- Guests browse menus anonymously — no account, no name, no email.
- We use data only to run the service. We never sell it or use it for ads.
- You can access, export or delete your data at any time.
01Who we are and who this covers
KrijoSpace, Prishtine, Kosovo, is the controller responsible for the personal data described here. This policy covers two groups:
02What we collect and why
| Data | Examples | Why | Kept for |
|---|---|---|---|
| Account | Name, email, phone, language, hashed password, profile photo | Sign-in and account emails | While the account is open + [N] days |
| Business content | Menus, items, photos, locations | Showing your menus to guests | Until you delete it |
| Billing | Plan, subscription status, invoices and your customer ID at the payment processor. Card details stay with our payment processor | Billing and tax records | [N] years, as tax law requires |
| AI use | How many AI tokens each business used in a billing period | Applying your plan's AI allowance | While the account is open |
| Guest visits | Which menu was viewed and when, plus an anonymous visitor code that changes every day (a one-way hash of the IP address and browser). The IP address itself is not stored | Aggregate view counts for owners | [N] months |
| Messages | What you email us or send through the contact form | Replying to you | [N] months |
Cookies
We only use cookies the service needs to work:
- Sign-in cookies (a session, CSRF protection and a sign-in redirect) keep signed-in users signed in and our forms safe.
- A preference cookie remembers a guest's language for a year. It holds only the language code.
No advertising or cross-site tracking cookies.
04Keeping it safe
Connections are encrypted, passwords are hashed, and staff access is limited by role. No system is perfect — if a breach affects you, we'll let you know.
05Your rights
You can ask us to:
- Show you the data we hold about you, and give you a copy.
- Correct it or delete it.
- Stop or limit how we use it.
Email info@tapmeny.app and we'll reply within [N] days. You can also complain to Kosovo's Information and Privacy Agency.
06Children and changes
Anyone can view a menu, including children. Guests never sign up, so we don't collect personal data from them. Accounts are only for the people who run a business, such as owners, admins and staff, and you must be at least 18 to create one.
If we change this policy in a way that matters, we'll update the date at the top and email account owners.