Privacy Policy

1. Introduction

At PocketMenu, your privacy is a priority. This Privacy Policy describes how we collect, use, and process your personal and business information when you use our platform, services, and associated mobile applications (collectively, the "Service").

2. Information We Collect

We collect information to provide a reliable and efficient service to cafés, restaurants, and their guests:

• Account Information: When you register as an owner, we collect your business name, owner name, email address, password hash, and contact details.
• Café & Menu Details: All information you upload about your establishment, including menu item names, descriptions, pricing, veg/gluten-free options, and logo assets.
• Usage & Analytics Data: We track public menu page views (total views) to compile analytics reports for establishment owners. We do not collect personal identification information (PII) from café visitors who browse menus.

3. How We Use Information

We process your data for the following legitimate business purposes:

• To initialize, host, and publish your digital menu pages online.
• To provide account verification and secure owner login.
• To generate analytics metrics (like daily page views) for your establishment dashboard.
• To contact you regarding updates, system maintenance, billing notices, or support inquiries.

4. Cookies & Local Storage

PocketMenu uses the following types of cookies and browser storage:

• Authentication Cookies: Essential cookies set by our authentication provider (Supabase) to maintain your login session. These are strictly necessary for the Service to function.
• Admin Session Cookies: Used to authenticate administrative access to the platform.
• Cookie Consent Preference:Stored in your browser's local storage to remember whether you have accepted or declined cookies.
• Analytics Cookies: Set by Google Analytics to measure page views and understand how the Service is used, so we can improve it. Only set after you accept cookies.
• Advertising & Ad-Targeting Cookies: Set by the Meta Pixel (Facebook and Instagram) to measure how our advertising performs and to show PocketMenu ads to people likely to find it useful. Only set after you accept cookies.

Analytics and advertising cookies are onlyset after you accept them in our cookie banner. If you decline — or simply never answer the banner — those scripts are never loaded and no such cookie is placed on your device. Essential cookies are always required for the Service to function. We never sell your data.

5. Third-Party Services

We rely on the following third-party services to operate PocketMenu. Each processes data on our behalf:

• Supabase (database, authentication, file storage) — processes account information, menu data, and uploaded images. Supabase Privacy Policy
• Vercel (hosting and deployment) — serves the application and may process request metadata (IP addresses, user agents) for security and performance purposes. Vercel Privacy Policy
• Google Fonts (typography) — may collect usage statistics. Google Privacy Policy

6. Data Protection & Compliance (GDPR & CCPA)

We comply with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Your Rights Under GDPR

If you are located in the European Economic Area, you have the right to:

• Access, correct, or delete your personal data
• Export your data in a portable format
• Object to or restrict processing of your data
• Withdraw consent at any time

Your Rights Under CCPA

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information — PocketMenu does not sell your personal information
• Non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at pocketmenuofficial@zohomail.in. We will respond within 30 days.

7. Data Retention

We retain your data according to the following policies:

• Active Accounts: Your account data, menu content, and uploaded assets are retained for as long as your account remains active.
• After Account Deletion: Upon account deletion, your personal data, café information, menu items, and uploaded images are permanently deleted within 30 days. Encrypted database backups that may contain residual data are automatically purged within 90 days.
• Analytics Data: Aggregated, non-identifiable analytics data (such as total page views) may be retained indefinitely for service improvement purposes.

8. Data Security

We enforce SSL/TLS encryption across all network transfers and store sensitive credentials using industry-standard hashing protocols. While we implement robust safeguards, no digital system is entirely foolproof, and we encourage owners to maintain unique, secure password credentials.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will update the "Effective Date" at the top of this page. For significant changes, we will make reasonable efforts to notify registered users via email. Your continued use of PocketMenu after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns regarding our privacy practices, or wish to request data removal, please contact us at:

Please also review our Terms of Service which govern your use of PocketMenu.