Privacy Policy

Last updated: 31 October 2026

This policy explains what information Thru collects, why we collect it, who we share it with and the choices you have. We've written it in plain English so it's easy to read.

Who we are

Thru is operated by GETTHRU TECHNOLOGIES LIMITED (RC 9955935), Abuja, Nigeria. In this policy, "Thru", "we" and "us" mean GETTHRU TECHNOLOGIES LIMITED.

If you have any questions about this policy or your data, email us at hello@getthruapp.com.

What we collect

When you use Thru we collect:

• Account information: your name, username, email address and, if you choose to add one, your phone number.
• Profile information: your profile photo and bio.
• Things you post: reviews, ratings, photos and videos, comments and Bites.
• Activity: likes, follows, reactions and the restaurants you save or view.
• Bookings: the bookings you make or manage, and the messages you send about a booking.
• Receipts: photos of receipts you choose to scan, and what we read from them (see "Receipts" below).
• Street food spots: the name, type, landmark, usual times, photo and map pin of spots you add.
• Staff information: for restaurant and venue staff, first name, role, check-in PIN (stored scrambled) and shift times.
• Reports: reports you make about posts, people or places, and reports others make about you.
• Location: your approximate location to pick your city and, only if you allow it, your precise location for the features explained under "Location" below.
• Device token: an identifier for your device, so we can send you the notifications you've allowed.
• Usage and crash data: basic information about how the app is used and when it crashes, so we can fix problems.

Why we use it

• To run Thru: create your account, sign you in and show your profile.
• To show your content to other people on Thru.
• To handle bookings and booking messages between you and restaurants or venues.
• To verify visits, show real prices, and work out Levels and XP.
• To help venues manage staff check-in and see feedback about their team.
• To send the notifications you've allowed. You can turn them off at any time.
• To keep people safe. This includes automated AI checks of posts and messages for harmful content.
• To prevent fraud, spam and abuse.
• To understand how Thru is used and make it better.

Receipts

Scanning a receipt is optional. When you scan one, we read the venue name, date, items and total.

• We use this to verify your visit (the "Verified visit" badge) and to improve the prices shown on Thru, such as menu prices and typical costs.
• Receipt images are stored privately. Only you and our team can see them. They are never shown to other users or to the venue.
• Card numbers, cardholder names and other payment details on a receipt are never shown publicly. Only the price appears on your review.

Location

Thru uses your location only when you allow it in your phone or browser settings. You can turn it off at any time; Thru still works, but some features won't.

We use it to:

• Suggest venues near you, for example the place you're at when you post.
• Verify visits, for example a live photo taken at the venue.
• Pin street food spots you add. The pin is shown publicly so people can find the spot. Private homes aren't allowed.
• Check that staff are at the venue when they check in for a shift. Sharing location on the staff check-in page is optional: if it's shared, we check it's within 200 m of the venue; if not, the shift is marked "location not shared" for the venue owner.

We don't track your location in the background or keep a history of where you go.

AI

We use AI provided by Anthropic to:

• Check posts, comments, messages and new place names for harmful content, phone numbers or private details.
• Look at the photos you add and suggest the dish.
• Read the receipts you scan.

Photos are analysed only for these purposes. Suggestions are just suggestions: you can change them before you post. If you think an automated check got something wrong, email hello@getthruapp.com and a person will look at it.

Staff profiles

• Restaurants and venues can add their staff to Thru. Guests see only a staff member's first name and role, unless the staff member chooses to make their profile Public (then guests also see their photo, rating and kind comments).
• Guests can rate staff only after a proven visit. Kind comments can be shown publicly if the staff member is Public; other comments go privately to the venue owner. Comments with surnames, phone numbers or social handles are blocked.
• Staff can check in for a shift with a 4-digit PIN, without a Thru account. We store only a scrambled (hashed) copy of the PIN, plus shift start and end times. Too many wrong PINs locks check-in for 15 minutes.
• Staff with a Thru account can link it to their staff profile to see their own ratings and comments.

Levels and XP

• You earn XP for activity on Thru, such as approved reviews, live photos, verified visits, confirmed receipts and Bites.
• Your level (Guest, Regular, Connoisseur or Thru Elite) is shown on your profile and next to your posts.
• We keep a history of your XP so you can see how it was earned. Levels and XP are worked out automatically from your activity.
• If you're inactive for 14 days, some XP is removed each week, and levels are checked once a month. We remind you before this happens, using the notifications you've allowed.

Who we share it with

We only share what's needed, with:

• Google Firebase and Google Cloud, who host and store Thru's data in UK and EU data centres.
• Anthropic, who provide the AI we use to moderate posts and messages, suggest dishes from photos and read receipts.
• Google Maps Platform and OpenStreetMap, which provide place search and maps. When you view a map or tap Directions, your device loads map data from them.
• Restaurants and venues you book with or message, who get only what's needed for the booking (for example your name and booking details).
• Authorities, such as the police or a court, if the law requires us to.

We don't sell your personal data.

Your choices and rights

• Edit your profile at any time in Edit profile.
• Change which notifications you get in Notifications.
• Block or report people you don't want to hear from.
• Delete your account in the app (Settings > Delete account). You have 30 days to change your mind before it is erased.
• Email hello@getthruapp.com to ask for a copy of your data, or to ask us to correct or delete it.

If you're in Nigeria, the Nigeria Data Protection Act 2023 gives you rights over your personal data, including the right to access it, correct it, have it deleted, object to how it's used and complain to the Nigeria Data Protection Commission. If you're in the UK, you have similar rights under the UK GDPR and can complain to the Information Commissioner's Office (ICO).

How long we keep it

We keep your information while your account is open. When you delete your account, we delete or anonymise your personal data within a reasonable time, unless we need to keep some of it to meet a legal duty, resolve a dispute or deal with a report about safety.

How we keep it safe

Your data is stored with Google Cloud, protected by security rules, and only accessed by people who need it to run Thru. Sensitive details like your email and phone number are kept private and are never shown on your public profile. No system is perfectly secure, so please use a strong password and keep it to yourself.

Children

Thru isn't for children under 13, and we don't knowingly collect data from them. Nightlife content and features are for people aged 18 and over. If you think a child under 13 is using Thru, please email us and we'll remove the account.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top, and if the change is important we'll tell you in the app.

This document will be reviewed by our legal adviser.