Privacy Policy

Waitinger (“Waitinger”, “we”, “our”, or “us”) operates the Waitinger gamified restaurant waitlist management, digital menu ordering, table booking, and arcade entertainment platform accessible via web applications, QR codes, partner dashboards, and mobile applications.

This Privacy Policy outlines how Waitinger collects, stores, processes, discloses, and protects your information in compliance with applicable information technology and data protection standards, including the Digital Personal Data Protection Act (DPDPA) and the Information Technology Act, 2000 of India.

By accessing Waitinger, dining at participating restaurants via our QR desks, playing arcade games, or utilizing our kitchen consoles, you agree to the collection and use of information in accordance with this Policy.

This covers the Waitinger website and the Waitinger customer app for iPhone and Android. What we collect depends on what you use.

• Account details: your username, email address and password (stored only as a salted hash, never in readable form), and a phone number if you give one. We email a verification code when you sign up.
• Orders and bookings: the restaurant, items, table, dining mode (dine-in, pickup or delivery), amounts, order status and history, delivery addresses you save or type, reviews and ratings you write, and venue booking requests (date, time, number of guests, occasion and notes).
• Location: if you allow it, your device location while you are using the app, to find nearby restaurants, fill in a delivery address and show your delivery on a map. You can switch it off in your phone settings and type an address instead.
• Camera and photos: the camera is used only to scan restaurant and table QR codes and, if you choose, to take a profile photo. Photos are read only when you pick one (for example a profile picture or a QR image). We do not access your other photos.
• Rewards and games: your coin balance, vouchers, game plays and results, the restaurant you earned them at, and lucky wheel spins. We track play time and results so rewards are fair and to detect cheating.
• Wallet and payments: your wallet balance and its history (for example refunds of online payments) and the status of payments you make. Card, UPI and bank details are entered with our payment provider and are not stored by us.
• Messages: what you type to the in-app assistant, and feedback or support messages you send us.
• Device and technical data: device type and platform, push notification token, app version, and basic error and request logs. On the website this includes the browser storage described in section 7.

We use your information only for these purposes:

• To create and secure your account and sign you in.
• To take and deliver your orders, let restaurants prepare them, and show you live order and delivery status.
• To process payments, refunds and wallet credits.
• To run games, coins, vouchers and the lucky wheel, and to prevent misuse.
• To send notifications about your orders, bookings and rewards.
• To answer support requests and questions you ask the assistant.
• To keep the service safe, fix bugs and meet legal and accounting duties.

We do not sell your personal information and we do not use it for advertising by third parties. We do not track you across other companies’ apps or websites.

We do not sell, rent or trade your personal information. We share it only as follows.

• Restaurants and riders: the restaurant you order from sees your name, order, table or delivery address and phone number as needed to prepare and deliver it. A delivery rider sees your delivery address, your order and, during delivery, your drop-off location.
• Razorpay processes online payments.
• Google (Firebase and Google Maps) deliver push notifications and show maps.
• Cloudinary stores profile photos you upload.
• AI model providers (for example Google Gemini or Groq) receive the questions you type to the assistant so it can answer. Please do not put sensitive personal details in assistant messages.
• Email delivery and cloud hosting providers send verification codes and store our data on our behalf.
• Legal reasons: we may disclose information when the law requires it, or to protect our users, our rights or the safety of others.

Waitinger servers do not collect, process, or store raw card numbers, CVVs, expiry dates, or banking PINs. When paying at the table via cash, POS terminal, or counter QR, payment records are reconciled directly between the restaurant and the guest.

Waitinger coins and discount vouchers are virtual rewards for use at restaurants on Waitinger. They have no cash value, cannot be bought, withdrawn or transferred, and are earned only by playing games while an order is open.

The lucky wheel spends coins for a chance at a prize such as a discount, a free item or bonus coins. The chance of each prize is shown in the app before you spin. Automated checks monitor play time and results, and accounts that cheat or use bots may lose coins or game access.

Waitinger uses standard browser storage mechanisms (including localStorage, sessionStorage, and essential cookies) to deliver a seamless web experience:

You can clear your local storage and cookies at any time via your browser settings; however, doing so may log you out or require you to reselect your dining table.

We keep your account and order history while your account is active. When you delete your account (section 9), your personal details are erased straight away. Order, payment and booking records are kept without your name for as long as accounting, tax and dispute rules require. Backups are overwritten on their normal cycle.

Data is sent over encrypted connections, passwords are hashed, and access to our systems is limited. No system is perfectly secure, so please keep your password private.

Depending on your jurisdiction and under applicable data protection laws, you possess the following rights regarding your personal information:

While children and families dine at our partner venues and frequently enjoy our arcade mini-games during waiting times, our service is designed for users who have reached the age of majority (18+ in India) or who use the platform under the direct supervision of a parent or legal guardian.

We do not knowingly collect or solicit personal identifiable information from children under 13 without parental consent. If you believe a minor has registered an account without guardian permission, please contact us immediately to have the information removed.

If you have any questions, grievances, or feedback regarding this Privacy Policy or wish to exercise your data rights, our dedicated Grievance & Privacy Officer is here to assist you:

We commit to acknowledging your grievance within 48 hours and resolving data-related inquiries within 30 business days in compliance with statutory timelines.