Privacy Policy
Last updated: October 12, 2026
MenuBloom ("we", "us") provides digital QR menus for restaurants at getmenubloom.com. This policy explains what information we collect, why, and the choices you have.
Who this applies to
Restaurant owners who create an account, and guests who scan a QR code to read a menu.
Information we collect
- Account details: your email address and password. Passwords are stored in encrypted (hashed) form by our database provider; we cannot see them.
- Menu content: your restaurant name, tagline, logo, dishes, prices, descriptions, translations and design choices. Menu content is public by design, because guests view it.
- Payment details: payments are made through PayPal. We do not receive or store your card number. PayPal shares with us the payer's name, email, amount and any note you add.
- Usage and device data: basic technical data such as pages visited, browser type and approximate location derived from IP address, collected through cookies and similar technologies, including the Meta Pixel on our marketing and account pages. When you sign up, the Meta Pixel may send a hashed (scrambled) version of your email address to Meta so we can measure which ads led to sign-ups. The Meta Pixel does not run on the public menu pages that guests view.
Guests who view a menu do not need to create an account, and we do not ask them for personal information.
How we use information
- To provide the service: host your menu, generate your QR code, translate your menu and keep your account secure.
- To manage your trial and subscription, and to send service emails such as trial and renewal reminders.
- To measure and improve our advertising and product, for example knowing how many people who saw an ad created a menu.
- To respond to your questions and to comply with legal obligations.
We do not sell your personal information.
Service providers we use
- Supabase - database, authentication and logo storage (United States)
- Vercel - website hosting, and AI Gateway for menu translation
- Anthropic - AI model that translates the menu text you choose to translate
- PayPal - payment processing
- Meta - advertising measurement through the Meta Pixel
These providers process data on our behalf under their own security and privacy commitments.
Cookies and advertising
We use cookies needed to keep you logged in, and the Meta Pixel to measure our ads. You can limit ad tracking in your browser settings, through your Facebook ad preferences, or with tools such as the Digital Advertising Alliance opt-out at optout.aboutads.info.
How long we keep data
We keep your account and menu while your account is active. If you ask us to delete your account, we delete your account and menu within 30 days, except for records we must keep for tax or legal reasons.
Your rights
You can view and edit your menu at any time in your account. You can ask us to access, correct or delete your personal information, and California residents have rights under the CCPA, including the right to know and to delete. To make a request, email us at mariayagobov@gmail.com. We will not treat you differently for exercising your rights.
Security
We use encrypted connections (HTTPS), access rules that let each owner edit only their own menu, and trusted providers. No system is perfectly secure, so please use a strong, unique password.
Children
MenuBloom accounts are for businesses and are not intended for children under 16.
Changes
If we make important changes to this policy, we will update the date above and, where appropriate, notify account owners by email.
Contact
Questions about privacy: mariayagobov@gmail.com