optional photo, neighborhood, interests, quiz answers and preferences to provide your profile and shared-meal experience. Published meals display the host name, photo and meal details publicly. Join requests are visible to you and the meal host. Group messages are available to current approved guests and the host after the table fills. This processing is necessary to provide the service you request under Article 6(1)(b) GDPR.
Safety and sign-in
Block lists remain private to their owner. Reports are stored privately for safety review; they do not trigger an emergency response. Sign-in providers process your login according to their own notices, and your session is stored in your browser. Contact the address below to request deletion of your account or associated data.
What we collect and why
When you join, we store your email address, Munich as your launch city, and the time and version of your consent. We use this information to manage the waitlist and contact you about the Munich launch. Processing is based on your consent under Article 6(1)(a) GDPR.
Storage and access
Our website, database and sign-in are hosted by Lovable (Lovable Labs Incorporated); our domain and email mailbox are provided by GoDaddy. Both act as processors on our behalf; where data may be processed outside the EU, this is based on the EU Standard Contractual Clauses or an adequacy decision. When you visit the site, the hosting provider briefly processes technical data such as your IP address and browser type to deliver the page securely (Art. 6(1)(f) GDPR). Signup details are stored using Lovable Cloud. The subscriber list is not publicly accessible. We do not sell your email address or use it for unrelated advertising. We retain your details while the launch waitlist is active, or until you withdraw consent. You only join after confirming your email via the link we send you (double opt-in); unconfirmed signups are deleted after 30 days. Every email contains an unsubscribe link. You have the right to access, rectify, erase, restrict and port your data, to object, and to lodge a complaint with a supervisory authority such as the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach.
Your choices and rights
You can request access, correction, deletion, restriction, or a copy of your data, and withdraw consent at any time by contacting the email above. You may also complain to your data protection authority. Withdrawing consent does not affect processing already carried out lawfully.
Website services
This page loads fonts from Google Fonts and brand images from hosted asset services; these services receive the network information needed to deliver those resources. We do not add advertising trackers or analytics cookies.