Privacy Policy

This policy explains what personal data Munchies collects, why we collect it, how we look after it, and the rights you have over it. We've written it in plain English on purpose: privacy policies shouldn't need a translator.

The short version: Munchies collects as little personal data as it possibly can, never sells it, and doesn't run advertising trackers. The detail is below.

Munchies is in development and available as early access by enquiry.

Last updated: 5 November 2026

1. Who we are

Munchies is a takeaway discovery and comparison service. It is a trading name of Avanti Mind Ltd, a company registered in England and Wales.

Company: Avanti Mind Ltd, trading as Munchies
Registered office: The Venture Centre, Sir William Lyons Road, University of Warwick Science Park, Coventry, England, CV4 7EZ
Company number: 16049394
ICO registration: ZC172544
Privacy contact: through the contact page

For the purposes of UK data protection law, Avanti Mind Ltd is the 'data controller' for the personal data described in this policy.

2. The short version

If you read nothing else, read this:

You can use the core of Munchies (search, browsing, recommendations and the meal builder) without an account and without giving us any personal data.
When you use Munchies without an account, your preferences are stored only on your own device, not on our servers.
We never sell your personal data and never share it for anyone else's marketing.
We do not use advertising or cross-site tracking cookies. We count visits and searches in aggregate, using a salted hash of your IP address so the address itself is never stored, and we set no cookie for this.
If you choose to subscribe to our mailing list, we collect a little more, and this policy explains exactly what.

3. What data we collect, and when

3.1 Using Munchies without an account

When you use Munchies as a guest, your preferences are saved in your browser's local storage, on your device only. We cannot see them. We do not require a name, email address or any other identifying detail to use Munchies as a guest. We do not use advertising or cross-site tracking.

To see which pages and searches are used, Munchies keeps a small set of daily counts. Our lawful basis for this is legitimate interests (section 4). The counts are:

the number of page views each day;
the number of different visitors each day. To count a visitor once, we turn your IP address into a salted hash, which is a scrambled code that cannot be turned back into the address without a secret value that we keep. We hold that code only until the end of the day, so that we do not count you twice;
the number of searches and recommendation requests each day;
hand-off clicks. When you tap through to a delivery platform, we record which restaurant it was, which part of Munchies you tapped from, and a hash of your session identifier. If you are signed in, we also link the click to your account, so that it can appear in your history;
and your use of office rounds, price watches and the Your usual suggestion, recorded against your account or, for a guest, a hash of your session, and never against your name or email address.

These counts never store your IP address itself, and we set no cookie to take them.

3.2 Subscribing to the mailing list

If you join our mailing list, we collect your email address and, optionally, your city or town.

3.3 Contacting us

If you use the contact form, we collect the details you provide, which are your name, email address, the topic and your message, so we can reply and, where relevant, act on what you've told us.

Your message goes into our own support system, held on servers in France (Paris). It is read by people. Any reply comes by email from Munchies' own mailbox, to the address you gave on the form.

3.4 What we never collect

Munchies does not collect special-category data, does not knowingly collect data from children, and does not ask for payment details. Munchies is free while it launches in Coventry and takes no payments, so no payment details are held.

4. Why we use your data, and our legal basis

Legal basis for data processing
What we do	Why	Legal basis
Serve and secure the website	So Munchies works and is protected	Legitimate interests
Aggregate usage counts and hand-off clicks	To understand which pages and searches are used and improve Munchies	Legitimate interests
Send mailing-list emails	To send you the updates you asked for	Consent
Reply to your contact messages	To answer you and act on your feedback	Legitimate interests
Comply with the law	To meet our legal and regulatory duties	Legal obligation

5. Cookies and similar technologies

These cookies are strictly necessary. They are required for the site to work, so no cookie-consent choice is needed for them:

Strictly necessary cookies
Name	What it does	How long it lasts
munchies-session	Keeps forms and the contact flow working.	2 hours
XSRF-TOKEN	Protects forms against forgery.	2 hours

One more cookie is a preference that you set yourself. It is not set until you choose:

Preference cookie
Name	What it does	How long it lasts
appearance	Remembers whether you chose light, dark or your device setting. Set only when you make that choice.	365 days

This site sets no analytics, advertising or tracking cookie. We count visits and searches in aggregate, using a salted hash of your IP address so the address itself is never stored, and we set no cookie for this. If we ever set anything beyond the cookies listed here, we will ask for your consent first and update this section to describe it accurately.

Analytics settings

Measuring visits uses no cookies. We record which website sent you here (its name only, never the page) and any campaign label we added to the link you followed. PostHog (EU) does this for us: it groups one browser's pages on the same day under a code that changes every day, deletes the IP address before anything is kept, and never links visits on different days, or any visit to a person. We use these only as totals, to see which of our links bring visitors and to improve this site. You can object with the 'Don't count my visits' switch under Analytics settings; we honour Global Privacy Control.

PostHog keeps the records in the EU but may process them outside the UK and EEA, including in the United States, under the UK International Data Transfer Addendum and the UK Extension of the EU-US Data Privacy Framework.

If you use the switch, this browser keeps one note saying 'don't count', and nothing else, so we remember your choice.

6. Who we share data with

We do not sell your personal data and we do not share it for anyone else's marketing. We share data only with service providers who help us run Munchies: our hosting provider, our email-delivery provider and the service that counts visits (see Analytics settings under Cookies and similar technologies). Each provider is bound by a contract that requires them to protect your data.

Outbound links to delivery apps: when you tap through from Munchies to a delivery platform, you leave Munchies and enter that platform's own service, governed by its own privacy policy. We are not responsible for how those platforms handle your data.

7. Where your data is held

We aim to host and process personal data within the UK or the European Economic Area wherever possible. If any data is transferred outside the UK, we make sure it is protected by an appropriate safeguard recognised under UK data protection law.

Messages sent through the contact form are held on servers in France (Paris).

8. How long we keep data

Guest preferences: stored on your device; you can clear them at any time by clearing your browser storage.
Mailing-list data: kept until you unsubscribe.
Contact messages: kept while the conversation is open and for 365 days after it is closed or resolved, then deleted. This website also keeps its own copy of each message; we have not yet fixed a deletion period for that copy and will state one here once we have. If you ask us to erase your messages, we delete your contact record and every message under it, and this website's copy too.

9. How we protect your data

The site runs over an encrypted (HTTPS) connection. We collect as little personal data as possible: the best protection is not holding data in the first place. Access to any personal data we do hold is limited to people who need it.

10. Your rights

Under UK data protection law, you have the right to:

be informed,
access your data,
have inaccurate data corrected (rectification),
erasure in certain circumstances,
restrict how we use your data,
data portability,
object to certain uses,
and withdraw consent at any time.

To exercise any of these rights, get in touch through the contact page. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

11. Children

Munchies is intended for adults. It is not designed for or directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we make a significant change, we will update the 'Last updated' date at the top and, where appropriate, tell you directly.

25 October 2026: messages sent through the contact form now go into our support system. Sections 3.3, 7 and 8 say where they are held, how long they are kept and how to have them erased.

13. Contact us

Reach us through the contact page
Post: Avanti Mind Ltd, The Venture Centre, Sir William Lyons Road, University of Warwick Science Park, Coventry, England, CV4 7EZ

Request early access