Your rights and your personal data

There are two distinct situations, and they should not be confused: which one you are in determines where to address your request.

Guests

If you only look at the menu, we process nothing that identifies you. We do not ask for your name, and you do not need to log in or create an account.

If you place an order or call a waiter, the following is processed:

Table number

So the order can be brought to your table.

Items, quantity, price and VAT rate

To prepare the order and produce the receipt.

The note you add to the order

To pass your request on to the kitchen.

Session identifier

To keep the orders from a single visit together and to limit abuse.

Time and the language you chose

For the queue in the kitchen and the language of the receipt.

Do not write medical information in the note field. If you have an allergy or an intolerance, tell the member of staff; they can also tell you which allergens each dish contains.

The session identifier is a random number stored on your own device. It contains no name or phone number. You can remove it by clearing site data in your browser. We do not use it to track you across restaurants.

Restaurant owners with an account

Account

Email address and password, or a Google account. We cannot see your password; our authentication provider stores it hashed.

Business details

The restaurant’s name, address, phone number, logo and public menu address.

Billing

Legal name, company registration and VAT number, invoice address and email.

Subscription

Chosen plan, trial period, start and end date, and the invoices issued.

Support

The messages you send us.

Deletion record

When you delete your account, the date and the number of documents removed, so we can prove the deletion actually happened. This record contains no email address, name or address.

We do not sell data. On this website and in the panel we use Google Analytics and Google Ads conversion measurement, only after you accept them in the cookie banner. No ad networks, no Meta Pixel, no social media plugins, no third-party chat tools. Guest menus opened by QR code contain none of this.

Performance of a contract

The data needed to run your account, publish the menu, pass orders to the kitchen and manage the subscription.

Legal obligation

Invoices and accounting records; tax law requires us to keep them.

Legitimate interest

Keeping the service running: the rate limit that curbs abuse, server logs kept for security and fault analysis, and support correspondence.

Consent

Statistics and advertising-measurement cookies on the website and in the panel (Google Analytics, Google Ads). They are only placed after you accept them in the cookie banner, and you can withdraw that choice at any time via “Cookie settings”. We keep no marketing list.

The GDPR gives you the following rights. Exercising them is free.

Access

You can ask for an overview of the data we hold about you, why we process it and who we share it with.

Rectification

You can have incorrect or incomplete data corrected. Account owners can correct most of it themselves in the panel.

Erasure

You can ask us to delete your data. Account owners can do this themselves in the panel.

Restriction

In certain situations you can ask us to pause processing.

Data portability

You can receive the data you gave us in a commonly used format and take it to another service.

Objection

You can object to processing based on legitimate interest; for us that means the server logs and the rate limit.

Withdrawing consent

Where processing is based on consent, you can withdraw it at any time. Withdrawal does not make the processing up to that point unlawful.

Restriction and data portability requests do not have a button in the panel yet; we handle them by hand when you write to us. The same deadlines apply.

1. Write to the address below and say which right you want to exercise.
2. Give us enough information to identify you. For account owners, writing from the email address registered on the account is normally enough.
3. We confirm that we have received your request.
4. We answer within one month.

If a request is complex, the period can be extended by two months. If so, we will tell you about the extension and the reason for it within the first month.

We charge nothing. That only changes for requests that are manifestly unfounded or excessively repetitive, and we will write out our reasons in that case.

We do not ask for a copy of your identity document. Asking for one without need would itself be a disproportionate act of processing.

If your request concerns an order at a restaurant, the decision is theirs, so we refer you to them and pass your request on to them without delay.

For guest requests we usually cannot identify you: we hold no name and no email address. We are not required to collect extra information from you purely to answer a request. That is not a refusal — the data we hold simply is not enough to identify you.

On this website and in the panel we ask, before placing anything beyond what is necessary, whether you agree to statistics and advertising-measurement cookies. Refusing is as easy as accepting, and nothing is blocked if you refuse. Guest menus opened by QR code contain no cookies at all.

Account, menu and business details

For as long as the contract lasts.

After you delete your account

Deleted immediately, except for invoices. We apply no waiting period.

Invoices and accounting records

Seven years. Dutch tax law requires it, and GDPR art. 17(3)(b) explicitly excepts this case from the right to erasure.

Orders in your panel

For as long as the restaurant’s account exists. The restaurant is the controller for this data; when the account is deleted, the orders go with it.

Server access logs

Kept only for security and fault analysis. These logs contain your IP address.

Language preference cookie

One year. It sits on your own device, not with us.

Statistics and advertising cookies

Your choice itself is kept for one year (six months if you refuse). Google Analytics cookies live up to two years on your device; the data at Google is kept for 14 months.

You can delete your account yourself in the panel, in the danger zone on the Account page. This removes your restaurant, categories, products, orders, images, printers and your login. It cannot be undone.

Only with service providers working on our behalf. Beyond that we hand over data only where a rule of law compels us to.

Google (Firebase)

Accounts, menus, orders and images are stored here.

DigitalOcean

Hosting of the application server.

Anthropic

Reading products from a photo of a menu, and translating the menu. Only the menu uploaded by the restaurant owner goes there.

Pexels

Searching for product photos. Only the search term goes out, for example “fresh pasta”.

MaxMind

Country detection, so the page opens in the right language. The database sits on our own server; your IP address is not sent anywhere for this.

Google Ireland Ltd. (Analytics and Ads)

Website and panel statistics and measurement of our advertising, only with your consent. IP addresses are not stored in full. Data may be processed in the United States under the EU–US Data Privacy Framework.

Some of these providers are based in the United States. For those transfers we rely on the European Commission’s standard contractual clauses and on a risk assessment we carry out separately for each provider.

Orders, table numbers and the free text you add to an order are not sent to the AI provider or to any other external service; they stay in our database.

Two features in the panel use a language model: reading products from an uploaded photo of a menu, and translating the menu into other languages. Both work only on the restaurant owner’s own menu, and the owner decides whether to accept the result.

We make no solely automated decisions that produce legal effects concerning you or similarly significantly affect you. We do not profile you.

• All traffic runs encrypted over TLS.
• Access to data is separated per restaurant by database rules: one restaurant’s data is not open to another account.
• A paired receipt printer can read print jobs only; it has no access to subscription or invoice data.
• Prices, VAT and receipt contents are always calculated on the server; an amount coming from the browser is never accepted.
• We cannot see passwords; our authentication provider stores them hashed.

If you believe we are not handling your data in line with the GDPR, you can lodge a complaint with a supervisory authority. We would ask you to write to us first; we can resolve most issues directly.

The Dutch supervisory authority: Autoriteit Persoonsgegevens, Postbus 93374, 2509 AJ Den Haag.

If you live in another EU country, you can also turn to your own supervisory authority; the list is on the European Data Protection Board’s website.

If this page changes materially, we notify account owners in advance through the panel or by email. The current version always sits at this address, with its date and version number.