1. We respect your privacy

  1. Piatto respects your right to privacy and is committed to safeguarding the privacy of our customers and software application users. We adhere to the Australian Privacy Principles established by the Privacy Act 1988 (Cth). This policy sets out how we collect, use, disclose, retain, and delete your personal information.
  2. "Personal information" is information we hold which is identifiable as being about you.

2. Collection of personal information Updated

  1. Piatto will, from time to time, receive and store personal information you enter onto our software application Piatto, provide to us directly or give to us in other forms.
  2. You may provide basic information such as your name, phone number, address and email address to enable us to send information, provide updates and process your product or service order. We may collect additional information at other times, including but not limited to, when you provide feedback, when you provide information about your personal or business affairs, change your content or email preference, respond to surveys and/or promotions, provide financial or credit card information, or communicate with our customer support.
  3. Additionally, we may also collect any other information you provide while interacting with us.
  4. Sensitive and accessibility-related information. Piatto's core purpose is to communicate your accessibility preferences to hospitality venues so they can prepare for your visit. To deliver this service, we may collect the following categories of sensitive information, all of which are entirely optional and provided at your discretion:
    • Accessibility requirements — such as wheelchair use, mobility aids, vision or hearing impairment, cognitive disability, and sensory sensitivities. This information is transmitted to venues you order from so they can accommodate your needs.
    • Dietary requirements — such as allergies, intolerances, or medically required diets. This is shared with venues to ensure safe meal preparation.
    • Vehicle registration — used solely for curbside pickup, allowing venue staff to locate your vehicle when bringing your order out.
    • Proof of age documentation — If you choose to verify your age within the Piatto app, you may photograph or upload a government-issued identity document (such as a driver's licence, passport, or proof-of-age card). This document is processed on your device using optical character recognition (OCR) to extract your date of birth. The identity document image is not transmitted to or stored on Piatto's servers. Only the extracted date of birth and verification status are retained in your user profile. Age verification is optional and is used to confirm eligibility for age-restricted products where required by law or venue policy.

    This information is classified as sensitive information under the Privacy Act 1988 (Cth). We collect it only with your explicit consent and use it only for the purposes described above. Accessibility, dietary, and vehicle information is shared only with the specific venue fulfilling your order at the time of that order. Age verification data (date of birth and verification status) is stored in your user profile and is not shared with venues. You may update or remove any of this information at any time through the Piatto app.

3. How we collect your personal information

  1. Piatto collects personal information from you in a variety of ways, including when you interact with us electronically or in person, when you access our software application and when we provide our services to you. We may receive personal information from third parties. If we do, we will protect it as set out in this Privacy Policy.

4. Use of your personal information

  1. Piatto may use personal information collected from you to provide you with information, updates and our services. We may also make you aware of new and additional products, services and opportunities available to you. We may use your personal information to improve our products and services and better understand your needs.
  2. The Application may make third party social media features available to its users. We cannot ensure the security of any information you choose to make public in a social media feature. Also, we cannot ensure that parties who have access to such publicly available information will respect your privacy.

Piatto may contact you by a variety of measures including, but not limited to telephone, email, SMS or mail.

5. Disclosure of your personal information

  1. We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this Policy. Personal information is only supplied to a third party when it is required for the delivery of our services.
  2. Disclosure to venues. When you place an order or make a reservation through Piatto, we share the following information with the venue fulfilling your order:
    • Your first name (or "Guest" if not provided) and phone number, so the venue can identify and contact you regarding your order.
    • Your email address, when included in a reservation submission, for booking confirmation and communication.
    • Your order details, including items, quantities, prices, special instructions, and table or seating location.
    • If you have enabled accessibility sharing in your profile: your accessibility requirements, dietary needs, allergen information, mobility aid details, seating preferences, and sensory sensitivities, so the venue can accommodate your needs. You can disable this sharing at any time via the toggle in your profile settings.
    • If your order includes age-restricted items: your age verification status (verified or not verified, verification date, and applicable legal age threshold). Your date of birth and identity document are not shared with venues.
    • For Submit Upon Approach orders: your vehicle registration (if provided), so venue staff can locate your vehicle for curbside delivery.

    Venues receive only the information relevant to the specific order or reservation. Piatto does not grant venues ongoing access to your profile or personal data beyond what is included in each individual order submission.

  3. We may from time to time need to disclose personal information to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, in the course of a legal proceeding or in response to a law enforcement agency request.
  4. We may also use your personal information to protect the copyright, trademarks, legal rights, property or safety of Piatto, its application, website and customers or third parties.
  5. Information that we collect may from time to time be stored, processed in or transferred between parties located in countries outside of Australia. These may include, but are not limited to USA.
  6. If there is a change of control in our business or a sale or transfer of business assets, we reserve the right to transfer to the extent permissible at law our user databases, together with any personal information and non-personal information contained in those databases. This information may be disclosed to a potential purchaser under an agreement to maintain confidentiality. We would seek to only disclose information in good faith and where required by any of the above circumstances.
  7. By providing us with personal information, you consent to the terms of this Privacy Policy and the types of disclosure covered by this Policy. Where we disclose your personal information to third parties, we will request that the third party follow this Policy regarding handling your personal information.

6. Security of your personal information Updated

  1. Piatto is committed to ensuring that the information you provide to us is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure information and protect it from misuse, interference, loss and unauthorised access, modification and disclosure.
  2. The transmission and exchange of information is carried out at your own risk. We cannot guarantee the security of any information that you transmit to us, or receive from us. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that personal information that we collect will not be disclosed in a manner that is inconsistent with this Privacy Policy.
  3. Data storage and processing. Your personal information is stored and processed using the following services:
    • Google Firebase (Google LLC, USA) — provides cloud database, authentication, and hosting services. Data may be stored on Google servers located in the United States and Australia.
    • Firebase Analytics (Google LLC, USA) — collects app usage data including screen views, feature interactions, session duration, and custom event data (such as order events, search query metadata, and navigation patterns). Firebase Analytics automatically collects an app instance identifier and basic device information. This data is used to understand how the app is used, diagnose issues, and improve the user experience. No personally identifiable information (such as names or email addresses) is included in analytics events. Data is processed on Google servers in accordance with Google's privacy policies.
    • Google Maps Platform (Google LLC, USA) — provides mapping, geocoding, and directions services. When you use location-based features in the app, your GPS coordinates may be transmitted to Google's Maps API to determine your address, display maps, and calculate directions to venues. Google processes this data in accordance with its privacy policies.
    • Stripe (Stripe, Inc., USA) — processes payment transactions. Piatto does not store your full credit card details; these are handled directly by Stripe in accordance with PCI DSS standards.
    • On-device processing (Google ML Kit) — Age verification uses Google's ML Kit OCR library, which runs entirely on your device. Identity document images are processed locally and are not transmitted to Google or any third party. No identity document images are stored in Piatto's cloud infrastructure.
    • Sentry (Functional Software, Inc., USA) — provides crash reporting and performance monitoring services. When the app encounters an error or crash, diagnostic information including stack traces, device model, operating system version, and app state is transmitted to Sentry's servers. In limited circumstances (specifically authentication-related errors), your email address may be included in the error report to assist with debugging. Sentry processes this data on servers located in the United States.
    • Expo (650 Industries, Inc., USA) — provides push notification delivery services. When you enable push notifications, a push notification token and your device name are transmitted to Expo's servers to facilitate message delivery. Expo processes this data in accordance with its privacy policy.

    These service providers are contractually bound to process your data only as necessary to provide their services and in accordance with applicable privacy laws.

7. Data retention and deletion Updated

  1. How long we keep your data. We retain your personal information for as long as your account is active and as reasonably necessary to provide you with our services. If your account becomes inactive, we may retain your information for a reasonable period to allow you to reactivate your account or as required by law.
  2. Account deletion. You may request deletion of your account at any time through the Piatto mobile application or by contacting us at privacy@piatto.com.au. When you request account deletion:

    What happens when you delete your account

    • Your account is immediately deactivated and a 7-day grace period begins. During this period, you may contact us to cancel the deletion and recover your account.
    • After the 7-day grace period, your account and all associated personal data are permanently deleted. This includes your order history, reservations, reviews, saved favourites, recommendations, and rewards data.
    • Your stored payment methods are removed and your payment profile with our payment processor (Stripe) is deleted. Note that Stripe may independently retain transaction records as required for their legal and tax compliance obligations.
    • Any locally stored data on your device (such as authentication tokens and cached preferences) is cleared automatically upon account deletion.
    • Any age verification status associated with your account is permanently deleted. Since identity document images are processed on-device and never stored on our servers, there are no server-side copies of your identity documents to delete.
  3. Backup retention. System backups that may contain your data are automatically purged after 90 days. This means that following your account deletion, residual copies of your data in backups will be removed within 90 days.
  4. Exceptions. We may retain certain information after account deletion where we are required to do so by law, regulation, or legitimate legal obligation (for example, financial transaction records for tax compliance, or data subject to a legal hold). In such cases, the retained data will be securely stored and isolated from active use, and deleted once the retention obligation expires.

8. Access to your personal information

  1. You may request details of personal information that we hold about you in accordance with the provisions of the Privacy Act 1988 (Cth). A small administrative fee may be payable for the provision of information. If you would like a copy of the information which we hold about you or believe that any information we hold on you is inaccurate, out of date, incomplete, irrelevant or misleading, please email us at privacy@piatto.com.au.
  2. We reserve the right to refuse to provide you with information that we hold about you, in certain circumstances set out in the Privacy Act.

9. Complaints about privacy

  1. If you have any complaints about our privacy practices, please feel free to send in details of your complaints to PO Box 70, Crows Nest, Queensland, 4355, or email us at privacy@piatto.com.au. We take complaints very seriously and will respond shortly after receiving written notice of your complaint.

10. Opt out right

  1. You can stop all collection of information by the Application easily by uninstalling the Application. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network. You can also request to opt-out via email, at privacy@piatto.com.au.

11. Changes to Privacy Policy

  1. Please be aware that we may change this Privacy Policy in the future. We may modify this Policy at any time, in our sole discretion and all modifications will be effective immediately upon our posting of the modifications on our website or notice board. Please check back from time to time to review our Privacy Policy.

12. Software Application Updated

  1. When you use our Application. When you come to our application we may collect certain information such as mobile unique device ID, the IP address of your mobile device, mobile operating system, the type of mobile internet browsers you use, and information about the way you use the Application. This information is used in an aggregated manner to analyse how people use our site, such that we can improve our service.
  2. Cookies. We may from time to time use cookies on our software application. Cookies are very small files which a website uses to identify you when you come back to the application and to store details about your use of the application. Cookies are not malicious programs that access or damage your computer, tablet or smartphone. Most devices automatically accept cookies but you can choose to reject cookies by changing your device settings. However, this may prevent you from taking full advantage of our application.
  3. Automatic collection. The software Application may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device's unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, and information about the way you use the Application.
  4. Third parties. Our software application may from time to time have links to other applications or websites not owned or controlled by us. These links are meant for your convenience only. Links to third party applications and websites do not constitute sponsorship or endorsement or approval of these third parties. Please be aware that Piatto is not responsible for the privacy practices of other such applications or websites. We encourage our users to be aware, when they leave our application or website, to read the privacy statements of each and every application or website that collects personal identifiable information.
  5. Geo-location. When you visit the mobile application, we may use GPS technology (or other similar technology) to determine your current location in order to determine the city you are located within and display a location map. We may use your current location to deliver our services via the Application. We will not share your current location with other users. Your GPS coordinates are transmitted to our servers to identify nearby venues and to Google Maps Platform for geocoding and directions services. Raw GPS coordinates are not stored persistently on our servers; only your derived region (country and state/province) is cached to configure regional settings. When you place a Submit Upon Approach order, Piatto monitors your location in the background to detect when you arrive at the venue. Background location monitoring begins when you confirm the order and stops automatically once the order is submitted to the kitchen. Your location is sent to Google Maps for map display and driving/walking directions. No location history is ever recorded or stored on Piatto's servers.
  6. Camera and photo library. The Piatto Application requests access to your device's camera and photo library for the following purposes:
    • Camera — used to scan QR codes at participating venues for in-venue ordering (the "Submit Once Seated" feature). The camera is activated only when you initiate a QR scan. Piatto does not capture, store, or transmit photos or video through the camera permission.
    • Photo library — used for two purposes:
      • User profile photo: You may optionally upload a profile image (avatar) from your photo library. This image may be transmitted to a venue along with your order so that staff can visually identify you when delivering your order — for example, during curbside pickup or when bringing an order to your table.
      • Venue manager uploads: Venue managers use photo library access to upload venue images and menu item photos within the Piatto platform.
      • Age verification: If you choose to verify your age, you may use the camera or photo library to capture or select an image of a government-issued identity document. This image is processed entirely on your device to extract your date of birth, and is not uploaded, stored, or transmitted to Piatto's servers or any third party. The image is discarded immediately after on-device processing.
      Photo library access is optional and not required to use the app's core ordering features.

    Neither camera data nor photo library contents are shared with third parties or used for advertising, analytics, or any purpose other than those described above. Profile photos are shared only with the specific venue fulfilling your order at the time of that order.

  7. NFC (Near Field Communication). Piatto uses NFC to read venue table tags. When you tap your phone on an NFC chip at your table, Piatto reads the tag to identify your table number and attach it to your order. No NFC data is stored or transmitted beyond associating the table number with your order during that session.
  8. Analytics and crash reporting. Piatto uses Firebase Analytics to collect aggregated, non-personally-identifiable data about how you use the Application, including screen views, feature interactions, and session information. This data helps us understand usage patterns, identify issues, and improve the app experience. Piatto also uses Sentry for crash reporting and performance monitoring. When the app encounters an error, diagnostic data (including device model, operating system version, stack traces, and app state) is automatically transmitted to Sentry. In limited circumstances, your email address may be included in error reports related to authentication issues. You cannot opt out of crash reporting or analytics data collection while using the app, as this data is essential for maintaining app stability and quality. Neither Firebase Analytics nor Sentry data is used for advertising purposes.
  9. Push notifications. Piatto uses Expo's push notification service to deliver notifications to your device, such as order status updates. When you grant notification permissions, a push notification token and your device name are transmitted to Expo's servers. You can disable push notifications at any time through your device's system settings. Piatto does not use push notifications for advertising or marketing purposes.
  10. Voice search. Piatto offers an optional voice search feature that uses your device's native speech recognition service (provided by Apple on iOS or Google on Android). When you use voice search, audio is processed by your device's operating system speech recognition service to convert speech to text. Piatto does not record, store, or transmit audio data. The resulting text query is sent to Piatto's servers for processing, along with your location (if available) and accessibility profile context (if you have opted to share it), to provide personalised venue and menu search results. Search queries are not stored persistently.

13. Contact us

  1. If you have any questions about this Privacy Policy or the way we handle your personal information, please contact us at:

    Piatto

    PO Box 70, Crows Nest QLD 4355

    Email: privacy@piatto.com.au