Privacy policy

Last updated: 24 May 2026

quepedimos.es is a service to coordinate group orders at restaurants (breakfast, lunch, dinner or any meal). This page describes which data we process, for what purpose, and the rights that apply to you under Regulation (EU) 2016/679 (GDPR) and Spanish data protection law.

Data controller

The controller is the owner of the quepedimos.es domain. For any data-related matter, contact hola@quepedimos.es.

What data we process

  • The name or nickname you enter when joining a table. We don't ask for last names or email.
  • Food intolerances and dislikes you choose to declare (optional). They are used only to warn the group and the AI when placing the order.
  • Your votes and adjustments on the dishes of your table.
  • Strictly necessary technical data: functional session cookie (qp_commensals) and language cookie (qp.locale).
  • If you accept analytics cookies: aggregated usage events (tables created, votes cast, etc.) via PostHog. We never send names, allergies or free text.

Purpose and legal basis

We process data to provide the service (performance of the implicit contract when using the app) and, optionally, to measure aggregate usage and improve the app (consent). Without your consent, no analytics service is loaded.

Retention

Table data is kept while the table is active and a reasonable period after to resolve incidents (max. 90 days). Aggregated analytics events follow PostHog's policy and never contain direct personal identifiers.

Recipients

To run the service we use the following processors: Supabase (database and realtime, EU), Vercel (hosting, EU/US with standard contractual clauses), Anthropic (menu image processing and order evaluation), Google (restaurant search via Places, optional) and PostHog (analytics, EU, only with your consent). We do not sell or share data with third parties for commercial purposes.

Your rights

You can exercise rights of access, rectification, deletion, objection, restriction and portability by emailing hola@quepedimos.es. You also have the right to lodge a complaint with the Spanish DPA (www.aepd.es).

Cookies

We use strictly necessary cookies for the app to work (qp_commensals for your commensal session and qp.locale to remember your language). These don't require consent. PostHog analytics is only enabled if you accept it in the banner; you can change your decision at any time from the footer.