Privacy Policy

MenuTada, formerly Menuify ("MenuTada", "we", "us"), makes digital menus for restaurants. Restaurants build their menus in our web app at menutada.com and in the MenuTada iOS app. Their guests then read those menus in a browser, by scanning a QR code or following a link. This policy explains what we collect from each of those groups, why, who we share it with and what choices you have.

MenuTada only shows menus. It does not take orders or payments for restaurants. The only payments we process are restaurants' own MenuTada subscriptions.

If you have a question about this policy or your information, email us at teammenutada@gmail.com.

Who This Policy Covers

• Restaurant accounts: owners and team members who sign up for MenuTada and manage a restaurant's menus.
• Guests: anyone who views a restaurant's menu on menutada.com, on a restaurant's own domain, or through a MenuTada QR code. Guests don't need an account or an app.
• Website visitors: anyone who visits our marketing site, contacts us or joins our newsletter.

A restaurant decides what goes on its own menu. If you have a question about a restaurant's menu, prices or ingredients, please ask the restaurant.

What We Collect

From restaurant accounts

• Account details: your name, email address and password. Your password passes through our server only to sign you in. It is stored by Google Firebase Authentication, never in our own database. If you sign in with Google or Apple on the web, we receive your name, email address and, where available, profile photo from that provider.
• Restaurant details: your restaurant's name, menu web address, website, public email, street address, social media links, currency, language, time zone, branding (logo, colors, fonts), and any custom domain you connect.
• Menu content: menus, sections, items, descriptions, prices, sizes and add-ons, dietary details, calories, menu hours and photos. This content is meant to be public: it appears on your public menu page.
• Team details: the people you invite (their email address and role), who invited them, and when they joined.
• Billing details: your subscription plan, its status and the email address on the subscription. Card details are entered directly with our payment processor, Stripe. We never see or store your full card number.
• Menu import: if you use AI menu import, the photos or PDFs of menus you upload, and a count of how many imports your restaurant and each team member have run (used to enforce fair-use limits).
• Support messages: what you send us through our contact form or by email.

From guests viewing a menu

When someone opens a menu, we count the view for that restaurant so it can see how its menu is used. For each view we derive the following from the request, then add it to that day's totals:

• the approximate location (country, region, city, and coordinates rounded to one decimal place), which our host, Vercel, works out from the IP address;
• the kind of device, browser and operating system;
• the kind of site that referred the visit (for example, a search engine or social network);
• the time of the visit.

For these restaurant analytics we store only the daily totals. We do not store the guest's IP address, a visitor identifier, or a record of any one person's visits, and we don't set a cookie for them. The totals cannot tell a restaurant who viewed its menu. Menu pages also use Google Analytics, described below.

A QR code link may include the table number it came from. That number identifies the code, not the guest.

From everyone

• Google Analytics: our marketing site and public menu pages use Google Analytics to count page views and understand how people find us. Google Analytics uses cookies and receives your IP address, browser details and the pages you visit. It is not used in the restaurant dashboard or the iOS app. See How Google uses information from sites that use its services, or opt out with the Google Analytics opt-out browser add-on.
• Technical data: like any website, our hosting provider receives your IP address and browser details with each request in order to deliver the page, and keeps them in short-lived server logs for security and troubleshooting.
• Newsletter: if you join our newsletter, your email address and the date you signed up.

How We Use It

We use this information to:

• run MenuTada: create and secure your account, save and publish your menus, host your photos, connect your domain and show your public menu;
• show restaurants their menu-view analytics;
• read a menu from your photo or PDF when you ask us to (AI menu import);
• process your subscription, free trial, renewals and cancellations;
• send you emails your account needs: password resets, team invitations and important notices about your account or these policies;
• answer your questions and support requests;
• send our newsletter, if you signed up for it;
• prevent abuse and fraud, and keep MenuTada secure;
• understand how our website is used so we can improve it;
• comply with the law.

We do not sell your personal information, and we don't use it for targeted advertising. We don't show ads in MenuTada.

If you are in the European Economic Area or the UK, our legal bases are: performing our contract with you (running your account and subscription); our legitimate interests (security, menu-view analytics, support and improving MenuTada); your consent (newsletter); and legal obligations (such as tax records).

AI Menu Import

MenuTada+ restaurants can create a menu from a photo or PDF. When you use this feature, the file is sent through the Vercel AI Gateway to an AI model provider (currently OpenAI), with instructions to read the items and prices. MenuTada then creates a menu from the result. AI can misread a menu, so please check every item and price on the new menu.

We send only the files you choose to import. Please don't upload images that show people or other personal information.

Who We Share It With

We share information only with the service providers that run MenuTada for us, each under its own terms for processing data on our behalf:

Some information is shared because you choose to share it:

• Your public menu: your restaurant's name, address, contact details, social links and menu are public on your menu page. That is what MenuTada is for.
• Your team: people you invite to your restaurant can see its details and menus, and the names and email addresses of the rest of its team.

We may also disclose information if the law requires it, to protect the safety or rights of our users or others, or as part of a merger or sale of our business. If that happens, this policy will continue to apply to your information.

Cookies and Similar Technologies

• Sign-in cookie (session): keeps you signed in to the dashboard for up to 12 days. Required for the dashboard to work.
• Preferences: a cookie that remembers whether the dashboard sidebar is open, and your light or dark theme setting saved in your browser.
• Google Analytics cookies: on the marketing site and public menus, as described above.
• Stripe: Stripe sets its own cookies on the billing page to prevent fraud.

The iOS app stores your sign-in on your device so you stay signed in. You can block or delete cookies in your browser settings. If you block the sign-in cookie, you won't be able to use the dashboard.

The iOS App

The MenuTada app asks for permission to use your camera and photo library, only so you can photograph or choose pictures of your menus, items and logo. It does not use your microphone or location, does not send push notifications and does not track you across other companies' apps or websites. You can change these permissions at any time in your device's Settings.

How Long We Keep It

• Account and restaurant data: for as long as your account or restaurant exists.
• When you delete a restaurant: we delete its menus, items, team list and analytics, remove its custom domains, cancel its subscription and delete its photos. If a photo can't be deleted right away, we remove it later. Copies can remain in our providers' backups for a limited time.
• Billing records: invoices and payment records are kept by Stripe and by us as tax and accounting law requires, even after your account is gone.
• Menu-view analytics: kept as daily totals for as long as the restaurant exists.
• Newsletter: until you ask us to remove you.
• Support messages: for as long as we need them to help you and keep a record of the conversation.

Your Choices and Rights

• Edit your information: you can change your restaurant's details, menus and team in the app, as your role allows.
• Delete a restaurant: a restaurant's owner can delete it from the restaurant's Settings, on the web or in the iOS app.
• Delete your account: on the web, open Account and press Delete account, or email teammenutada@gmail.com from the email address on your account. We delete your account and the personal information linked to it, except what we must keep (see "How Long We Keep It"). If you own a restaurant, delete it first, or ask us to help you hand it to a teammate.
• Leave the newsletter: email us and we'll remove you.
• Cancel your subscription: in Settings → Billing, or by emailing us.

Depending on where you live (for example in California, other US states, the European Economic Area or the UK), you may have the right to know what personal information we hold about you, get a copy of it, correct it, delete it, object to or restrict how we use it, and withdraw your consent. To use any of these rights, email teammenutada@gmail.com. We'll confirm the request comes from you (usually by replying to your account's email address) and respond within 30 days, or sooner where the law requires. You may also use an authorized agent. We won't treat you differently for using your rights.

California residents: in the past 12 months we have collected the categories of information described in "What We Collect": identifiers (name, email, IP address), commercial information (subscription records), internet activity (page views), approximate geolocation, and the content you send us. We collected it from you, from your device and from the providers above, and used it for the purposes in "How We Use It". We don't sell personal information or share it for cross-context behavioral advertising, and we don't knowingly do so for anyone under 16. We don't use sensitive personal information to infer characteristics about you.

If you are in the European Economic Area or the UK and believe we've mishandled your information, you can complain to your local data protection authority.

International Transfers

MenuTada is run from the United States, and our providers process information in the United States and other countries. When we transfer personal information out of the European Economic Area, the UK or Switzerland, we rely on our providers' Standard Contractual Clauses or Data Privacy Framework certifications.

Security

Connections to MenuTada are encrypted, passwords are stored by Firebase Authentication, card details are handled only by Stripe, and only a restaurant's own team can manage its private data. No system is perfectly secure, though. If a breach affects your personal information, we'll tell you and the authorities as the law requires.

Children

Restaurant accounts are for adults (18 or older) running a business. Anyone can view a public menu. MenuTada's own menu analytics keep only anonymous totals, and Google Analytics runs on menu pages as described above. We don't knowingly collect personal information from children under 13. If you believe a child has given us personal information, email us and we'll delete it.

Changes to This Policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell restaurant accounts by email or in the app before it takes effect.

Contact Us

MenuTada Beloit, WI 53511, United States teammenutada@gmail.com