Privacy Policy

1. Who we are

OneTapMenu ("we", "us", or "our") provides a digital menu platform that allows restaurants to publish and share their menus via QR code. This Privacy Policy explains how we collect, use, and protect information in connection with our service available at this website.

2. Information we collect

We collect two categories of information:

• Restaurant account data: Name, email address, restaurant name, logo, menu content, and brand settings provided when setting up an account.
• Usage data: Basic analytics such as page views and QR code scans, collected in aggregate and not linked to individual users.

We do not collect personal data from restaurant guests who scan a QR code and view a menu. No accounts, no tracking, no cookies are required for guests.

3. How we use your information

We use the information we collect to:

• Operate and maintain the OneTapMenu service
• Display your menu to your customers
• Send you service-related communications (e.g. account updates)
• Improve and develop new features

We do not sell your data to third parties or use it for advertising purposes.

4. Data storage and security

Your data is stored securely using Supabase, a cloud database provider. We use industry-standard encryption in transit (HTTPS) and at rest. Access to your data is restricted to authorized personnel only.

5. Data retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, unless we are required to retain it by law.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

To exercise any of these rights, contact us at the email address below.

7. Cookies

The public menu pages (viewed by your guests) do not use cookies. The restaurant dashboard may use session cookies strictly necessary for authentication. We do not use tracking or advertising cookies.

8. Third-party services

We use Supabase for database and authentication services. Supabase's own privacy policy applies to data processed through their infrastructure. We do not share your data with any other third parties.

9. Allergen information disclaimer

OneTapMenu is a platform that allows restaurants to publish their own menu content, including allergen and dietary information. We do not verify, audit, or guarantee the accuracy, completeness, or currency of any allergen or dietary information displayed on any menu.

Allergen and dietary data is entered solely by the restaurant operator. It is the restaurant's responsibility to ensure that this information is accurate and kept up to date. Ingredients, preparation methods, and allergen risks can change without notice and may not be reflected immediately on the menu.

OneTapMenu shall not be held liable for any injury, allergic reaction, illness, or harm of any kind resulting from reliance on allergen or dietary information displayed through our platform, including but not limited to cases of inaccurate data entered by a restaurant, omissions, technical errors, display glitches, or any failure of the platform to correctly render such information.

Guests with food allergies or dietary requirements should always confirm allergen information directly with the restaurant before ordering. Digital menus are provided for convenience only and should not be the sole source of allergen information.

10. Limitation of liability

To the fullest extent permitted by applicable law, OneTapMenu and its officers, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of the platform, including any errors or omissions in menu content provided by restaurant operators.

The platform is provided "as is" and "as available" without warranties of any kind, either express or implied, including but not limited to fitness for a particular purpose or uninterrupted, error-free operation.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The "Last updated" date at the top of this page always reflects the most recent version.

12. Contact

If you have any questions about this Privacy Policy or your data, please get in touch via our contact form.