Privacy Policy

Effective Date: May 11, 2026

1. Introduction

Menusha ("we," "our," or "us") is a mobile application that uses artificial intelligence to analyze restaurant menus against your personal health profile, providing personalized dish recommendations and safety ratings. We are committed to protecting your privacy and being transparent about the information we collect and how we use it.

This Privacy Policy explains what information Menusha collects, why we collect it, how we use and share it, and the choices you have. By using Menusha, you agree to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Authentication provider (email/password, Google, or Sign in with Apple)

2.2 Health and Dietary Information

To provide personalized menu analysis, we collect the health and dietary information you choose to enter during onboarding and in your profile settings, including:

• Health goals (e.g., weight management, heart health)
• Health conditions (e.g., diabetes, hypertension)
• Dietary restrictions (e.g., vegan, gluten-free)
• Allergies and their severity (e.g., peanuts, strict)
• Cuisine and protein preferences
• Spice tolerance and food dislikes
• Eating style preferences

This information is sensitive. We use it solely to personalize your menu analysis results and do not sell or share it with third parties for marketing purposes.

2.3 Menu and Scan Data

When you scan a restaurant menu, we collect:

• Photos of menus taken through the app or selected from your photo library
• Text extracted from menus via optical character recognition (OCR)
• Restaurant name (where available)
• AI-generated analysis results, dish safety ratings, and recommendations
• Your ratings and feedback on scan results

2.4 Usage and Technical Data

We automatically collect certain technical information, including:

• Subscription tier and monthly scan usage counts
• AI request logs (token counts, response latency, error rates)
• App version and device identifier
• Crash reports and non-fatal error logs (via Firebase Crashlytics)
• Feature usage and navigation events (via Firebase Analytics)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Menusha app and its AI analysis features
• Personalize dish recommendations and safety ratings based on your health profile
• Enforce subscription plan limits and manage your account
• Detect and prevent abuse of our AI services
• Improve OCR accuracy and AI analysis quality using anonymized scan data
• Monitor app performance and diagnose technical issues
• Respond to support requests

We do not use your health or dietary information for advertising, and we do not sell your personal information to third parties.

4. Health Data and Medical Disclaimer

Menusha collects health-related information solely to personalize the menu analysis experience. The app's output is for informational purposes only and is not a substitute for professional medical or dietary advice. Always consult a qualified healthcare provider regarding dietary decisions related to medical conditions or allergies.

If you are using Sign in with Apple, Apple may provide us with a name and email address. If you choose to hide your email, Apple will provide a private relay address. We do not receive health data from Apple.

5. How We Share Your Information

We share information only as necessary to operate the app, and only with the following categories of service providers:

5.1 Firebase (Google)

We use Google Firebase for user authentication, cloud database storage (Firestore), serverless functions, file storage, crash reporting (Crashlytics), and usage analytics. Firebase processes data in accordance with Google's privacy policies. Learn more at firebase.google.com/support/privacy.

5.2 Anthropic (Claude AI)

Menu text and your dietary and health preferences are sent to Anthropic's Claude AI model via a secure server-side proxy to generate personalized dish analysis. Requests are authenticated and no raw data is exposed to the client. Anthropic's privacy policy is available at anthropic.com/privacy.

5.3 Google Sign-In

If you choose to sign in with Google, your Google account information is used for authentication only, in accordance with Google's privacy policies.

5.4 Sign in with Apple

If you choose to Sign in with Apple, authentication is handled by Apple in accordance with Apple's privacy policies.

We do not share your information with advertisers, data brokers, or any third party for marketing purposes.

6. Data Retention

We retain your personal account information and health profile for as long as your account is active. Scan history is retained until you delete it or delete your account.

When you delete your account, we permanently delete your personal information, health profile, and any personally identifiable fields associated with your scans. Certain anonymized operational data (such as AI response quality metrics and OCR accuracy data) may be retained in de-identified form to improve the service.

7. Account Deletion

You can delete your Menusha account at any time from Profile > Delete Account within the app. Deletion is permanent and cannot be undone. Upon deletion:

• Your Firebase authentication account is permanently removed
• Your health profile and personal information are deleted from our database
• Your scan history and personally identifiable data are removed
• Any anonymized operational data is retained in de-identified form only

8. Data Security

We take reasonable measures to protect your information, including:

• All data is transmitted over encrypted connections (TLS/HTTPS)
• Firebase security rules restrict data access to the authenticated account owner only
• AI requests are routed through a server-side proxy — your API credentials and health data are never exposed in the client app
• Subscription and billing status is managed server-side and cannot be modified by clients

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

Menusha is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

10. Your Rights and Choices

You have the following rights with respect to your information:

• Access and correction: You can view and update your health profile and preferences at any time within the app.
• Deletion: You can delete your account and all associated personal data at any time from within the app (see Section 7).
• Data portability: You may contact us to request a copy of the personal information we hold about you.
• Opt-out of analytics: You may contact us to opt out of Firebase Analytics data collection.

11. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the address below.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this policy and, where appropriate, by providing notice within the app. Your continued use of Menusha after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

admin@menusha.ai
menusha.ai