Privacy Policy
Last updated: 13 October 2026
Menumark ("we") is an app that reads photos of restaurant menus and marks the dishes that fit your goal. This policy explains what we collect, why, who processes it, how long we keep it, and your rights. Controller: MelberLabs (individual developer, Türkiye), contact melberlabs@gmail.com.
What we collect and why
| Data | Purpose | Kept |
|---|---|---|
| Menu photos you choose to analyse | Sent through our server to Google's Gemini API to read the menu. We do not store them on our server; they exist only for the duration of the request. A copy stays on your phone so the marked menu can be shown. | Not stored by us |
| Scan results (dish names, estimated calories and protein, the dish you mark as ordered) | Your history on every phone you sign in to; the weekly summary for Pro | Until you delete the scan or your account (free accounts keep the last 10) |
| Profile: goal, daily calorie and protein target, diet choices, allergies, language | Ranking dishes for you. Diet and allergy choices are not sent to Google. | Until you change them or delete your account |
| Email address and a hashed password, or your Sign in with Apple identifier | Your account; verification and password-reset codes | Until you delete your account; unverified sign-ups after 24 hours |
| A random install identifier (guest mode) | Counting the free scans available without an account | Deleted after 30 days without use, or when you delete your data |
| Subscription status from Apple or Google | Unlocking Menumark Pro on all your phones | Until you delete your account |
| Reports you send about a result | Improving results | Kept without your identity after you delete your account |
Age, height and weight you enter to calculate a target stay on your phone; only the resulting target is saved. We do not use advertising, tracking or third-party analytics, and we do not sell data. Server logs contain no email addresses, IP addresses, tokens or photos; rate limits use one-way hashes of IP addresses.
Who processes data for us
Google LLC (Gemini API, United States) — menu photos for analysis, under Google's paid API terms, which do not allow using them to train Google's models. Amazon Web Services (Lightsail, Frankfurt, Germany) — our server and database. Resend (United States) — sending verification and password-reset emails. Apple and Google — sign-in (Apple) and subscriptions. Transfers to the United States rely on the providers' standard contractual safeguards.
Legal bases
Performing the service you ask for (your account, scans, subscription); your explicit consent for sending menu photos to Google's AI, given in the app before your first scan and withdrawable by deleting your data; and our legitimate interest in preventing abuse (rate limits).
Security
All traffic is encrypted (HTTPS). Passwords are stored with scrypt; session tokens and codes only as hashes. Daily backups are kept for 7 days.
Your rights
You can see and change your profile in the app, delete any scan, and delete your account in the app (Profile → Delete account) or on our deletion page. Under the GDPR and Türkiye's KVKK you may also ask for access, correction, deletion, restriction or portability, or object, by emailing us; you may complain to your data protection authority.
Health information
Calorie and protein figures are estimates, not measurements, and not medical advice. Allergen warnings are only a list of what a dish commonly contains; a photo cannot confirm ingredients — always ask the restaurant.
Children
Menumark is not directed at children under 13.
Changes
We will post changes here and update the date below; material changes are shown in the app.