Your data

Privacy Policy

Version 1.0 — effective 19 June 2026. How Noodl collects, uses, and protects your information, and the choices you have. Written to be read.

1. The short version

Noodl learns your taste so it can tell you what to order and help you decide where to eat. To do that we keep your taste preferences, the places you visit, and the dishes you rate. We don't sell your personal information. Restaurants only ever see anonymous, aggregate insight — never your name, contact details, or identity. You can see or delete your data anytime.

2. What we collect

3. Why we use it (and our lawful basis)

We process your data on the basis of your consent (which you give when you create your profile) and our legitimate interest in running and improving Noodl. Specifically, we use it to:

4. What restaurants see

Restaurants on Noodl get aggregate, de-identified insight — how many diners they're matched with, which dishes are loved, broad taste trends. They do not receive your name, email, phone, or any way to identify you personally. We never hand a restaurant your contact details, and we never sell your personal data to anyone.

5. How long we keep it

We keep your data while your account is active. When you delete your account, your login and personal details are removed. Some dish ratings may be retained in a de-identified form (with no link back to you) so the recommendations stay accurate for everyone — they can no longer be tied to your identity.

6. Your rights — access & deletion

You're in control of your data:

What a full deletion removes, and what stays. Deleting your account removes your login (email and password), your name and profile photo, your Taste DNA and quiz answers, your saved location and food photos, your friends and community posts, and your notification tokens. Your dish ratings are kept in a de-identified form — stripped of any link back to you and no longer traceable to your identity — so the recommendations stay accurate for other diners. De-identified ratings are retained indefinitely because they are no longer personal data. If you'd rather ask us directly, email support@noodl.ae from the address on your account and we'll action the deletion for you.

7. Security

Passwords are stored only as salted hashes, never in plain text. Access to your data is protected by signed session tokens. We use reputable infrastructure providers and limit access to your information to what's needed to run the service.

8. Contact

Questions about your privacy, or want to exercise a data right we don't yet expose in the app? Email support@noodl.ae and we'll help. Noodl is a Dubai-based dining-intelligence service; we handle personal data in line with the UAE's Personal Data Protection Law (PDPL).

A plain-language summary, in good faith. This page explains, honestly, what we collect and why. It is a summary, not an exhaustive legal contract — as Noodl grows we'll keep it current and bump the version above when anything material changes. By creating a profile you agree to this policy.