Privacy Policy

1. Who We Are

MenuHacker ("we," "us," or "our") is an AI-powered mobile application that helps users make healthier restaurant choices by analyzing menus via their device camera. This Privacy Policy describes how we collect, use, store, and protect information about you when you use the MenuHacker app or website (collectively, the "Service").

If you have questions about this policy, please contact us at privacy@menuhacker.app.

2. Information We Collect

2.1 Account Information

When you sign in with Google or Apple, we receive:

• Your display name
• Your email address
• A unique user identifier from the authentication provider
• Your profile photo URL (if provided by the auth provider)

We do not receive your password from Google or Apple — authentication is handled entirely by those providers.

2.2 Menu Scans & Images

When you scan a menu, the photo is uploaded to Cloudinary (our image storage provider) for processing by our AI analysis API. After analysis:

• The image URL, AI-generated nutritional data, and timestamp are saved to your personal scan history in Firestore
• Menu images are stored on Cloudinary servers
• Analysis results are stored per-user in Google Cloud Firestore

2.3 Usage Data

We do not run our own analytics. Standard server logs may record request metadata (timestamps, endpoints accessed) for debugging and reliability purposes. These logs are not used for advertising or sold to third parties.

2.4 Device Information

The app accesses your device camera solely to capture menu images. Camera access is only active when you are actively using the scan screen. We do not access your location, contacts, microphone, or any other device sensor.

3. How We Use Your Information

• To authenticate you and maintain your account session
• To process menu photos through our AI and return nutritional analysis
• To save your scan history so you can revisit past analyses
• To provide customer support when you contact us
• To improve the accuracy of our AI model using aggregated, anonymized scan data

4. Third-Party Services

MenuHacker relies on the following trusted third-party services:

• Firebase (Google) — Authentication and Firestore database. Firebase Privacy
• Google Gemini API — AI model for menu analysis. Google AI Terms
• Cloudinary — Image upload and storage. Cloudinary Privacy
• Vercel — Hosting for our serverless API. Vercel Privacy
• Sign in with Apple — Authentication for iOS users. Apple Privacy

We do not share your personal data with advertising networks, data brokers, or any other third parties beyond those listed above.

5. Data Retention

Your data is retained for as long as your account exists. You may delete your account at any time (see Section 7), which permanently removes your profile, scan history, and all associated data from our systems within 30 days. Menu images on Cloudinary are also deleted as part of this process.

6. Data Security

All data in transit is encrypted using TLS. Firestore data is secured with per-user authentication rules — only you can access your own scan history. Our API verifies your identity using Firebase ID tokens on every request. We regularly review our security practices.

While we take industry-standard precautions, no system is completely secure. If you believe your account has been compromised, contact us immediately at security@menuhacker.app.

7. Your Rights & Choices

Delete Your Account

In the app: Settings → Delete Account. This permanently and irreversibly deletes your account and all associated data. Alternatively, email privacy@menuhacker.app and we will process it within 30 days.

Access or Export Your Data

Email privacy@menuhacker.app to request a copy of all personal data we hold about you.

Correct Your Data

Your name and email are managed through your Google or Apple account. To change them, update your profile in those services.

Revoke Camera Access

You can revoke camera permissions at any time in your device's Settings. Note that revoking camera access will prevent the app's core scanning functionality from working.

8. Children's Privacy

MenuHacker is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly. If you believe a child has provided us personal data, please contact privacy@menuhacker.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or an in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: privacy@menuhacker.app
• Support: menuhacker.vercel.app/support