1. Information We Collect
We collect information you provide directly: your name, email address, restaurant name, and menu content you upload. We also collect usage data including quiz scores, training activity, and feature usage to improve the Service.
2. How We Use Your Information
We use your information to: provide and improve the Service; generate quiz questions from your menu content using AI; send account-related emails (confirmations, trial reminders); and detect and prevent abuse of the free trial.
3. Menu Content and AI Processing
Menu photos, PDFs, and text you upload are sent to Anthropic's Claude API solely to extract menu items and generate quiz questions. We do not use your menu content to train AI models. Anthropic's privacy policy governs their handling of this data.
4. Staff Data
Staff names, PIN numbers, and quiz scores are stored to power the training and progress features. This data is visible only to managers at your restaurant. We do not share staff data with third parties.
5. Payment Data
On iOS, subscriptions are processed entirely through Apple's In-App Purchase system. Apple's privacy policy governs all payment data handling for iOS purchases — we do not receive or store your payment card details. On the web, payments are processed by Stripe. We store only a subscription status record to manage your access to the Service.
6. Device Fingerprinting
To prevent abuse of the free trial, we collect a hashed device fingerprint (a non-reversible signature based on your browser and device characteristics) at account creation. This does not identify you personally and cannot be used to track you across other websites.
7. Data Sharing
We do not sell your data. We share data only with service providers necessary to operate the Service: Supabase (database and authentication), Anthropic (AI processing), and Apple (iOS in-app purchases). Web subscribers' payment data is handled by Stripe.
8. Data Retention
We retain your data while your account is active. If you delete your account, we will delete your data within 30 days, except where required by law (e.g. billing records).
9. Security
We use industry-standard security practices including encrypted connections (HTTPS), secure password hashing via Supabase Auth, and access controls. No method of transmission over the internet is 100% secure.
10. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing [email protected]. We will respond within 30 days.
11. Contact
Questions about this policy? Email us at [email protected]