Privacy Policy

1. Introduction and App Purpose

SafeMenu ("the App") is a food safety platform designed to help UK hospitality businesses manage allergen data and generate compliant digital QR menus. This policy explains how we handle your data when you use our services.

2. Information We Collect

We collect information you provide directly to us, such as your name, email address, business name, and billing information. When you sign in with Google, we access your Google primary email address and basic profile information to create and authenticate your account.

3. GDPR Compliance: Legal Basis & Processing

For users in the EU/UK under GDPR and UK GDPR regulations:

• Data Collected: Identity data (name, email), Business data (restaurant details, menus, recipes), usage telemetry, and billing details.
• Legal Basis: Performance of a Contract (to deliver digital allergen menu services) and Legitimate Interest (service maintenance and security).
• Third-Party Processors: Firebase/Google Cloud Platform (hosting and authentication), Lemon Squeezy (Merchant of Record and payment processing), and Google Analytics (anonymous traffic analytics).
• Data Subject Rights: You have the right to access, rectify, export (data portability), restrict processing, or request full erasure of your personal data. Contact us at [email protected] to submit a Subject Access or Erasure Request.

4. Google API Services User Data Policy (Limited Use)

SafeMenu's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not allow humans to read this data unless specifically authorized for security or legal compliance.

5. Data Storage and Security

We use industry-standard security measures to protect your data. Your account information and recipe data are stored securely using Firebase (Google Cloud). Payment information is handled exclusively by Lemon Squeezy (our Merchant of Record); we do not collect or store credit card details on our servers.

6. Data Retention and Deletion Requests

We retain your business data for as long as your account is active. If you delete your account or submit an erasure request, we remove your personal data and recipe information from active databases within 30 days.

7. Your Rights & Erasure Requests

You have the right to access, update, export, or delete your personal information at any time via your dashboard or by emailing [email protected].

8. Cookies & Local Storage

We use essential cookies and browser storage to maintain your authentication session and store preferences. You can manage cookies via browser settings or our cookie banner.