iMenu Store Manager Privacy Policy

Who is responsible for your data

Each business has its own server and its own separate database. The business decides what is kept there and who can see it. We set up and maintain these servers, so we may access them when that's needed to provide or support the service. If you use the app as a member of a business's staff, contact that business first about your data.

What the app collects

The app sends data only to the server of the business you connect it to, except for the app update check described below.

• Your account: your name, email address, user name and role. An administrator at your business creates your account; the app has no sign-up.
• Sign-in sessions: your IP address and device type, kept with each session for security.
• Business records you work with: products and stock, sales and receipts, expenses, purchases, cash sessions, traders and companies.
• Customer details: names, phone numbers and delivery addresses, which staff enter or see for sales and deliveries.
• Photos and files you choose to upload: product photos, bill photos and PDF bills, and CSV files you import.
• App updates: when checking for updates, the app sends Expo, our update provider, your device's operating system, a random ID for this installation, and the last error if an update failed. This isn't linked to your name or account.

The app doesn't include advertising, analytics or tracking tools, and doesn't track you across other companies' apps or websites. It doesn't access your location or your contacts.

Device permissions

• Camera: to scan barcodes and take photos. Scanning happens on your device, and only the resulting code is sent. A photo is sent only if you choose to use it.
• Photos: to pick images you choose to upload.

You can turn these off in your device's Settings. The rest of the app keeps working.

Some data stays on your device so the app can work offline: your session (in the device's secure storage), a copy of the product catalog, carts in progress, and sales waiting to be sent. Signing out deletes the session and the catalog. Carts and sales not yet sent stay on the device for the next sign-in, because unsent sales record real cash.

How data is used

Only to provide the service: running the business's shop, signing you in, keeping the app working and secure, and supporting the business. We don't sell personal data and don't use it for advertising.

Who receives data

Only service providers needed to run the service, under their own security and privacy obligations:

• Amazon Web Services: hosting and file storage, and WhatsApp order messages where a business turns them on
• MongoDB: databases
• Expo: app updates
• Delivery companies a business chooses: the customer's name, phone number and address, and the shipment's details, to deliver an order

We may also disclose data where the law requires it.

How long data is kept

Business records are kept for as long as the business uses the service, or longer if the law requires it. A session can last up to 400 days unless you sign out or it's ended sooner. Update data is handled by Expo under its own policy.

Your choices and deleting data

To see, correct or delete your data, or to withdraw your consent, ask your business's administrator, who can change or remove your account and records. You can also write to info@imenu.ai and we'll help or pass your request to your business. Some records may have to be kept for legal or accounting reasons.

Security

Data travels over encrypted connections (HTTPS), and each business's data is kept in its own database. No system is perfectly secure, so please report any concern to info@imenu.ai.

Children

The app is meant for working staff and isn't directed at children.

Changes

We'll update this page when this policy changes, and change the date above.