Privacy Policy
Last updated: 31 August 2026
What we collect
- Account: your name, email address and a securely hashed password. We never store your password in readable form.
- Restaurant profile: venue name, type, cuisine, emirate, Instagram handle and logo — used to personalise templates.
- Menu content: everything you type or upload into a menu, including images.
- Usage counters: how many AI actions you have used today.
When a guest opens your published menu
Each view of a published menu records one small row so you can read your own traffic: the time it happened, which of your menus it was, the table code printed on the QR (only if you printed one — that is the ?t= on the link), whether the menu was read in English or Arabic, whether the device had opened that menu before, whether it is a phone, a tablet or a computer, and whether the guest arrived by scanning a code or by following a link from another site.
What is not recorded: no name, no IP address, no location, no stored browser fingerprint, no advertising identifier, and no record that follows a guest between your menu and anywhere else. The device type and the “arrived from a link” flag are worked out from the request and then the underlying details — the browser's user-agent string and the referring address — are discarded rather than stored. The returning-device flag is a single mark the guest's own browser keeps on their device; clearing their browser data erases it. These rows are deleted automatically after 400 days.
What we do not do
We do not sell your data, we do not run advertising trackers, and we do not use third-party analytics that profile your visitors. Nothing we record about a menu view can identify the guest who made it, and nothing is shared with anyone else.
Where it lives
Data is stored in MongoDB Atlas. Sessions use a signed, http-only cookie — it identifies your account and nothing more. Published menus are readable by anyone with the link; unpublished menus are visible only to you.
AI processing
When you use AI features — importing a menu from a photo or text, writing descriptions, translating, or remixing a design — that content is sent to Anthropic's Claude API to generate the result. It is used to answer your request, not to train models. If you never use those features, nothing is sent.
Your rights
You can export everything we hold about you as JSON, correct your details, or permanently delete your account and all associated data — all from Settings. Deletion is immediate and irreversible.
Retention and contact
We keep your data while your account exists. Password-reset links expire after 30 minutes. For any privacy question, write to privacy@qaima.online.