Privacy Policy
We are One Menu Inc. and in this Privacy Policy we are referred to as “we”, “us”, or “our”. We understand that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who uses our Services. We will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.
This Privacy Policy describes how One Menu Inc. collects, uses, and discloses your Personal Information. Please read this Privacy Policy carefully and ensure that you understand it.
1. What This Privacy Policy Covers
This Privacy Policy applies to your use of our Services. Our Services may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
When you use our Services we collect certain information about your device, your interaction with the Services, what you choose to give us, such as your diet profiles and snaps, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.
In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.
References in this Privacy Policy to our “Services” include our Website (whatisedible.com) and any related subdomains, desktop and mobile applications, or APIs provided by One Menu Inc., including the Edible app (eat.whatisedible.com), the menus we show on menus.whatisedible.com and in embeds on restaurants’ own websites, and the Menu Builder (build.whatisedible.com).
2. The Personal Information we collect
In order to provide you with our Services, we collect, use, and disclose personal information to operate our business as necessary. Personal Information is information about an identifiable individual, as defined in the relevant and applicable legislation. We collect information when you provide it to us, including through your use of our Services, as further described below. This includes gathering Personal Information submitted through our Services or through communication with Our employees via email, social media, or other means and this includes:
A. Information You Provide To Us
Contact Information: when you create an account for the Edible app, we collect your email address. When a business registers for the Menu Builder, we collect its contact’s name, address, phone number, and email address;
Region: the region you choose in your Account, which sets the food-labelling rules menus are read against;
Personal Information: when you register for our Services, where applicable, we collect personal details, such as your name, postal and email addresses, phone number, and other contact information and personal information you choose to provide to us when you interact with us;
Special Category Data: we do not process special categories of personal information. Your diet profiles hold health information, but they are encrypted on your device and we cannot read them, as section 2C explains;
Feedback and Marketing Preferences: we collect your marketing preferences and feedback from Services provided;
Payment Information: when you pay for any of our Services, such as a plan in the Edible app or the Menu Builder, this includes bank account information and payment card details;
Snaps: the photos or PDF pages of a menu you snap (up to 10 for each snap), the restaurant’s name if you give it, and the menu’s region;
Usernames: if you choose one, and the lists you make and share;
Places you add: the pin you drop and the name you give the place.
B. Information Collected From Your Usage
Information Collected Through Automated Methods: we may collect details of your visits to our Services and information collected through cookies and other technologies including: Internet protocol (IP) address;
Computer or mobile-device operating system and browser type;
Type of mobile device and its settings;
Location: we work out the map’s starting area from your IP address. When you choose “Use my location”, your device’s location centres the map. When you snap a menu without picking a place first, we save your browser’s location at that moment with the snap, on your account, and never show it to others. If a photo carries a location, we remove it before we store the photo, keep it privately and use it only to place your snap;
Place searches: the text you type and the map’s position, sent to our places service without your account. Searches that find nothing are kept as text, with the day and the country;
Usage analytics: in the Edible app, the pages you view, what you tap and key actions such as creating a profile, snapping a menu or sharing a list, tied to your account when you are signed in. All text in the app is masked on your device before anything is sent, so your profiles and anything you type never reach our analytics. Section 6 says more, and how to turn it off;
Error reports: when something goes wrong, details of the error, which can include your IP address.
C. Your Diet Profiles
Your diet profiles are health information, so we built the Edible app so that we never see what is in them:
What a profile holds: the allergies, intolerances and diets of the person it is for, whether that is you or someone else, children included;
How it is protected: each profile is encrypted on your device with its own profile key, a long random code that works like a password for that one profile, before anything leaves your device;
What we keep: an encrypted copy, so a profile survives a lost phone and can reach the people you share it with. Without the key, nobody can read it, including us;
Where the key is: you hold it, not us. It is on your devices, in the copy you save when you make the profile, and inside any share link you send. Opening a share link does not send the key to us. Because we never have the key, we cannot open, reset or recover a profile if every copy is lost;
Matching: menus are checked against your profiles on your device, so your allergies and diets never have to be sent to us;
On your account: only each profile’s name, so a new device can show which profiles you have. Names are not encrypted, so you may prefer a first name or a nickname.
D. What Other People See
Community snaps: unless you choose otherwise, signed-in accounts see the snaps you share on the map. Each is labelled “Community snap” and shows the menu’s reading, its photos, the place and the date. We remove the photos’ location and other hidden details first. People do not see your name or username, but Edible can link a shared snap to your account;
Usernames: shown only on the lists you share, never on your snaps;
Shared lists: anyone with the link sees the list’s name, its places and their addresses, the menu shown for each place, the date you shared it and your username. People who save it see your changes. You cannot see who saved it;
Shared profiles: anyone with a profile’s share link sees the whole profile, with view-only permissions. Their copy stays on their device until they remove it;
Open counts: when a signed-in person opens a menu you shared, we add one to its count, without storing anything about them. Only you can read the count;
Places you add: the pin and the name become a public place on the map. The place does not show or store who added it.
3. How We Use Your Information
Here are some of the ways we may use the personal information you provide us;
To register and provide you with access to our Services;
To facilitate transactions and payments;
To read the menu in each snap you take, using our automated menu reader, and to show it on your map;
To show the snaps and lists you share to other people, as described in section 2D;
To show you which dishes suit your diet profiles, on your device;
To personalize your user experience and recommend food services;
To oversee our interaction with you, which includes handling feedback and conducting customer surveys;
To communicate with you about our Services, related issues, support requests, promotions and new Services that may be of interest to you;
To provide you with general and tailored electronic and non-electronic direct marketing materials. Additionally, we support targeted advertising efforts related to our Website and Services, along with those of our business partners (including promotions, contests, prize draws, competitions, and sweepstakes);
To evaluate how you use our existing Services so that we can customize and enhance our Services, as well as your overall customer experience and develop new Services;
To allow you to participate in interactive features of our Service when you choose to do so;
To anonymize and/or aggregate information for business development and business analytics purposes, which encompasses consumer and operational research. This assists us in evaluating the efficiency of our sales, Services, marketing, and advertising efforts, as well as in analyzing market trends and assessing future customer demand;
To detect, investigate, and prevent fraudulent transactions and other illegal activities;
To comply with legal obligations and enforce our terms of service;
To notify you about changes to our Services;
For other purposes for which we provide specific notice at the time the information is collected.
4. Legal Bases For Processing
We will process your personal information lawfully, fairly, and in a transparent manner. We collect and process information about you only where we have legal bases for doing so. These legal bases depend on the Services you use and how you use them. Where we are subject to the General Data Protection Regulation (“GDPR”), we process your personal information on the basis of:
Consent: This applies where you give us consent to process your data for a specific purpose - Article 6(1)(a) GDPR.
Contract: This applies where it’s necessary for us to process your data in order to perform a contract between us, or to take steps at your request before entering into such a contract - Article 6(1)(b) GDPR.
Legal Obligation: We may need to process your data to comply with a legal obligation if we are required to do so by law, this may include, verifying your age and your identity before the conclusion of a contract, to prevent fraud - Article 6(1)(c) GDPR.
Legitimate Interests: Where the above legal bases do not apply, we may still be able to process your data if doing so satisfies a legitimate interest of ours which is not overridden by your own data protection interests to achieve the purposes set out above in section 3.
In particular:
We rely on contract for your account, your snaps, your lists and your plan;
We rely on legitimate interests to show the snaps you share to other people without your name, building a map of menus that helps people with food allergies and intolerances. We have assessed that this does not override your interests, and you can keep any snap to yourself, or take all your snaps off the map, at any time;
We rely on legitimate interests for usage analytics and error reports, to keep the Services working and improve them. You can turn usage analytics off in your Account;
Your diet profiles are encrypted on your device, and we never hold the key, so we do not process what is in them and cannot link it to anyone. Menus are matched to your profiles on your device.
5. Sharing Your Information
No personally identifiable data is ever sold to third parties by One Menu Inc. We limit access to your personal information to employees and authorized service providers (information service providers and marketing agencies), on a need-to-know basis, so they can perform designated functions for us such as;
analytics, customer support, data storage, debt collection, email communications, error logging, hosting, maintenance, marketing, product design, product testing, surveys, system administration and web conferencing;
processing credit and debit card transactions, where the bank or card processing agency requires us to verify your personal details for authorization. We do not store payment information which is passed directly to our payment service provider, Stripe, which is certified at PCI Level 1.
Our main service providers, what they do for us and where:
Supabase: accounts, snaps, lists, and your acceptance of our terms and this policy. European Union.
Cloudflare: hosting, the encrypted copies of diet profiles, menus and photos, and working out your area from your IP address. Global.
Our menu reading service: reading the menu in each snap you take. It sends the photos to OpenRouter and the AI model provider it uses, in the United States.
Langfuse: a record of each reading, including the instructions and the result, to check and improve readings. European Union.
PostHog: usage analytics. European Union.
Sentry: error reports. European Union (Germany).
Bunny: map tiles, which means it sees your IP address and the area you view, and a copy of our backups. Backups in the United States (New York).
Our places service: place search, on a server we run. European Union (Germany).
Tally: our feedback form, including the email address we fill in for you and what you write. European Union (Belgium).
Stripe: payments, for plans in the Edible app and the Menu Builder. United States.
Mapbox: address search, in the Menu Builder only. United States.
Bunny Fonts: the fonts restaurants choose for their menus, in the Menu Builder and on menus.whatisedible.com. European Union.
We may share (whether or not for payment) aggregated and anonymized data that does not identify you or any individual user, for purposes such as advertising, analytics, industry reporting or research.
If we decide to merge, sell or transfer all or part of our business, we may share your information with buyers or other parties involved in the corporate transaction.
We may share your information with our professional advisers such as our lawyers, auditors, and accountants.
We may also be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority, such as law enforcement.
6. Cookies and Device Storage
A Cookie is a small text file that a website saves on your device (such as a computer, mobile phone, or tablet) and reads during your future visits. They are commonly employed to enable websites to function or function more effectively, while also offering insights to website owners. Cookies permit the website to recognize you, enabling it to, for instance, recall your login information for your next visit.
Our Website may place and access certain first-party Cookies on your computer or device. First-party Cookies are those placed directly by us and are used only by us. We use Cookies to facilitate and improve your experience of our Website and to provide and improve our Services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.
All Cookies used by and on our Services are used in accordance with relevant Cookie Law.
On the menus we show and in the Edible app, we do not use cookies or device storage for analytics or advertising. On whatisedible.com, we use analytics and advertising cookies only if you accept them in our cookie banner, and you can change your choice at any time with the cookie icon in the corner of every page. The Menu Builder uses two analytics cookies, described below. The other cookies and storage we use are strictly necessary, or are used to remember a choice you made, so we do not ask for your consent to set them.
Certain features of our Services depend on Cookies to function. Cookie Law deems these Cookies to be “strictly necessary”. These Cookies are listed below. Your consent will not be sought to place these Cookies, but it is still important that you are aware of them. You may still block these Cookies by changing your internet browser’s settings, but please be aware that our Services may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing them.
(a) Strictly Necessary First Party Cookies:
Authentication – recalls your login information for your next visit to build.whatisedible.com and eat.whatisedible.com. Cookie served by Supabase.
Site functionality – ensures key features of our site work properly.
Device storage in the Edible app – the app keeps your diet profiles, snaps and settings in your browser’s storage, so it works offline and your profiles stay on your device.
(b) Functional Cookies
Tally – when you open our feedback form, Tally, which runs it, stores an identifier for you as a respondent and your progress in the form in your browser. Nothing is stored until you open the form.
(c) Analytics
PostHog – measures how our Services are used, so we can improve them. On the menus we show, it stores nothing on your device and counts visits without any identifier. On whatisedible.com it does the same, unless you accept analytics cookies in our banner: then it keeps an identifier in a cookie for up to a year, which the Menu Builder can also read, so we can see how people move from our Website to the Menu Builder, and it may record your visit as a replay. In the Edible app, it stores nothing on your device: it keeps its identifiers in memory for your visit only, and ties what you do to your account when you are signed in. It records the pages you view, what you tap and key actions such as creating a profile, snapping a menu or sharing a list, and it may record your visit as a replay. All text in the app, including the labels screen readers read out, is masked on your device before anything is sent, so your profiles and anything you type never reach our analytics. You can turn this off with “Help improve Edible” in your Account.
PostHog in the Menu Builder – keeps an identifier in a cookie and in your browser’s storage for up to a year, so it can recognise your browser between visits. When you are signed in, it ties what you do to your account, including your email address. It may record your visit as a replay. What you type into forms is hidden on your device first.
Sign-up attribution in the Menu Builder – when you arrive at build.whatisedible.com/try, a cookie records the campaign tags in the link, the site that sent you and the page you landed on, for 24 hours. If you create an account in that time, they are added to your account in PostHog, so we can see how people find the Menu Builder.
(d) Advertising Cookies
Meta Pixel – on whatisedible.com, used for ad personalisation, marketing tracking and conversion measurement. Data is shared with Meta Platforms Ireland Ltd. Only set if you accept marketing cookies in our banner. It is loaded through Google Tag Manager, which loads once you answer the banner and sets no cookies of its own.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected or as required by law. Our record-keeping practices are in compliance with relevant laws. We will keep and utilize your information as needed to manage our relationship with you, enhance your personalized customer experience, meet our legal obligations (such as retaining your information to comply with tax or revenue laws), resolve disputes, enforce our agreements, and as otherwise detailed in this Privacy Policy.
We do not delete your information after a fixed period. Instead:
We keep your account, snaps, lists and the encrypted copies of your diet profiles while your account is open;
A shared snap stays on the map until you make it “Just for me”, archive it, or we take it down;
Places you add, and place searches that found nothing, are kept without any record of who added or searched for them;
Our backups keep a copy for up to 12 months.
In some circumstances, we will anonymize your personal data (so that it can no longer be associated with you), in which case we may use this information indefinitely without further notice to you.
8. Data Security
We take reasonable measures to protect your personal information. We make efforts to protect against accidental loss, unauthorized access, disclosure, alteration, or destruction.
Your diet profiles are encrypted on your device before a copy reaches our servers, and we never hold the key. We remove location and other details from your snap photos before we store them.
However, no security system is impenetrable and due to the inherent nature of the internet, we cannot guarantee that information, during transmission, or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others.
9. International Data Transfer
Your personal information may be collected, used, processed, transferred, and retained by us, and our service providers in multiple countries (including Canada, the United States, the United Kingdom, and the European Economic Area (“EEA”)) which may be outside the region in which you are situated and may have different privacy or data protection legislation, and may therefore be subject to the laws of these countries.
Our Services run on the providers listed in section 5, in Europe, the United Kingdom, Canada and the United States. In particular, your snap photos are read by an AI model provider in the United States, and copies of our backups are kept in the United States. This means that when we collect your personal information, we may process it in any of these countries which have differing levels of protection for personal information.
Since we are subject to the GDPR, we would only transfer your personal information to countries that are recognized under the GDPR and UK law as having an adequate level of data protection. In cases where such adequacy isn't automatically ensured, we take the necessary steps to establish or confirm that all recipients of your data will maintain an adequate level of data protection. This often involves entering into suitable data transfer agreements that adhere to Standard Contractual Clauses.
10. Third-Party Links
Our Website may contain links to other third-party websites. We do not endorse, screen, or approve, the privacy practices or content of such other websites. If you choose to follow a link to any of these third-party websites, please be aware that they may have their own privacy policies and we do not assume any responsibility for or liability for their policies or how they process your personal information. This Privacy Policy applies solely to information collected by us.
11. Your Rights
Under the relevant and applicable law, you may have rights under data protection laws in relation to your personal data. These rights are set out below. If you wish to exercise any of these rights, please contact us as set out in section 14. These rights include:
Request access to your personal data (a "data subject access request"). This enables you to check the type of personal information we hold about you and to access or request a copy of the personal data we hold about you.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data corrected, supplemented, anonymized, or deleted.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data (but still retain it).
Request the transfer of your personal data to you or to a third party. We will provide your personal data in a structured, commonly used, machine-readable format.
Object to processing of your personal data. You have a right to object where we are relying on a legitimate interest.
Withdraw consent at any time where we are relying on consent to process your personal data. The lawfulness of any processing carried out before you withdraw your consent will not be affected. If you withdraw your consent, we may not be able to provide certain Services to you. We will advise you if this is the case at the time.
Lodge a complaint with your data protection authority. It is worth noting that some authorities expect you to address any complaints with us before contacting the regulator.
In the Edible app:
To delete your account, email us. We delete your account and everything linked to it in our database, including your snaps and lists. Some things stay, linked to no one: the encrypted copies of your diet profiles, which we cannot read, the menu photos and readings held by our menu reading service, and the analytics recorded about your visits. Places you added stay on the map;
To take your snaps off the map, make each one “Just for me”, or turn off “Share my snaps on the map” in your Account and choose to take your past snaps off too;
To stop usage analytics, turn off “Help improve Edible” in your Account;
Deleting a diet profile deletes our encrypted copy of it.
12. Children
You must be at least 16 to create an account. If we learn that someone under 16 has created an account, we will delete it. Parents and carers can make diet profiles for their children. A profile stays encrypted, and we cannot read it.
13. Changes To This Policy
We may revise this Privacy Policy from time to time at our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law, and ask you to accept the new version in the Edible app. The date that this Privacy Policy was last updated appears at the top of this page.
14. Contact
If you have any questions about this Privacy Policy, want to exercise your rights, or want to discuss any privacy issue, please contact the person responsible for protecting personal information at One Menu Inc., by email at privacy@whatisedible.com.