Privacy policy

Order This · effective 23 October 2026 · العربية

Order This tells you what to order at restaurants in Dubai. People vote on dishes, share custom orders at chains (hacks) and decide together what a table orders. You can browse all of it without an account. This page explains what the app keeps, where, for how long, and how you delete it.

Who operates the app

Order This is operated by Barmajja for Information Technology Consultants Co. L.L.C, Dubai, United Arab Emirates. Privacy questions go to info@barmajja.com.

The app is in development and is not publicly released. This policy describes the app as it is built for release.

Browsing needs no account

Restaurants, picks and hacks load from our server. Your order, your language and appearance settings and the hacks you save stay on your phone. Without an account we keep nothing about you; our server records errors, not who visited.

Near me

If you tap Near me, the app asks for your approximate location and uses it on your phone to sort restaurants by distance. Your location is never sent to us. On Android the app asks for approximate location only.

Signing in, only to vote or post

You sign in only when you vote or post a hack, with Sign in with Apple (on iPhone) or with Google. We ask Apple and Google for an account number, not for your name or email address. With Google, the sign-in happens in your phone’s browser and our server completes it with a one-time code that only your phone can use.

For an account we keep: a random account number; the account number Apple or Google gives us for you; a public name, which starts as something like @diner1234 and which you can change; a colour for your avatar; and whether the account belongs to a member or one of our editors. Your session is kept in your phone’s secure storage (the iOS Keychain or Android Keystore) and lasts up to 180 days.

Votes

Your votes on dishes (“I’d order it again” or “Not this time”) and on hacks (would you order it again, and did it work at your branch) are kept with your account, so each person counts once and you can change your mind. Nobody else sees your individual votes. The app shows totals only, and only in the positive form: the share of people who would order something again, shown only when it is high, or otherwise the number who would. We do not record which branch you went to.

Posting a hack

When you post a hack we keep its name, its steps, the chain, its photo and your public name. Our editors check every hack before anyone else can see it, and may translate or correct it. Once approved it is public, with your public name.

Before uploading, the app crops, resizes and re-saves your photo on your phone, which leaves out the location and camera details stored inside the original. A photo that is uploaded but never posted is deleted within 7 days. A posted hack’s photo waits privately until the hack is reviewed, and is deleted if the hack is not published. Please post photos of food only, without people, faces or receipts.

Reporting and blocking

On any hack you can report a problem. We keep which hack, the reason you chose and your account, so a curator can review it and so one person counts once; the report is deleted once a curator has dealt with it. The person who posted the hack is not told who reported it.

You can also block the person who posted a hack, so you no longer see any of their hacks. We keep your list of blocked people with your account, without their account number, and they are not told. You can unblock them under You, and the list is deleted with your account.

Table votes

A table vote needs no account. Each person types a first name and picks what they want. Anyone with the table’s link or four-letter code can join and see the names and what people want; who chose “Not for me” is never shown. A table stops working after 24 hours and is then deleted automatically, usually within a few days.

In the app, your seat at a table is kept on your phone. On the web page for a table vote, your seat, the first name you typed and your language choice are kept in your browser’s local storage, so you can come back to the same seat.

Where it is kept

Our server runs on Amazon Web Services in its Frankfurt (EU) region: the database, the photo storage, and a delivery network for published photos. Server error logs are kept for 30 days. Database backups for recovery are kept for up to 35 days.

What we do not do

The app has no advertising, no analytics and no tracking across other apps or websites. We do not sell personal information or share it for advertising. The companies that handle it for us are Amazon Web Services (hosting), Apple and Google (sign-in), Expo (app updates) and Microsoft (support email).

When the app opens, it checks Expo’s servers for a small update, so fixes reach you without a new download. That check sends your phone’s IP address, the app version, the platform and a random number that identifies the installation, not you. See Expo’s privacy policy.

Children

Order This is not directed at children under 13, and accounts are not meant for them. If you think a child has signed in, write to us and we will delete the account.

If you contact us

If you email us we receive your address, your message and anything you attach, and we use them to answer and investigate. Support mail is handled in Microsoft 365. We keep support messages for 24 months, then delete them.

These pages

These pages are hosted on GitHub Pages, which may process IP addresses and technical request logs to serve and protect the site; see GitHub’s privacy statement. They load their typefaces from Google Fonts, so your browser connects to fonts.googleapis.com and fonts.gstatic.com; see Google Fonts and privacy. They contain no analytics script or advertising pixel. The table vote page also connects to our server, as described above.

Deleting your account, and your choices

• In the app: You → Delete account removes your account, your votes (and takes them out of the totals), your saved hacks, the people you blocked, the hacks you posted and their photos, and frees your public name. It takes effect at once; recovery backups expire within 35 days.
• By email: write to info@barmajja.com to see, correct or delete what we hold about you.
• On your phone: removing the app removes what it keeps on the phone. It does not delete your account; use Delete account for that.
• Providers: Apple, Google, GitHub and Microsoft describe their own handling in their policies. We cannot delete records they hold independently of us.

Changes to this policy

When the app’s data practices change, this page is updated first, with a new effective date and a note of what changed.

• 23 October 2026. First version.

Support and common questions · Order This help