Privacy policy

Last updated 23 October 2026

Serendine lets guests in a venue say hello to other tables, ask staff for service and see the menu. This policy explains what personal data we collect, why, who it is shared with, how long we keep it and the choices you have. Serendine is run from Dubai, United Arab Emirates ("Serendine", "we"). If you have any question about your data, email us at serendiners@gmail.com.

The short version

• Nobody in the room can see you until you switch on "Open to chat".
• Your messages are end-to-end encrypted on your phone. We cannot read them, and nor can the venue.
• Your table number is only shown to another guest if you both agree.
• Chats are deleted when you leave, unless you and the other person both choose to keep in touch.
• The venue you check in at sees your name, contact details, age group and sex, and when and at which table you visited and which Serendine features you used. It never sees your messages or who you talk to.
• The venue may only send you offers and marketing if you tick the box to receive them, and you can untick it any time.

What we collect

• Account details from the sign-in you choose (Google, email link, phone number, or Telegram): your name, email address or mobile number, profile picture where the provider supplies one, and a unique account ID. We never receive your password.
• Your saved details, asked once when you first sign in: your name, email address, mobile number, date of birth and sex. They save you entering them at every venue. They are never shown to other guests. Your date of birth confirms you are over 18; venues only ever see your age group, and your birthday (day and month, not the year) if you agreed to offers.
• Sign-in codes: if you sign in with your mobile number, it is used to send your code through our messaging provider, by WhatsApp or text.
• Optional details you add: whether you identify as male, female or prefer not to say, and an optional selfie, shown only to other guests open to chat at the same venue and deleted when you leave.
• Ratings and comments you give after a visit. They go to that venue's managers with your name and table.
• Loyalty: at venues that run a loyalty scheme, your visits there and the stamps staff add (for example, one per coffee), and the rewards you collect.
• Notification details: if you turn notifications on, the address your browser or Telegram gives us for sending them.
• Visit details: the venue and table you scanned, the name or alias you enter, what you're there for (friendly chat, networking or dating), whether you are open to chat, and when you arrived and left.
• Private messages: stored only in encrypted form. The keys to read them are created and kept on your device.
• Photos and videos: ones you send in a private chat are encrypted on your phone before upload, so only you and the person you sent them to can open them; they are deleted after 7 days. Ones you post to a group chat are checked by the venue's staff before anyone else sees them, and deleted the next day. Photos are resized on your phone, which also removes hidden details such as where they were taken. If you report someone, the photos in your recent messages are sent with the report.
• Plans for a night out: if you plan one, the venue sees your name, email, the date, how many people and your note. Friends who say they're in show to the rest of the group by the name they choose; the venue sees how many are coming. Anyone with the invite link can see the plan's title, venue and time.
• Orders from the table: what your table ordered, kept with the venue's records of your visit.
• Neighbourhood rooms ("Chat nearby"): the neighbourhood you join (for example Dubai Marina), your screen name there and the messages you post. If you use "Use my location", your phone works out the neighbourhood itself: your exact location never leaves your phone and is never stored or shown to anyone. Room messages are not encrypted; people in your neighbourhood and the ones next to it can read them, and they disappear after 24 hours (removed from our systems within 2 days). Moderators (Serendine, and managers of venues in that neighbourhood) can hide messages, and reported messages are kept with the report.
• Group chat messages: messages you post to a venue's group chat are not encrypted. Everyone open to chat at that venue can read them, and they are deleted after the night (within 12 hours).
• Service requests such as "bring the bill", with your table number, sent to the venue's staff.
• Marketing consent: whether you agreed to hear from the venue, and when.
• Safety records: people you block, and reports you make, including any messages you choose to include in a report.
• Technical data needed to run the service securely, such as sign-in cookies and basic server logs.

Why we use it

• To provide the service you ask for: showing you who is open to chat, delivering messages and passing your requests to staff.
• To keep people safe: enforcing blocks, reviewing reports and removing people who break the house rules.
• To give the venue you visit a record of your visit (your name, contact details, date, time, table and how long you stayed), so it can look after returning guests, run its loyalty scheme, follow up on your visit and understand how its guests use Serendine.
• To let the venue send you offers and marketing, only where you have given consent.
• To meet legal obligations.

We do not sell your personal data, and we do not use your messages for advertising. We cannot read your private messages.

Seren, the AI host

Some venues turn on Seren, an AI host that posts in the venue's group chat when it goes quiet and replies when someone mentions it. Seren is always labelled as AI. To write its messages, the most recent group chat messages (up to 12 from the last two hours, with the names people chose to show) and the venue's current offer and announcements are sent to our AI provider, Anthropic. Seren never sees private chats, photos, email addresses or any account details. Anthropic processes this only to provide the service to us and does not use it to train its models. If you don't want your words passed to Seren, don't post in the group chat of a venue that uses it.

Information we receive from Google

If you sign in with Google, Google shares your name, email address and profile picture with us, and nothing else. We do not ask for access to your Gmail, contacts, calendar, Drive or any other Google data. We use this information only to create and secure your Serendine account, to show the venue you visit who checked in, and to contact you about your account. We do not sell it, use it for advertising, or transfer it to anyone except the service providers listed below who help us run Serendine, and the venue you check in at as described in this policy. Serendine's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Serendine's access at any time in your Google Account under Security › Third-party apps and services, and ask us to delete your data as described below.

Who we share it with

• The venue you check in at, as described in the next section.
• Other guests, only what you choose to show: your name or alias, what you're there for, gender if you chose one, and your selfie, and only while you are open to chat.
• Service providers who run the service for us: Supabase (database and sign-in), Vercel (website hosting), Resend (email delivery), Anthropic (AI for Seren, the group chat host, where a venue turns it on), Google, Apple and Telegram (sign-in and notifications) and browser push services. They may only use it to provide their service to us.
• Authorities, where the law requires it.

What the venue sees

Venue staff see service requests with table numbers, the name or alias and table of guests checked in (to add loyalty stamps and hand over rewards), and who opted in to offers so they can redeem the welcome offer. Venue managers see a guest list and reports covering everyone who checked in there: your name, email address, mobile number, age group, sex, the name or alias you used, the dates and times of your visits and how long you stayed, which table you sat at, your ratings, your loyalty progress, whether you agreed to receive offers, and which Serendine features you used (for example calling staff, ordering, sending a drink or chatting with another table). They see your birthday (day and month) only if you agreed to offers, and never your full date of birth. They can download this and keep private notes about returning guests. Venues never see your messages, who you talk to, what you are there for (friendly chat, networking or dating) or your photo.

How long we keep it

• Chats are deleted when either of you leaves, unless you both chose "Keep in touch". Kept chats are deleted when either of you removes the connection or deletes their account.
• Visit and service-request records are kept for 12 months for safety and service reporting, then deleted or anonymised.
• Marketing consent is kept until you withdraw it, plus a record of the consent as required by law.
• Selfies are deleted when your visit ends. Your account details are kept until you ask us to delete your account.
• Reports and blocks are kept for as long as needed to keep the community safe, and at most 24 months after the account concerned is closed.

Where your data is stored

Our database is hosted by Supabase in Singapore, and the website by Vercel. These providers process data for us under contract. Because this involves transfer outside the UAE, we protect it with the contractual safeguards that UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data requires. All data is encrypted in transit, and messages between guests are end-to-end encrypted.

Your choices and rights

• Stay hidden: simply leave "Open to chat" switched off.
• Block or report anyone from inside a chat.
• Withdraw marketing consent at any time with the unsubscribe link in any venue email, or by contacting the venue or us.
• Ask to access, correct or delete your data by emailing serendiners@gmail.com. We will respond within 30 days.
• Delete your account and the data linked to it by emailing serendiners@gmail.com from the address you signed in with.

Age

Serendine is only for people aged 18 and over.

Changes

If we change this policy in a meaningful way, we will tell you in the app before the change applies.