Privacy Policy

1. Summary

MenuKa has no accounts. We don't sell your data, we don't track you across apps, and menu photos are processed in the moment and not stored on our servers. The only exception: if you tick the consent box in “Inaccurate recognition” feedback, that one menu photo and its AI result are attached to your report.

2. What we process

• Menu photos. Sent over an encrypted connection to our server and to our AI processing provider solely to read and translate the menu. They are processed transiently and are not stored by us after the result is returned. Scan history (including thumbnails) stays on your device only; you can delete it in the app at any time.
• Approximate location (optional). If you allow it, a coarse location (rounded to about 1 km) is sent with a scan so the AI can better guess the cuisine and currency. It is not stored and you can turn it off in Settings.
• Device and usage records. A random device identifier, an Apple App Attest integrity check, your daily free-scan count, app version, and technical logs of each scan (time, number of pages, model used, token counts, error codes). No photo content or menu text is kept in these logs.
• Purchases. Subscriptions and one-time purchases are handled by Apple. We receive an anonymous purchase status through RevenueCat to unlock Pro. We never see your payment details.
• Analytics. Anonymous product events (for example “scan started”, “paywall viewed”) via PostHog, to find bugs and improve the app. No advertising identifiers.
• Feedback. The app and the website both have two forms: “Inaccurate recognition” (problem type, notes, optional email) and “Suggestions and complaints” (message, up to 3 screenshots, optional email). We keep the message, the screenshots and the optional email so we can look into it and reply. Only if you tick the consent box in “Inaccurate recognition” do we also attach that scan's menu photo and AI result; screenshots and attached photos sit in private storage that only our staff can open. Every report also carries the app version, device model, OS version and language.
• Dish reference photos (“View photo”). When you tap “View photo” on a dish, we send that dish name (with the menu language and country) to Serper, a Google image search API, and an AI model checks whether each result really shows that dish. For the photos we show, we keep the image URL, source page and check result, plus a compressed copy (about 800 px) on our servers so the pictures load reliably in every region; your phone loads that copy from us, and falls back to the original website only if no copy is available (that site then sees your IP address, as when you browse it yourself). Every image is labelled with its source and links back to the original page. You can report “This is wrong”, which records your device identifier, the image and the reason.
• Scene corrections. If you tell us the scan was recognised as the wrong scene (for example “menu” when it is a product) and re-run it, we record one correction statistic (original scene, new scene, number of items). No photo is stored.

3. Service providers

We use: Apple (payments, App Attest), Supabase (servers and database), OpenRouter and the AI model providers it routes to (menu recognition), RevenueCat (purchase status), Serper (dish reference images), PostHog (analytics). They process data only to provide these services to us. Data may be processed outside your country.

4. Retention

Menu photos: not retained on our servers, except the single photo you choose to attach to “Inaccurate recognition” feedback. Technical logs and quota records: up to 12 months. Feedback, including any photos or screenshots you attach: until resolved, then up to 24 months. Dish reference photo metadata and compressed copies: cached for up to 90 days; a reported image keeps its report record. On-device history: until you delete it or remove the app.

5. Your choices and rights

You can deny camera, photo or location permission (the app still works with imported photos and without location). You can clear history in the app. To access or delete server-side records tied to your device, email support@menuka.app. Depending on where you live (for example the EU/UK under GDPR, California under CCPA, mainland China under PIPL) you may have additional rights, including lodging a complaint with your local authority.

6. Children

MenuKa is not directed to children under 13 and we do not knowingly collect their personal data.

7. Changes

We will post changes on this page and update the date below. Material changes will also be announced in the app.

8. Contact

Long Tan · support@menuka.app