Privacy Policy
Last updated October 25, 2026 · Effective October 25, 2026
What MenuWhisper collects when you use the app, why, who processes it and how long it is kept. The same policy is in the app under Account.
1Overview
This Privacy Policy explains how MenuWhisper processes personal data when you use the app.
2Information We Collect
If you create an account, we process account details such as email, name (if provided), provider identity, and authentication/session records. For guest use, we process a device identifier signal used for anti-abuse and usage limits.
4Location Data
With your permission, MenuWhisper may access location data to suggest nearby restaurants and improve local scan context. Restaurant associations are stored on-device in your scan history.
5Usage and Diagnostics
We process usage-limit counters, request metadata, and diagnostics (such as crash and error telemetry) to keep the service stable, secure, and performant.
6How We Use Information
We use data to provide menu analysis, authenticate users, enforce limits, prevent abuse, troubleshoot issues, evaluate and improve the quality of menu analysis (including building test sets and tuning or training the AI models that power the app), and communicate essential service updates.
7Data Retention Schedule
Guest device records are cleaned up after inactivity (typically 90 days, or around 30 days for exhausted guest records). Authenticated daily scan counters are retained for 90 days. Revoked refresh tokens are retained for up to 7 days before cleanup. Account deletion removes account-linked records from the primary database. When backend inference logging is enabled, per-request inference records (extracted menu text, menu photos sent for server-side text extraction, and the analysis output) are stored in Cloudflare R2 for troubleshooting, quality review, and evaluating and improving our AI models, and are automatically deleted after 2 years. These records do not include your account identifier, so they are not linked to your account.
8Third-Party Processors
We use third-party providers for authentication (Apple Sign In, Google Sign In), AI processing (Cerebras, Google Gemini), error monitoring (Sentry), and rate limiting/infrastructure services (such as Cloudflare and Upstash).
9International Data Transfers
Because our providers may process data in multiple regions, your data may be processed outside your country. We rely on applicable legal transfer mechanisms and provider safeguards where required.
10UK and France Privacy Rights
Where applicable, you may have rights to access, correct, delete, restrict, object to certain processing, and request portability. To exercise rights, contact christophe.ha1@gmail.com from your account email. We may verify identity before acting on requests and will respond within legal timelines (typically within one month, with extensions where permitted).
11Younger Users and Family Safeguards
MenuWhisper is designed for broad audiences and may be used by younger users. Where laws provide additional protections for children or teenagers, we apply those protections and support parent or guardian requests when required.
12Security
We use technical and organizational controls intended to protect data in transit and at rest, including encrypted connections and restricted operational access.
13Changes to Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective and last-updated dates.
14Contact and Data Requests
For privacy questions or rights requests, contact christophe.ha1@gmail.com. You may also use in-app account deletion controls where available.