Who controls your data
ShareMyFood, available at sharemy.food, is the controller of personal data processed for this community platform. Privacy requests can be sent to [email protected].
This policy is designed around the UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data (the “UAE PDPL”).
Data we collect
- Account data: full name, UAE mobile number, authentication identifiers, and—if selected—Google account identifiers supplied through Google and Supabase Authentication.
- Public plan data: first name, venue name, selected emirate and area, meal or coffee type, date, time, invitation message, request status, and posting time.
- Matching and safety data: confirmed joins, reports, user blocks, notification records, and records of accepted legal-policy versions.
- Optional location data: if browser permission is granted while posting, approximate coordinates and accuracy information. Coordinates are rounded before storage and are not placed in public timeline responses. A rounded location decision and detected emirate may also be kept in your browser’s local storage so ShareMyFood does not repeatedly request location access; clearing site data removes this local copy.
- Device and service data: session cookies, security logs, browser push-subscription endpoint and encryption keys, and technical records needed to operate, secure, and diagnose the service.
What is public and what is private
Public: plan content and the creator’s first name can be viewed without signing in. Do not put a phone number, home address, financial information, or other sensitive information in a venue name or invitation message.
Matched participants only: when one eligible user accepts an open plan, the creator and confirmed companion receive each other’s full name and mobile number for coordination.
Not public: private-profile phone records, optional posting coordinates, reports, blocks, push-subscription credentials, and legal-acceptance records are protected by database permissions and narrow server-side functions.
Why we process data
- To create and secure accounts, publish requests, perform one-person matching, and reveal matched contact details as requested by the users.
- To provide browser alerts where permission has been granted.
- To prevent abuse, enforce blocks, receive reports, investigate security events, and protect legal rights.
- To comply with applicable UAE law and lawful requests from competent authorities.
Depending on the activity, processing is based on your clear consent, the steps needed to provide the requested service, legal obligations, or legitimate security and legal interests permitted by applicable law.
Who receives data
- The confirmed participant in your match receives the contact information described above.
- Supabase provides database, authentication, and related backend services.
- Google processes information when Google sign-in is selected.
- Hosting, browser-push, security, and technical service providers process only information needed for their functions.
- Competent authorities or professional advisers may receive information where required by law or reasonably necessary to establish, exercise, or defend legal rights.
Some providers may process data outside the UAE. Where cross-border processing occurs, ShareMyFood will use the protections required by the UAE PDPL and applicable regulations.
Retention and security
Personal data is kept only while needed for the purposes described here, account operation, safety records, dispute handling, and legal obligations. A deletion request may not cover records that must be retained for legal claims, investigations, security, or other lawful requirements.
ShareMyFood uses access controls, row-level database security, restricted functions, and separation of public profiles from private phone records. No internet or storage system is completely secure, so absolute security cannot be promised.
Your choices and rights
- Correct your public profile information.
- Deny or revoke browser location and notification permissions.
- Request information about processing, access, correction, portability where applicable, restriction, objection, or erasure, subject to lawful exceptions.
- Withdraw consent where processing relies on consent. Withdrawal does not make earlier lawful processing unlawful and may prevent use of features that need the data.
- Complain to the UAE Data Office or another competent authority.
Send a request from the mobile number associated with the account to [email protected]. Identity verification may be required before private data is disclosed or changed.
Children, changes, and official framework
ShareMyFood is intended only for adults aged 18 or older. The service is not knowingly offered to children.
Material policy changes will be dated and, where required, presented for renewed acceptance. The current policy will remain available on this page.
Official references: UAE Personal Data Protection Law and the UAE Government data-protection overview.