Umami

Privacy Policy

Last updated 29 July 2026

This policy covers the Umami iPhone app, operated by The Rize Group FZ-LLE of Dubai, United Arab Emirates. It is written to describe what the app actually does rather than to cover every theoretical case.

The short version. Umami learns what you like to eat. That profile — your cuisines, your dietary rules, the dishes you save — is held on your phone and nowhere else. There is no account, no recommendation server, and no profile of you on any machine of ours. "Forget me" in the app empties it, and once it is gone there is nothing left anywhere to delete.

Who we are

The Rize Group FZ-LLE, Dubai, United Arab Emirates, is the controller of the personal data described here. For anything in this policy, including access and deletion requests, contact [email protected].

Your taste profile stays on your device

Everything the app learns about you is stored in the app's own storage on your iPhone. None of it is transmitted to us or to anyone else, and we cannot see it.

WhatWhy
Cuisines you selectedTo rank venues you are likely to enjoy
Dietary rules — allergies, vegetarian, halalTo hide dishes you cannot eat
Heat, adventurousness, spend and occasionTo weight recommendations
Dishes you savedThe strongest signal we have for what you actually like
Orders you prepared before arrivingSo you can show them at the table
A name, if you typed oneSo your relationship manager knows who is asking
Language choiceSo the app opens the way you left it

Deleting the app erases all of it permanently. So does Forget me in the You tab.

The recommendations are computed on your phone

Umami does not send your preferences anywhere to decide what to show you. The venue directory and menus are downloaded to your device, and the matching runs locally. That is why the app can rank 151 venues and thousands of dishes against your profile without us ever learning what is in it.

What we do not collect

What does leave your phone

Menus and venue information

The app downloads the venue directory, menus and photography from our servers. Those are ordinary file requests: they tell us a device asked for a file, not who you are or what you like.

Booking and pre-order messages

When you request a table or send an order ahead, the app opens WhatsApp with a message already written. Nothing is sent until you press send in WhatsApp. From that point it is an ordinary WhatsApp conversation between you and your relationship manager, carried by Meta, and we keep it in order to arrange your booking. Only what is in that message reaches us — not your profile.

Your calendar

If you add a booking to your calendar, the app asks iOS for permission and writes a single event. We never read your calendar.

Who your data reaches

WhoWhatWhen
Meta (WhatsApp)The message you sendOnly when you press send
CloudflareHosting and delivery of menus and imagesAlways, as infrastructure
AppleApp distribution and crash reporting, under Apple's termsAs part of the App Store
The venueYour name, date and party sizeWhen we arrange your booking

We do not sell personal data, and we do not share it for anyone else's marketing.

Menus, prices and dish photography

Menus are supplied by the venues or taken from what they publish, and they change without notice to us. Treat the app as a guide and the venue's own information as authoritative. Dish photography is illustrative — it shows the kind of dish, not that venue's own plate — and the app says so on every menu.

How long we keep things

Your rights

Under the UAE Personal Data Protection Law, and under the GDPR where it applies to you, you may ask us for a copy of the personal data we hold, correct it, delete it, restrict or object to how we use it, or withdraw consent.

In practice almost everything this app holds is on your own device and under your control. For anything held by us — in practice a WhatsApp conversation — write to [email protected] and we will respond within 30 days. You may also complain to the UAE Data Office.

Children

This app is for adults. Many venues listed are licensed premises with a minimum age of 21. We do not knowingly collect data from anyone under 18.

Changes

If this policy changes materially we will update the date at the top and, where the change affects you, say so in the app.