privacy policy
Last updated 22 October 2026
LocalBite helps people find offers at independent food and drink venues, and helps those venues run their offers. This policy explains what personal data we collect, why, who we share it with and the choices you have.
Who we are
LocalBite is run by Black Flame Digital Ltd, a company registered in England and Wales (company number 11861684), registered office 45 Sir Peter Blake Way, DA10 1HB, United Kingdom. We are the controller of the personal data described here, and we are registered with the Information Commissioner’s Office (ICO), registration number ZC228066.
Questions or requests: email support@localbite.uk.
If you use the LocalBite app
What we collect
- Your account. When you sign in with Apple or Google we receive your email address and, if you choose to share it, your name. With Apple’s “Hide My Email” we only see a private relay address. You can browse offers without an account.
- Your location, if you allow it. The app uses your phone’s location to show venues near you and how far away they are. It is sent with each search and is not stored by us. Your phone’s own maps service (from Apple or Google) turns it into the street name shown at the top of the app.
- Redemptions. When you redeem an offer we record which offer, at which venue, when, and whether staff confirmed it. This history appears in your wallet.
- Your phone. The app creates a random key for your phone, which we store only in scrambled (hashed) form, along with whether the phone is an iPhone or Android. Before a redemption, Apple’s DeviceCheck or Google Play Integrity tells us whether the request comes from the genuine LocalBite app on a real phone. We use this to stop people claiming one-per-person offers again and again.
- Saved spots you add to your favourites.
- Settings, such as miles or kilometres, which stay on your phone and are never sent to us.
What venues see
When you redeem an offer, the venue sees the offer, the time, your first name and the first letter of your surname (for example “Amelia H.”), and a reference code that lets them count repeat visits without knowing who you are. Venues never see your email address. If there’s a problem with a redemption, we may share more with the venue only where that’s needed to resolve it.
Maps
Maps in the app come from Mapbox. When you open the map, Mapbox receives the area being shown and may collect anonymous usage data about how the map performs. You can turn this off from the (i) button in the corner of the map. See Mapbox’s privacy policy.
If you run a venue on LocalBite
What we collect
- Your account: your email address and, if you give it, your name.
- Your business and venues: business name, venue details, addresses, opening hours, photos and offers. Venue details and offers are public once a venue is live.
- Your team: email addresses of people you invite, and the first names and PINs (stored scrambled) of staff who confirm redemptions.
- Scanner devices: the name you give each paired device and when it was last used.
- Billing: payments are handled by Stripe. We never see or store full card details; we keep your Stripe customer reference and your subscription status.
- Activity: a log of important actions, such as approvals, team changes and deletions, for security and support.
Our website
localbite.uk uses only the cookies it needs to work: keeping you signed in to the business dashboard, remembering which business you selected, and keeping a paired scanner device signed in. We don’t use advertising or analytics cookies, so we don’t ask for cookie consent.
Why we use your data
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Running your account, showing offers near you, redemptions, saved spots, venue listings and billing | Performing our contract with you |
| Device checks and per-phone limits, blocking abuse, security and the activity log | Our legitimate interest in keeping offers fair for venues and customers |
| Using your location | Our legitimate interest in showing nearby venues, only when you’ve allowed location on your phone |
| Service emails, such as sign-in links, invitations and venue approval | Performing our contract with you |
| Error reports, to find and fix problems | Our legitimate interest in keeping LocalBite working |
| Keeping invoices and billing records | Legal obligation (tax law) |
We don’t sell your data, and we don’t use it for advertising.
Who we share it with
We use these providers to run LocalBite. They act on our instructions and must keep your data secure.
- Supabase stores our database, sign-ins and photos, on servers in London.
- Vercel hosts our website.
- Resend sends our emails.
- Stripe handles payments from venues.
- Mapbox provides maps and address search.
- Sentry receives error reports when something goes wrong on our website or in the app: what failed, the page or screen, and the browser or phone model. We don’t send your name, email address or IP address, and we remove anything that could sign you in from the web addresses we send.
- Apple and Google provide sign-in, device checks and app distribution.
Some of these providers are based in, or use staff in, the United States. Where personal data leaves the UK, it’s protected by UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the ICO’s International Data Transfer Agreement.
We may also share data where the law requires it, or to protect people from fraud or harm.
How long we keep it
- Your account, saved spots and wallet: until you delete your account.
- Redemptions: when you delete your account, they are kept without your name or account, so venues’ statistics stay correct. The scrambled phone key is kept, so first-visit offers can’t be claimed again from the same phone with a new account.
- A venue’s details, offers, photos, staff and redemption history: until the business is deleted.
- Invoices and billing records: six years, as tax law requires.
- Technical logs and email delivery records: short periods, usually under 30 days.
Deleting your account
In the app, tap the profile button at the top of the home screen, then Delete account at the bottom. In the business dashboard, open Account from the menu with your name. If you signed in with Apple, we also tell Apple to stop sharing your details with LocalBite. You can also email us and we’ll do it for you.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a format you can take elsewhere. Email support@localbite.uk; we’ll answer within one month.
If you’re unhappy with how we’ve handled your data, please tell us first. You can also complain to the ICO at ico.org.uk or on 0303 123 1113.
Children
LocalBite isn’t meant for children. You need to be 16 or over to create an account, and 18 or over for offers on alcohol, where venues may ask for ID.
Changes to this policy
If we make important changes, we’ll tell you in the app or by email before they take effect. The date at the top shows when this policy last changed.