Privacy Policy

Menu Plus ("we", "us", or "our") operates the Menu Plus platform, which provides digital menu management tools for restaurants and food businesses. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using our platform, website, or services, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, password, phone number, and business details when you register.
• Restaurant data: menu items, prices, descriptions, images, operating hours, and branch details you create within the platform.
• Payment information: billing details processed securely through our payment providers. We do not store full card numbers.
• Support communications: messages and files you send when contacting our support team.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, session duration, click events, and error logs.
• Device & browser data: IP address, browser type, operating system, screen resolution, and language preferences.
• Cookies & local storage: session tokens, authentication state, and user preferences. See Section 6 for details.
• Push notification tokens (FCM): Firebase Cloud Messaging tokens used to send you order and operational notifications. These are tied to your device and session.

1.3 Information From Third Parties

• Authentication providers (e.g. Google) may share your name, email, and profile picture if you sign in using OAuth.
• Payment processors may share transaction status and billing addresses.

2. How We Use Your Information

We use collected information to:

• Create and manage your account and restaurant profile.
• Provide, operate, and improve the Menu Plus platform and its features.
• Send transactional notifications (e.g. new orders, order status updates) via push notifications or email.
• Process payments and manage subscription billing.
• Respond to support requests and communicate platform updates.
• Detect, prevent, and investigate fraud or security incidents.
• Comply with our legal obligations.
• Conduct analytics to understand usage patterns and improve performance (using aggregated or anonymised data where possible).

We do not sell your personal data to third parties.

3. Data Sharing

We may share your information only in the following circumstances:

• Service providers: trusted vendors who operate under data processing agreements and only process data on our behalf (e.g. cloud hosting, payment gateways, email delivery, analytics).
• Firebase / Google: we use Firebase for push notifications and analytics. Google's privacy policy applies to data processed by Firebase.
• Legal requirements: if required by law, court order, or government authority.
• Business transfers: in the event of a merger, acquisition, or sale of assets, user data may be transferred. You will be notified in advance.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion at any time (see Section 7). After deletion we may retain aggregated, anonymised data that cannot identify you.

• Account data: retained until you delete your account.
• Order history: retained for up to 3 years for accounting and legal compliance.
• FCM tokens: retained until the session ends or the device is de-registered.
• Log data: retained for up to 90 days for security and debugging purposes.

5. Data Security

We implement industry-standard security measures including:

• TLS/HTTPS encryption for all data in transit.
• Encrypted storage for sensitive fields (passwords, tokens).
• Role-based access controls limiting who can access your data.
• Regular security reviews and dependency audits.

No system is 100% secure. If you discover a security vulnerability, please report it to info@menuplus.co.

6. Cookies & Tracking Technologies

We use the following types of cookies and storage:

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

7. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your account and personal data.
• Portability — request an export of your data in a machine-readable format.
• Objection — object to processing of your data for marketing or analytics purposes.
• Withdraw consent — withdraw consent at any time where processing is based on consent (e.g. push notifications).

To exercise any of these rights, email us at info@menuplus.co. We will respond within 30 days.

8. Children's Privacy

Menu Plus is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. International Transfers

Our servers and service providers may be located outside your country. By using Menu Plus, you consent to the transfer of your data to servers that may be in a different jurisdiction. We take appropriate safeguards to ensure your data remains protected in accordance with this policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Effective date" at the top of this page.
• Notify registered users via email or an in-app notification.

Continued use of our services after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at: