Your data at DinnerJump
Here you can read what data DinnerJump uses, why it is needed and how long we keep it.
Updated on 9 October 2026.
Your account and participation
We use your name, email address, language preference and duo details to provide your account, registration and participation. The organizer can see information needed for the event. Your address and location are used for table assignments and routes. Tablemates receive names and the host address according to the reveal schedule.
Addresses and routes
Host addresses appear according to the reveal schedule. For a completed or cancelled event, host addresses and coordinates are erased after 90 days. The last table overview with names remains until your next confirmed participation or the end of the account retention period.
Payments and event messages
Stripe processes payments. DinnerJump keeps payment references, amounts, and payment and refund statuses. We use your email for sign-in links, invitations, payment requests and event information. Unsubscribing from marketing does not stop these necessary messages.
Photos
You choose whether to take a photo and where to share it. After opening the share menu, DinnerJump may privately store the original photo with your event. You can delete stored photos in the app. DinnerJump does not automatically use your photo for promotion. Photos you keep on your device or share with another app are outside DinnerJump’s deletion process.
Conversations and notifications
Only you and the organizer can read your conversation through the app. A callback number is optional. Notifications indicate a new message without its content or phone number. If you report a message, DinnerJump receives that message and its sender after your confirmation for review. DinnerJump may hide reported content. Blocking stops new messages between both accounts.
News, inspiration and tips
Marketing emails require your own permission. The checkbox is off by default. We record your choice, when you made it and the consent wording. Change your preference through Email preference or unsubscribe using the link in each marketing email. Unsubscribing stops new marketing emails. Superseded consent evidence is removed 90 days after replacement or withdrawal; your current preference is preserved. Your choice applies only to you.
Why we use data
We use information for sign-in, participation, assignments, routes, payments and event messages to perform our agreement with you. For security, support and reviewing reported messages, we rely on our legitimate interest in a safe and reliable service and use as little data as possible. Required financial records are retained under the law. Marketing requires separate consent.
Cookies and technical information
The website uses cookies for your sign-in session and language choice. Google Maps processes locations during address searches and map display. Our service providers process technical request and error information for delivery, operation and security. The Android notification service may process installation information before you allow notifications. DinnerJump does not add advertising tracking or a general analytics feature to the app.
Services and security
We use Supabase for accounts, the database and private photos; Vercel for the website; Resend for event and account emails; Google Workspace for support email; Backblaze B2 for encrypted photo recovery copies; Stripe for payments; and Expo, Apple and Google for app notifications. Earlier support email may remain with Cloud86 or in our previous Gmail mailbox during the transition. The primary Live database is in Ireland; Backblaze storage is in its European region. This does not mean that all provider data is processed exclusively in Europe. Where required, applicable processing agreements and transfer safeguards are used. Google Maps processes addresses and locations for address searches, maps and routes. When you open a route or photo in another app, that service’s privacy rules also apply. Access to DinnerJump data is restricted and transmission uses HTTPS. Conversations are not end-to-end encrypted.
Deletion and recovery
We keep protected recovery copies so data can be restored after an incident. Photo copies are encrypted before being sent to separate storage. Deleted data is not simply restored: we check recent deletions and photo permissions before recovery. A limited record of deletion requests helps prevent a deleted account from returning after recovery. It contains no email address, message content or photo.
Deletion and your rights
Delete your photos in the app and request account deletion through the menu or website. Organizers may choose deletion after an ongoing event; earlier deletion remains available on request and is handled safely. Information required for a legal obligation or a specific open case is retained separately as long as needed. You can request access, correction, deletion, portability, restriction or objection where applicable. We respond within one calendar month and explain any necessary extension within that month. We verify identity through your existing account and do not routinely ask for an identity document. You can complain to the Dutch Data Protection Authority.
How long do we keep data?
- Private photos
- 12 calendar months from the event date. Earlier deletion in the app or through account deletion.
- Conversations, callback numbers and reported messages
- 90 days from the event date for a completed or cancelled event.
- Accounts and minimal participation history
- 2 years after the latest past participation, or account creation if there was none. Notice 30 days beforehand. New or ongoing participation preserves necessary information. Deletion is handled safely through our operator queue.
- Past host addresses, coordinates and invitation copies
- 90 days after the event date. Names in the last table overview remain until a new confirmed participation or the end of the account retention period.
- Support cases and payment/delivery error content
- 90 days after case closure; necessary financial records and specific disputes are assessed separately.
- Marketing preference and consent
- Your current email preference and evidence of your current consent are kept with your account. Superseded consent evidence is removed 90 days after replacement or withdrawal. Your current unsubscribe preference remains while your account exists, so cleanup never enables new marketing. Account deletion erases your preference and consent history. Necessary information for a specific open case may be kept separately for longer.
- Required financial records
- 7 years under applicable accounting rules; excluding photos, chat content and full guest profiles.
- Limited evidence of account deletion
- A request ID, protected account reference and timestamps are retained while a recovery copy could still reintroduce the deleted data. We remove this evidence only after the relevant recovery copies have expired or been safely erased.
After a successful new copy, the separate photo backup keeps at most seven complete daily recovery points. Earlier points may remain longer during an outage. Service providers may also retain their own technical copies or legally required information. Deletion at DinnerJump therefore does not mean that every provider copy immediately disappears. The photo backup does not change the twelve-calendar-month retention period for your regular private photos.
Who is responsible for your data?
Zinger Company, trading as Dinner Jump (DinnerJump)
John de Visserhof 4 1624 PS Hoorn The Netherlands
Dutch Chamber of Commerce (KVK): 66518091
Ask about your data