Skip to content
Back to Lunchd

Privacy Policy

Last Updated: 14 March 2026

This Privacy Policy explains how APT53 Ltd., the owner and operator of Lunchd, collects, uses, stores, shares, and protects your personal data when you use our website, join our waitlist, use the Lunchd app, contact us, or participate in testing.

By using Lunchd, you acknowledge this Privacy Policy.

1. Who We Are

Lunchd is a lunch-based social platform owned and operated by APT53 Ltd., a company registered in the United Kingdom.

If you have any questions about this Privacy Policy or how we use your personal data, you can contact us at:

Email: Lorenzo@lunchd.uk

Website: https://lunchd.uk

For the purposes of UK data protection law, APT53 Ltd. is the controller of your personal data.

2. What Data We Collect

a. Waitlist Signups

If you join our waitlist, we may collect:

  • your email address;
  • the date and time you signed up; and
  • any preferences or permissions you choose to give us.

b. Account and Identity Data

If you create a Lunchd account, we may collect:

  • your email address;
  • your login credentials or authentication identifiers;
  • your name or display name; and
  • account settings and status information.

We do not store passwords in plain text.

c. Profile Data

To provide the Lunchd service, we may collect profile information you choose to add, including:

  • gender;
  • age or age range;
  • occupation or industry;
  • interests;
  • lunch availability and time preferences; and
  • your profile photo.

d. Lunch, Group, and Social Activity Data

When you use the app, we may collect and store information about your activity on Lunchd, including:

  • lunches and groups you create, join, leave, or cancel;
  • group membership and participation history;
  • chat messages sent within Lunchd groups;
  • attendance confirmations and lunch-related responses;
  • feedback, ratings, reports, or support requests you submit; and
  • timestamps and related activity records needed to operate the service.

e. Location Data

If you allow location access, we may collect approximate or coarse location data so we can:

  • show nearby lunches or groups;
  • support location-based discovery and matching;
  • estimate walking distance or travel time to lunch spots; and
  • improve the relevance of results shown to you.

We do not use your location data for unrelated advertising.

f. Device and Usage Data

We may collect technical and usage information about how you use Lunchd, such as:

  • device or app identifiers;
  • platform and operating system;
  • app version;
  • timestamps of account and app activity;
  • notification preference status;
  • event and activity logs; and
  • diagnostic, security, and reliability information.

g. If You Contact Us

If you contact us by email or through support channels, we may collect:

  • your email address;
  • the contents of your message;
  • any attachments you send us; and
  • records of our correspondence with you.

3. How We Collect Your Data

We collect personal data in the following ways:

  • directly from you when you join the waitlist, create an account, complete your profile, upload a photo, join or create lunches, send messages, submit feedback, or contact us;
  • automatically when you use the website or app, including through app events, logs, and device information;
  • from your device when you grant permissions such as location or notifications; and
  • from service providers that support the delivery of our services, such as hosting, storage, email, maps, and notification infrastructure.

4. Why We Use Your Data

We use personal data to:

  • operate the Lunchd website, waitlist, and app;
  • create and manage your account;
  • let you create, discover, join, and manage lunches and groups;
  • enable profile features, including profile photos;
  • enable in-app messaging and lunch-related activity updates;
  • send transactional messages, confirmations, reminders, and service notifications;
  • provide location-based discovery, matching, and distance estimates;
  • respond to support requests, feedback, and reports;
  • maintain the safety, integrity, moderation, and reliability of the service;
  • monitor performance, troubleshoot issues, and improve Lunchd;
  • comply with legal obligations and enforce our terms; and
  • communicate with people on the waitlist or users who have asked to receive updates.

5. Legal Bases Under UK GDPR

We rely on the following lawful bases to process your personal data:

a. Performance of a Contract

We process personal data where necessary to provide the Lunchd service you request, including to:

  • create and manage your account;
  • operate lunches, groups, profiles, and chat;
  • provide requested reminders and service communications; and
  • deliver core app functionality.

b. Legitimate Interests

We process personal data where necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms. These interests include:

  • running, securing, and improving Lunchd;
  • preventing misuse, fraud, spam, and abuse;
  • maintaining service quality, moderation, and reliability;
  • understanding how the product is used so we can improve it; and
  • handling support, complaints, and operational issues.

c. Consent

We rely on consent where required, including:

  • waitlist signups and any optional update communications;
  • optional device permissions such as notifications or location access, where required; and
  • any other optional processing that we specifically ask your permission for.

You can withdraw consent at any time, although this will not affect processing already carried out before withdrawal.

d. Legal Obligation

We may process personal data where necessary to comply with legal or regulatory obligations.

6. Location Services and Notifications

Lunchd may request access to certain device permissions in order to provide app features.

Location

If you allow location access, we use approximate or coarse location information to:

  • show nearby lunches and lunch spots;
  • improve matching and discovery;
  • estimate distance and travel time; and
  • support location-based features within the app.

You can turn off location access in your device settings, but some Lunchd features may then work less effectively or not work at all.

Notifications

If you allow notifications, we may send you app notifications about:

  • lunch or group activity;
  • people joining or leaving your group;
  • reminders related to upcoming lunches;
  • chat and activity updates; and
  • important account or service notices.

You can turn notifications off in your device settings, but you may then miss time-sensitive updates.

7. Who We Share Data With

We do not sell your personal data.

We may share personal data with service providers and processors that help us run Lunchd, including:

  • Supabase, for waitlist-related database infrastructure;
  • Resend, for waitlist and transactional email delivery;
  • Amazon Web Services (AWS), for app hosting, infrastructure, and storage;
  • AWS storage services for user-uploaded profile photos and related media;
  • Mapbox, for location, maps, and related discovery features; and
  • Apple notification delivery services, to deliver push notifications to your device.

Where third-party service providers process personal data on our behalf, we require them to protect it using appropriate confidentiality, security, and data protection measures, and to handle it in a manner consistent with this Privacy Policy and applicable law.

We may also share personal data:

  • with professional advisers where necessary;
  • with law enforcement, regulators, courts, or public authorities where we are legally required to do so or where necessary to protect our rights or users; and
  • in connection with a corporate transaction such as an investment, merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.

8. International Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place as required by UK data protection law. Depending on the circumstances, this may include:

  • transfer to a country recognised as providing an adequate level of protection; or
  • contractual safeguards such as standard contractual clauses or other lawful transfer mechanisms.

You can contact us if you would like more information about the safeguards we use for international transfers.

9. How We Store and Protect Data

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

These measures include, where appropriate:

  • cloud infrastructure and storage security controls;
  • access controls and limited internal access to personal data;
  • encryption in transit;
  • secure credential and secret management;
  • logging and monitoring for security and reliability; and
  • password protection and authentication controls.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your device, login credentials, and account access secure.

10. How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

In general:

  • waitlist data is kept until you unsubscribe, ask us to remove it, or it is no longer needed for the waitlist and launch process;
  • account, profile, lunch, and participation data is kept while your account is active; and
  • support and operational records are kept only for as long as necessary for legitimate business, security, and legal purposes.

Where possible, we will delete or anonymise personal data when we no longer need it.

11. Your Rights and Account Deletion

Under UK data protection law, you may have the right to:

  • request access to the personal data we hold about you;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • object to certain processing;
  • request restriction of processing;
  • request portability of data where applicable;
  • withdraw consent where we rely on consent; and
  • complain to the Information Commissioner's Office (ICO).

If you want to exercise any of your rights, contact us at Lorenzo@lunchd.uk.

If you delete your Lunchd account in-app, we delete your account and associated personal data, including your profile information, profile photo, chats, feedback, and lunch activity data.

You can also contact us by email if you need help with a data protection request.

You can complain to the ICO if you believe your data protection rights have been infringed. Information about the ICO is available at https://ico.org.uk.

12. Cookies and Website Tracking

We do not currently use non-essential cookies or similar web tracking technologies on the public Lunchd website.

If this changes, we will update this Privacy Policy and request consent where required by law.

13. Children

Lunchd is intended only for people aged 18 and over.

We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, data practices, legal obligations, or operational requirements.

When we do, we will update the "Last Updated" date above. Where required, we will also provide additional notice.

15. Contact

APT53 Ltd.

Email: Lorenzo@lunchd.uk

Website: https://lunchd.uk