Privacy Policy

Last updated: 22 July 2026

1. Introduction

AllaMenu ("we", "our", or "us") operates the AllaMenu platform, including our web application, mobile dashboard, the Menu Points wallet app, and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Restaurant owners & staff

• Account information (name, email, phone number)
• Restaurant details (name, address, menu items, pricing)
• Order and transaction data
• Device information for push notifications (FCM tokens)

Customers browsing the web menu

• Order details (items selected, table number, order type)
• Optional name and phone number, if provided for delivery
• Device type and browser information, for analytics

You can browse a menu and place an order without creating an account or signing in. An account is only required for the loyalty features described below.

Menu Points wallet account holders

The Menu Points wallet app requires an account so that loyalty points can be attached to you. When you sign in we collect and store:

• Your phone number, which you verify with a one-time password (OTP) sent by SMS. This is your account identifier.
• A display name, if you choose to provide one.
• Your loyalty balance and tier — points earned, points redeemed, points expired, and your current tier.
• Your loyalty transaction history — which participating restaurant awarded or redeemed points, the amount, and when.

Your phone number is stored on your device so you stay signed in. Your loyalty balance is shared with a participating restaurant when you earn or redeem points there, so that the restaurant can honour the transaction.

Diagnostic & crash data

When an AllaMenu mobile app crashes or experiences an error, we collect anonymous diagnostic information through Firebase Crashlytics — including the stack trace, device model, operating system version, and the sequence of actions leading up to the crash. This data is not linked to your personal identity and is used solely to fix bugs and improve stability.

3. How We Use Your Information

• To provide and maintain the AllaMenu platform
• To process orders and facilitate restaurant operations
• To operate the Menu Points loyalty programme — awarding, redeeming, and expiring points
• To send push notifications (order updates, waiter calls)
• To manage subscriptions and billing
• To improve our services and user experience
• To communicate with restaurant owners about their accounts

We do not sell your personal information, and we do not use it for advertising.

4. Data Storage & Security

Your data is stored securely on Google Firebase infrastructure, which provides encryption at rest and in transit. We implement role-based access controls to ensure that restaurant data is only accessible to authorised staff members.

• All data transmitted via HTTPS/TLS encryption
• Firestore security rules enforce per-restaurant data isolation
• Staff access is controlled by role-based permissions
• Payment credentials are held in a dedicated secrets manager, not in our database

5. Third-Party Services

We use the following third-party services:

• Google Firebase — authentication, Firestore database, cloud storage, cloud functions, remote config
• Firebase Cloud Messaging (FCM) — push notifications to staff devices for new orders and waiter calls
• Firebase Authentication — sends the SMS one-time password used to verify wallet account phone numbers
• Firebase Analytics — aggregate, non-personally-identifying usage metrics
• Firebase Crashlytics — anonymous crash reports (stack traces, device model, OS version) used to fix bugs
• Stripe — card payment processing for international transactions. Card details are entered directly on Stripe's hosted page; AllaMenu never sees card numbers, CVV, or expiry dates.
• Network International (N-Genius) — card payment processing for GCC restaurants. Same hosted-page model as Stripe — AllaMenu never sees card data.
• Vercel — web application hosting

Each third-party service has its own privacy policy governing the use of your information.

6. Jurisdiction & Data Location

AllaMenu is operated from the Hashemite Kingdom of Jordan and serves restaurants in Jordan and the GCC region (United Arab Emirates, Saudi Arabia, Kuwait, Bahrain, Qatar, and Oman). Your data is stored in Google Cloud regions and may be processed in more than one region for performance and reliability. By using AllaMenu you consent to this processing. These practices are governed by the laws of the Hashemite Kingdom of Jordan, consistent with our Terms of Service.

7. Data Retention

We retain restaurant account data for as long as the account is active. Order data is retained for business reporting purposes. Wallet account data — your phone number, display name, and loyalty history — is retained for as long as your wallet account exists. If you request deletion of your account, we will remove the associated data within 30 days, except where we are required to retain records to comply with tax or accounting law.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, including your wallet account and loyalty history
• Withdraw consent for data processing
• Export your data in a portable format

To delete your account, follow the instructions at allamenu.com/delete-account. To exercise any other right, contact us using the details in section 12. We will respond within 30 days. Deleting your wallet account permanently forfeits any unredeemed loyalty points.

9. Cookies & Local Storage

Our web menu uses browser local storage to persist cart items and language preferences. The wallet app stores your phone number on your device so you stay signed in. We do not use tracking cookies. Firebase may use cookies for authentication sessions.

10. Children's Privacy

Our platform is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered restaurant owners of significant changes via email or in-app notification, and update the date at the top of this page. Continued use of the platform constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

• Email: support@allamenu.com
• WhatsApp: +962 79 780 0886