Privacy Policy

Main Line Café ("Main Line", "we", "us") is run by Main Line Provisions Ltd, a company registered in England & Wales (company no. 17098435), registered office 3rd Floor, 86-90 Paul Street, London EC2A 4NE. The café is at Unit 1, Sandown Road, Watford WD24 7UB. This policy covers the Main Line app for iPhone, iPad, Apple Watch and Mac, and the website mainlineprovisions.co.uk. We are the data controller for the personal data described here. Contact us at hello@mainlineprovisions.co.uk.

• We collect what we need to take your order, run your rewards and keep you safe around allergens. Nothing more.
• We never see your full card details. Card and Apple Pay payments are handled by Stripe.
• Location, step counting, the camera, notifications and the AI assistant are all off until you choose to use them.
• We do not sell your data or use it for advertising tracking.
• You can delete your account yourself, in the app or on the website, at any time.

• Your account: name, email address, and optionally a phone number and birthday (for a birthday treat). If you use Sign in with Apple, Apple gives us your name and either your email or a private relay address. Passwords are held by our database provider as a secure hash; we cannot read them.
• Orders and payments: what you order, when, how you paid, and your order number. Card and Apple Pay payments go straight to Stripe; we receive only a payment reference and whether it succeeded.
• Wallet and rewards: your wallet balance and top-ups, MILES, stamps, member code, drops you claim, referral codes, and household membership if you join one.
• Allergens and dietary preferences: the allergens you ask us to warn you about and any dietary preferences, so the menu can flag items. Allergen information can reveal health details, so we only store it because you give it to us for this purpose.
• Location (optional): only when you tap "On my way" or share your arrival time. We use your precise location while that order is active, to estimate when you'll arrive and let the kitchen time your food, and store the last position with that order. We do not track you in the background.
• Step count (optional): if you use the "Walk it in" reward and allow it, the app reads today's step count from your iPhone's motion sensors (Motion & Fitness), or from Apple Health in older versions of the app. We store the daily step total to work out your reward. We read nothing else and never write to Apple Health. Step data is never used for advertising.
• Camera (optional): used to scan member QR codes at the hatch and to show the augmented-reality game. Images are processed on your device and are never recorded or sent to us.
• Notifications (optional): if you allow them, a device token so we can tell you when your order is ready and, if you agree, about offers.
• Apple Watch and widgets: your watch and widgets show a copy of your order status, MILES and member card sent from your iPhone. They don't have a separate account and don't contact us directly.
• Games: scores you choose to post go to Apple's Game Center under your Game Center account. We do not receive your Game Center identity.
• AI assistant (optional): if you turn on "Remember me", the nickname you choose, your allergens, dietary preferences, the items you order most and notes you ask it to remember are used to suggest something you'll like. You can turn it off at any time, which deletes those notes.
• Cakes, catering, table bookings and job or supplier applications: the contact details and information you include in the form.
• Newsletter and marketing: your email address and your marketing choice.
• Website: essential cookies, and analytics or marketing cookies only if you accept them (see Cookies). Our servers also see your IP address for security, bot protection and rate limiting.

If you work with us, we also keep your shift clock-in and clock-out times, pay rate, the handbook rules you have confirmed (our training record), and the food-safety records you complete, such as temperature checks, cleaning and incident reports, with your name and the time. Suppliers' contact details and purchase orders are kept to run the supply relationship.

• Contract: to run your account, take and prepare orders, take payment, and run your wallet and rewards.
• Consent: for location, step counting, notifications, allergen and dietary preferences, the AI assistant, marketing and non-essential cookies. You can withdraw consent at any time in the app, in your device settings, or by emailing us.
• Legal obligation: to keep financial records, payroll and working-time records, and food-safety records.
• Legitimate interests: to keep the service secure, prevent fraud and abuse, and understand overall, aggregated use so we can improve it.

We do not sell your data. We share it only with service providers that run the service on our behalf, under data-protection terms:

• Supabase (database and sign-in) and Vercel (website and app server).
• Stripe (card and Apple Pay payments).
• Apple (Apple Pay, Sign in with Apple, push notifications and Game Center, under Apple's own privacy policy).
• Google Firebase Cloud Messaging (notifications on the website and Android).
• Resend (emails such as receipts and password resets).
• Cloudflare (bot protection on our forms) and Upstash (rate limiting, using IP addresses).
• Only if you turn on the AI assistant: Google Gemini, Groq or OpenRouter, which generate the suggestion. We do not send them your name, email, payment details or location.
• Only if you accept marketing cookies: Google Analytics and Meta (Facebook) Pixel on the website.

Some of these providers process data outside the UK, including in the United States. Where they do, transfers are protected by UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

• Your account and preferences: until you delete your account.
• Orders and payment records: six years, as UK tax law requires. If you delete your account, these are kept without your name or contact details.
• Location: stored only with the order it was shared for.
• Marketing: until you unsubscribe.
• Staff records: for as long as employment, tax and food-safety law requires, then deleted.
• Form enquiries: for as long as needed to deal with them.

In the app, go to Account and choose Delete account; on the website, use the delete option on your account page. We remove your profile, contact details, preferences, allergens, rewards, devices and AI notes, and your Sign in with Apple link, straight away. Order, payment and wallet records we must keep for tax are anonymised, so they no longer identify you.

All data travels encrypted (HTTPS). Every table in our database is protected by row-level security, so each account can only reach its own data, and staff and owner tools check permissions on our server. In the app, your sign-in is stored in the Apple Keychain. Card details never reach our servers.

The app's games are suitable for children to play without an account. Accounts are for people aged 13 and over. We do not knowingly collect personal data from children under 13; if you think we have, email us and we will delete it.

Under UK GDPR you can access, correct, delete, restrict or move your data, object to how we use it, and withdraw consent at any time. Email hello@mainlineprovisions.co.uk and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

The website always uses the essential cookies it needs to run, including your sign-in session. With your consent, given through our cookie banner, we also use analytics and marketing cookies (Google Analytics or Tag Manager and the Meta/Facebook Pixel) to understand site traffic and measure our advertising. You can decline them, and you can withdraw consent at any time in the cookie settings. The app does not use advertising identifiers and does not track you across other companies' apps or websites.

If we change this policy, we will update the date above, and for significant changes we will tell you in the app or by email.