Privacy Policy

Full Belli does not operate analytics, advertising, tracking pixels, session recording, or any third-party measurement on the site. There is nothing of that kind to opt out of.

Full Belli does not sell your personal information and does not share it for advertising purposes.

Full Belli never receives or stores your full card number or bank account number. That information passes directly from your browser to Stripe.

From every person who signs in: your email address, the name you provide, and, if you sign in with Google, the name and profile picture Google returns. Full Belli does not use passwords.

From supporters: the amount, date, and recipient restaurants of each Meal Purchase, the name and email address entered at checkout, and whether you elected to be named or to remain anonymous. From Stripe, Full Belli receives and stores a record of each payment, which includes the card type, its last four digits, its expiry date, and the billing name, address, and telephone number you provided to Stripe. A company additionally provides a company name and may add a tagline and a link.

From students: your campus, the school email address you verify, and a record of every meal pass you create and redeem, including the restaurant, the time, and the price. If you leave a thank-you note, Full Belli retains its text.

From restaurants: the business name, address, telephone number, and hours, the owner first name displayed on your listing, and whether Stripe has approved your account for payouts. Identity documents, tax identification numbers, and bank details are provided directly to Stripe. Full Belli never receives them.

Full Belli does not store your IP address. It passes your IP address to Cloudflare to verify that a form submission is not automated, and, for Meal Purchases made without an account, it retains a one-way hash of the request’s network address and browser identifier to enforce rate limits. Full Belli’s hosting and security providers maintain their own request logs.

No student is ever named publicly, and no supporter is ever named publicly. A company may be credited publicly by its company name.

If you are a supporter funding meals as an individual and have not elected to remain anonymous, the student who claims your meal sees your first name and last initial, and nothing else, on that student’s own pass only. If you fund meals as a company, the student sees the company name and any tagline and link on your profile.

If you are a student, the restaurant sees your first name when you redeem a pass, so that staff can identify you. The restaurant never sees your surname, your email address, your school address, or your campus. A supporter who receives your thank-you note sees your first name, your campus, the restaurant, and your note, and never your full name or your email address.

If you operate a participating restaurant, your business name, address, telephone number, and the owner first name on your listing are displayed publicly on the site.

Full Belli personnel holding an administrator account can view accounts and Meal Purchases, including names, email addresses, and verified school addresses, for the purposes of operating the Service, reviewing restaurants, and responding to inquiries.

Full Belli engages a limited number of service providers, each for a defined function. Stripe processes payments and restaurant onboarding. Supabase hosts the database and operates sign-in. Resend delivers email. Cloudflare runs scheduled jobs and the automated-submission check on forms. Vercel hosts the site. Google provides optional sign-in and the address search restaurants use when entering their address.

Some of these providers operate in your browser rather than on Full Belli’s servers and therefore observe your device’s network address: Stripe on the payment step, Cloudflare on forms carrying the automated-submission check, Google if you elect to sign in with it, and Supabase, with which your browser communicates directly to keep a meal pass current.

Two further disclosures are limited to a single item each. When a restaurant searches for its address, the text entered is sent to Google’s Places service, which returns the matched address and its coordinates. Only the business address is sent. When restaurant staff open the code scanner, their browser retrieves the scanning component from a public content delivery network, which observes their network address. Camera images are processed on the device and never leave it.

Full Belli’s emails contain the subject matter of the email: a sign-in code, a meal pass code and its QR image, a receipt, or a thank-you note bearing a student first name and campus. The email provider handles that content in order to deliver it.

Each of these providers is a processor acting on Full Belli’s instructions and not a party to whom information is sold.

Full Belli sets a cookie to keep you signed in, and two additional cookies that record whether your sidebar is collapsed and the timezone of your browser so that times are displayed correctly. Full Belli sets no other cookies.

Stripe and Cloudflare set their own cookies on the pages where their payment and automated-submission tools run.

Full Belli does not use cookies for advertising or analytics, and for that reason does not request cookie consent.

Full Belli retains account and Meal Purchase records for as long as the account exists, and retains financial records thereafter. A Meal Purchase, a payment record, and a redeemed meal form part of Full Belli’s books and of its obligations to restaurants and to tax authorities, and are not deleted on request.

On request to hello@fullbelli.com, Full Belli will disclose the information it holds about you, correct your name or email address, remove a thank-you note you wrote, make your past Meal Purchases anonymous so that no student sees your name, and close your account so that it can no longer be used to sign in.

You may withhold your name from a single Meal Purchase at the time you pay, or from every Meal Purchase through your account settings. Withholding it in either place makes the Meal Purchase anonymous to the student.

You may cancel a recurring Meal Purchase at any time from your account.

Full Belli’s emails concern actions you have taken: a code you requested, a pass you created, or a receipt for a payment. Any marketing email Full Belli sends will include an unsubscribe link.

Access to data is enforced in the database and not solely in the application, so that a student cannot read another student’s records, a restaurant cannot read a student’s records, and a supporter cannot identify who claimed their meal. Meal pass codes and receipt links are secrets that reach only the person to whom they belong.

No service is perfectly secure, and Full Belli does not represent otherwise. If you discover a vulnerability, report it to hello@fullbelli.com.

The Service is not directed to children under 13, and Full Belli does not knowingly collect their information. If you believe a child under 13 holds an account, contact hello@fullbelli.com and Full Belli will remove it.

If Full Belli modifies this Privacy Policy, it will update the effective date above and will notify you if the modification is significant.

Full Belli LLC. Privacy inquiries may be directed to hello@fullbelli.com.