Privacy

Privacy Policy

Last updated: July 31, 2026

Maitre G LLC operates Maître G ("Maître," "we," "us," or "our"). This policy explains how we collect, use, disclose, protect, retain, and delete personal information when you use our restaurant discovery, planning, and reservation-search services.

Information We Collect and Its Sources

• Account and contact information: name, email address, optional phone number, account identifiers, authentication and verification status, and records of your acceptance of our policies. We receive this information from you or from Apple or Google when you choose their sign-in services.
• Restaurant and reservation information: your library, saved lists, preferences, provider connections, synchronized reservations, and the provider links or metadata needed for a search or booking handoff. We receive this information from you and from services you choose to connect.
• Search, planning, and other content: search criteria and history, party size, dates and times, plans and messages, notes, tags, reminders, pasted text or links, and screenshots you choose to submit for restaurant-name extraction.
• Location and feature permissions: precise location when you grant permission for nearby results or a provider availability request. We request photo, notification, or calendar permission only when you choose the related feature. Calendar-event creation occurs on your device; notification delivery uses push-registration metadata.
• Device, usage, and diagnostic information: an app installation or device identifier, app version and build, device class, push-registration metadata, app-integrity outcomes, feature interactions, timestamps, status and failure categories, request timing, and bounded crash or performance information.

Operational telemetry is limited and redacted. It is prohibited from containing passwords, one-time codes, provider credentials, cookies, confirmation codes, full contact details, exact coordinates, private notes, screenshots, message bodies, or raw search text.

How We Use Information

• Create and secure your account and verify your identity.
• Connect services you select; maintain your restaurant library, preferences, plans, and reservations; and perform searches you start.
• Provide optional AI-assisted planning and restaurant-name extraction only after you allow the applicable feature.
• Provide nearby results, customer-requested reminders and notifications, support, data export, and account deletion.
• Prevent abuse, evaluate app integrity, troubleshoot failures, measure bounded product interactions, and improve service reliability.
• Comply with law and protect users, Maître, and the public.

We do not sell personal information, use advertising SDKs, or use personal information for cross-company tracking or targeted advertising.

How We Disclose Information

We disclose information only as reasonably needed for the purposes above:

• Service providers acting for Maître. We use services for cloud hosting and storage, AI-assisted processing through Amazon Bedrock (AWS), push delivery, and, when configured, crash and performance diagnostics. We minimize what each service receives and require information processed for Maître to receive protection at least consistent with this policy and applicable law. We do not authorize unrelated advertising or marketing uses of Maître data.
• Services you choose to connect or visit. Information is sent to a restaurant, mapping, identity, or reservation service when you direct Maître to connect an account, import content, check availability, or open a booking handoff.
• Legal, safety, and business purposes. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights or safety, investigate abuse, or complete a merger, financing, acquisition, or sale subject to appropriate confidentiality and notice requirements.

We do not sell, rent, or disclose SMS consent records or phone numbers for third-party marketing.

Connected Services and Booking Handoffs

Provider login pages and booking destinations are independent third-party surfaces. Resy, OpenTable, Tock, Beli, Infatuation, Google, Apple, and other services you choose may collect information directly under their own privacy policies and terms. Maître stores only the connection data needed for the features you request and deletes its copy when required by this policy. Disconnecting a service from Maître or deleting your Maître account does not delete your separate account with that service. References to these services do not claim their sponsorship, authorization, or endorsement of Maître.

Optional AI-Assisted Features

Before Maître sends personal information to third-party AI, the app identifies the information, destination, and purpose and asks for your explicit permission for that feature. AI-assisted planning sends the Plan or natural-language search message you choose to submit to Amazon Bedrock (AWS). For Plan, Maître also sends relevant saved-restaurant details, validated availability results, and derived restaurant-to-restaurant travel estimates so it can draft and refine a dining plan. AI screenshot extraction sends only the screenshots and optional import text you choose to submit to Amazon Bedrock so Maître can extract visible restaurant names. Images are optimized on your device before upload.

These features are optional. You may decline without losing core search or restaurant-library functionality, and you can allow or turn off each feature independently from Account. Turning a feature off prevents new content from being sent for that purpose; information already processed remains subject to the retention and deletion rules in this policy.

Security

We use safeguards designed for the sensitivity of the information, including encrypted network connections, operating-system secure storage for app credentials, encryption for sensitive provider credentials and private export files, restricted service access, redacted logs, and bounded retention. No system can guarantee absolute security.

Retention and Deletion

We generally retain account information and customer-created content while your account is active or as needed to provide the service. Provider and availability caches, app-integrity records, and other operational records use shorter, purpose-based schedules. Application and network logs are configured for 30-day retention. A completed data export is available for up to seven days, and each download link expires after five minutes.

Account deletion removes customer-owned information and direct account links from the live service. Limited policy-acceptance, privacy-request, security, or deletion receipts may be pseudonymized and retained when needed to demonstrate compliance, prevent abuse, or meet legal obligations. Shared restaurant catalog or availability facts may remain only when they no longer identify or link to you. Encrypted backups age out under our backup schedule; if a backup is restored, completed deletion requests must be reapplied before the restored data becomes customer-facing. If law requires us to preserve particular information, we restrict it from ordinary use and delete it when that obligation ends.

Your Choices and Consent

• You can decline or later revoke location, photo, notification, and calendar permissions in your device settings. Some related features will then be unavailable.
• You can edit supported account and preference information, disconnect connected services, remove library content, and manage reminders in the app.
• SMS consent is separate from other signup methods. You can reply STOP to opt out and HELP for help; message and data rates may apply.
• Where we rely on consent, you may withdraw it for future processing. Depending on where you live, you may also have rights to access, correct, or object to certain processing of your information.

Data Export and Account Deletion

Signed-in users can create a portable JSON export, monitor privacy request status, download or revoke a prepared export, and request account deletion from the app's Account screen. A fresh identity check is required for export and deletion. Security credentials are excluded from exports. Account deletion does not delete independent accounts or records held by services you chose to connect. Contact us if you cannot use the self-service controls.

SMS Verification

If you choose phone signup or sign-in, we use the provided phone number to send one-time verification codes. Message frequency varies. Message and data rates may apply. You can reply HELP for help and STOP to opt out of SMS messages.

Children

Maître is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it as appropriate.

Changes to This Policy

We may update this policy as the product, our practices, or legal requirements change. We will update the date above and provide additional notice or request renewed consent when required for a material change.

Contact

For privacy questions, rights requests, or support, contact Maitre G LLC through our support page at info@maitreg.app.