Privacy Policy

1. What we collect

When you create an account we collect your name, email address and a password, which we store only as a hash. You can add a phone number, a birthday, a profile photo, saved addresses with unit and courier notes, food preferences and saved cards.

When you use LocEx we collect your orders, reservations, tabs, reviews, favourites, points and referrals, meal plans, and the messages you send to the assistant or to our support team. Your device settings, such as theme and menu detail, are stored in your browser.

When you order as a guest from a table QR code, we keep the order and any receipt contact you give us.

If you allow location, your device shares where you are so we can show places near you. See section 4.

Restaurant owners also give us business details and an ID document (and, when they claim a listing, a business document such as a licence), covered in the Restaurant Agreement.

2. How we use it

We use your information to run your orders and reservations, take payment, show restaurants and offers near you, give you points and referral rewards, answer your questions, prevent fraud and abuse, and keep LocEx safe and working.

We share order details with the restaurant you order from, such as your first name, what you ordered, and your phone number or delivery address when the order needs it, and nothing more. We do not sell your personal information.

3. Your choices

You can allow or block location in your browser or device settings at any time. In Settings you can switch Order updates, Nearby offers and Deals and news on or off.

You can ask to see the personal information we hold about you, to correct it, or to have it deleted. Email support@locex.app from the address on your account and we will respond within 30 days. Some records, such as orders and payments, must be kept for the periods in section 6, so we may keep those even after we delete the rest.

You can withdraw your consent at any time by closing your account. This does not affect records we are required to keep.

4. Location

We use your location to show nearby places, distances and routes. It is sent with the request, for example a search for restaurants near you, only to work out what is close. We do not save your device location to your account.

Map pictures are loaded from a map tile service, which sees your internet address as it would for any website. Address search sends the text you type to an address lookup service, and route directions are worked out by a routing server.

5. Restaurants and partners

We use these service providers to run LocEx:

• Stripe, to take card payments.
• An AI routing service (OpenRouter) and the AI models behind it, to power the assistant, meal plans, Ask the menu and AI picks. Your messages and the order or venue details needed to answer them are sent to these services.
• CARTO for map tiles, OpenStreetMap Nominatim for address search, and an OpenStreetMap-based routing server for directions.
• An email delivery provider, to send receipts, password resets and notices about our documents.

Some of these providers are in the United States or other countries, so your information may be processed and stored outside Canada and may be available to authorities there under their laws. We share only what each provider needs for its job.

6. How long we keep data

• Orders and payment records: 7 years, to meet tax and accounting law.
• Account data, including saved addresses, points and reviews: while your account is open. You close your account by contacting support, and we delete or anonymize your account data within 30 days of that request, except records the law requires us to keep (orders and payment records, 7 years, as above).
• Support messages: deleted 2 years after they are sent.
• ID document images that restaurant owners upload: deleted within 90 days of a review decision, unless we need them to settle a dispute.
• Business documents that restaurant owners upload to claim a listing: deleted within 90 days of a review decision, unless we need them to settle a dispute.

When a period ends we delete the information or remove what identifies you.

7. Security

We protect your information with TLS for data in transit, hashed passwords, private storage for ID documents that only our review team can open, and access limited to the staff who need it to do their work. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner of Canada as the law requires.

8. Children

LocEx is not for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, email support@locex.app and we will delete it.

9. Contact us

Our Privacy Officer is responsible for how we handle personal information.

LocEx, Privacy Officer

Email: support@locex.app

If we do not resolve a concern, you can complain to the Office of the Privacy Commissioner of Canada.