Privacy Policy

1. Introduction

MyMobileMenu LLC, an Illinois limited liability company ("MyMobileMenu", "we", "us", or "our"), operates MyMobileMenu, a software-as-a-service platform that lets restaurants, bars, and other food-service businesses create, customize, and publish mobile-friendly digital menus. This Privacy Policy explains what information we collect when you use our service, why we collect it, how we use and share it, and the choices you have. It applies to our website, the menu editor, the admin tools, and the published menus we host on your behalf.

By using MyMobileMenu, you agree to the practices described in this policy. If you do not agree, please do not use the service.

2. Information we collect

Account information you provide

When you create an account, we collect the information you give us. This includes your name, email address, and your business or restaurant name, and optionally your business address and phone number.

Authentication data

• If you sign in with Google, we receive your Google account identifier and basic profile information (such as your name and email address) through Google OAuth.
• If you sign in with an email address and password, your password is never stored in plain text. We store only a securely hashed version of it (using bcrypt). We cannot see or recover your original password.

Menu content you create

We store the menu content you build in the editor, including section and item names, prices, descriptions, schedules, and dietary tags, as well as any logos, background images, and item photos you upload.

Analytics for your published menus

For menus you publish, we collect privacy-minimized analytics about how diners interact with them, so we can show you useful insights. This includes information such as page views, section and item views, link clicks, device type, and approximate session duration.

We deliberately do not collect diners' IP addresses, user-agent strings, or full URLs. For referrers, we store only the hostname (for example, where a visit came from) and not the full link.

AI features

When you use the AI Menu Assistant, we send your typed or spoken instruction and a copy of your menu's content (section and item names, prices, descriptions, availability, schedules, and dietary tags) to an AI provider so it can propose changes. If you use voice input on a device where we transcribe the recording ourselves, the short audio clip is sent to an AI provider to be converted to text; we do not store the recording. If you photograph a paper menu, the photos are sent to our menu-import service to be read. The AI description and price-suggestion tools send the item details you are editing. Nothing an AI proposes is applied until you review and approve it.

Cookies and sessions

When you log in, we use a session cookie or token to keep you signed in. These sessions have a limited lifetime of about seven days, after which you will need to sign in again. These cookies are strictly necessary for the service to work.

Website analytics (Google Analytics)

On our marketing website (not on the menus you publish), we may use Google Analytics 4 to understand how visitors find and use the site, such as which pages are viewed, the referring website, approximate location derived from your IP address (country or city), and device and browser type. Google Analytics uses cookies (for example, _ga) to do this.

These cookies are only set if you choose Accept in the cookie notice. Until then, and if you choose Decline, we use Google Consent Mode so that no analytics cookies are stored. You can change your choice at any time with the Cookie settings link in the site footer, or opt out of Google Analytics on all websites with Google's browser add-on. We do not use advertising cookies, and we do not sell your personal information. Learn how Google uses this data in How Google uses information from sites that use its services.

3. How we use information

We use the information we collect to:

• Provide and operate the service, including managing your account and building and hosting your menus.
• Authenticate you and keep you signed in.
• Send transactional emails, such as password resets and replies to messages you send us through the contact form.
• Show you analytics about how diners use your published menus.
• Protect the service against abuse, spam, and automated bots.
• Maintain, troubleshoot, and improve the service.

4. Published menus are public

When you publish a menu, it becomes publicly accessible at its URL. Anyone with the link can view it, including the menu content and any images you have added. Please do not put anything in a published menu that you would not want to be public.

5. Service providers (sub-processors)

We rely on a small number of trusted third-party providers to run the service. These providers process data on our behalf and under their own terms and privacy policies:

• Vercel — hosting and serverless infrastructure, and Vercel Blob for storing the images you upload.
• Neon / Vercel Postgres — our database, where your account and menu data are stored.
• Google — Google OAuth sign-in, if you choose to sign in with Google.
• Google Analytics — website analytics on our marketing site, only with your consent (see "Website analytics" above).
• Anthropic (Claude) and Google (Gemini) — AI providers that power the AI Menu Assistant, voice transcription, and AI description and price suggestions. The instruction, menu content, or audio you submit is sent to them only to produce the result you asked for.
• Railway — hosting for our menu-import and website-style-import services, which read menus and websites you ask us to import.
• Cloudflare (Turnstile) — bot protection on our forms.
• Resend — sending our transactional email.
• Sentry (Functional Software, Inc.) — error monitoring. When something breaks in our app or on a published menu, the technical error report (error message, code location, browser and device type, page address without its query string) is sent to Sentry so we can fix it. We configure it not to collect names, email addresses, IP addresses, cookies or what you type, and we strip passwords, tokens and email addresses from reports before they are sent.

6. Bot protection (Cloudflare Turnstile)

We use Cloudflare Turnstile to help distinguish real people from automated bots on our sign-up, sign-in, and contact forms. This helps protect your account and our service from abuse.

7. Data retention

We keep your account and menu data for as long as your account is active. Published-menu analytics events are retained for up to 365 days and then deleted. You can request deletion of your data at any time, as described in "Your rights and choices" below.

8. Data security

We take reasonable measures to protect your information. Passwords are stored as bcrypt hashes, sessions are backed by our database with a limited lifetime, we use bot protection on our forms, and we apply access controls to limit who can reach your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

You can access, correct, or delete your account data. To request access to or deletion of your data, contact us at support@mymobilemenu.com or reach out through our Contact page. Deleting your account removes your menus and associated data.

10. Payments

Paid plans are billed through Stripe, Inc., our payment processor. When you set up payment (for example, at your first publish on a paid plan), you enter your card or other payment details directly on Stripe's secure checkout page; we never see or store your full card number. We store the identifiers Stripe gives us for your customer record and subscription, together with your plan, billing period, number of menus, price, and subscription status, so we can show your billing in your account and apply your plan. Stripe processes your payment information under its own privacy policy. Receipts and failed-payment notices are sent by Stripe. You can update your payment method, see invoices, or cancel at any time from Account → Billing → Manage billing.

11. Children's privacy

The service is not directed to children under 13 (or under 16 where a higher age applies), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.

12. International users

We are based in the United States, and your information may be processed and stored in the United States. By using the service, you understand that your data may be transferred to and processed in the United States.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date shown at the top of this page. We encourage you to review this policy periodically to stay informed about how we handle your information.

14. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at support@mymobilemenu.com or through our Contact page.

This Privacy Policy is governed by the laws of the State of Illinois, USA, without regard to its conflict-of-laws rules. Any disputes relating to this policy will be subject to the exclusive jurisdiction and venue of the state and federal courts located in Cook County, Illinois.