Privacy Policy

Last updated: 16 October 2026

The short version

You sign in with Google or Apple. We receive your name and email address to create your account. With Apple you can hide your email, and we only get a private relay address. You can delete your account at any time.
Your phone's location is used on your phone to show restaurants near you. We don't store it. When you sign in, we note only the approximate city and country of your connection, to keep your account secure.
On our website we use Google Analytics, but only if you accept it in the cookie banner. The app doesn't use analytics.
If you use credits and invites, we keep your credit history and who invited whom. To link invites without a code and to allow one invite reward per phone, we keep scrambled (hashed) fingerprints of your phone and of the connection an invite link was opened from, never the raw values.
The app is free and shows ads from Google AdMob. Ads are personalised only if you allow it. We never sell your data.

1. Who we are

TeraMenu ("we", "us") is a mobile app and website that shows the daily menus of restaurants in Budapest, Hungary. TeraMenu is operated by Dortana, which is the data controller for the processing described here. For any privacy question or request, email us at info@teramenu.com.

2. Your account (Sign in with Google or Apple)

You sign in to the app with your Google account or with Sign in with Apple. The service you choose shares the following with us, and we store it to create and run your TeraMenu account:

Data	Why we need it
First name and last name	To personalise the app, for example to greet you by name. Apple shares your name only the first time you sign in, and only if you choose to.
Email address	To identify your account and to contact you about it (for example about account or policy changes). We don't send marketing emails without your separate consent. With Sign in with Apple you can choose Hide My Email: we then receive a private relay address from Apple that forwards to you, and never see your real email address.
Google or Apple account ID (an identifier Google or Apple assigns to your account for TeraMenu)	To recognise you the next time you sign in.
Profile photo (Google only: the picture on your Google account, if it has one)	To show it in the app. You can replace it with your own photo or remove it in the app.
Account dates (when it was created and last used)	To keep the account secure.
Approximate sign-in location: the city and country of each device you're signed in on, looked up from your connection's IP address when you sign in (and refreshed at most once a day while you use the app). We don't keep the IP address itself, and this is not your phone's location.	To keep your account secure, for example to notice a sign-in from an unusual place, and to help you with your account. It's approximate: a mobile network or VPN often shows another city.

We never see or store your Google or Apple password. Signing in is handled by Google under the Google Privacy Policy, or by Apple under the Apple Privacy Policy. Legal basis: performance of our contract with you, i.e. providing the account you asked for (GDPR Art. 6(1)(b)).

Deleting your account: you can delete your account in the app under Account → Delete account, which deletes it immediately, together with your favorites and profile photo. Without the app, email info@teramenu.com from the address linked to it and we delete your account data within 30 days (how account deletion works). You can also remove TeraMenu's access in your Google Account settings, or for Sign in with Apple on your iPhone under Settings → your name → Sign-In & Security → Sign in with Apple.

3. Credits and invites

Credits let you open a restaurant's menu without watching an ad. You earn them by inviting friends, and you may receive them from us. To run this, we store:

Data	Why we need it
Credit balance and history: each change, its reason (an invite reward, a welcome bonus, a menu opened without an ad, a gift from us) and, for a menu, which restaurant	To show your balance and history, and to answer questions about it.
Invites: your personal invite link, who invited you, whom you invited, and whether the reward was paid	To reward invites. The person who invited you sees in the app that someone joined through their link: your first name appears in their credit history and in the notification that tells them they earned credits, and you see the first name of the person who invited you.
Invite link fingerprint: when someone opens an invite link, a salted one-way hash of the connection's IP address, the type of device and the time. We never store the IP address itself.	So a friend who installs the app after opening your link joins through your invite without typing a code: an account created from the same connection within 48 hours is linked to that invite. On Android, Google Play also passes the invite code to the app when it's installed from the link.
Phone identifier fingerprint: a salted one-way hash of the identifier the app gets from your phone (Android ID, or an identifier the app keeps on your iPhone), noted when you sign in. On iPhone we also use Apple's DeviceCheck: Apple keeps a yes/no mark for TeraMenu on the phone ("has had a TeraMenu account"), which tells nobody who you are	To prevent abuse: an invite is rewarded only for a phone that never had another TeraMenu account, so nobody can earn credits by inviting themselves.
App and phone check: while your own invite waits for its reward, the app asks Apple (App Attest) or Google (Play Integrity) to confirm it is the genuine TeraMenu app on a real phone. We keep only the result, when it was checked and, on iPhone, the app's public key for this check	To prevent abuse: only ads watched in the genuine app count toward an invite reward, so credits can't be collected with fake accounts, emulators or scripts.
App language	To write the notifications we send you (for example "you earned credits") in your language.

When a friend you invited starts using TeraMenu, we send you a push notification about the credits you earned; you can turn notifications off in your phone's settings. Legal bases: performance of our contract with you for credits and invites (GDPR Art. 6(1)(b)); legitimate interest in linking invites and preventing abuse of the invite programme (Art. 6(1)(f)).

4. Data used on your device

Data	Why	Stored by us?
Location (only if you allow it)	To centre the map on you, show your district and list restaurants nearby.	No. It stays on your device. You can turn it off at any time in your phone's settings; the app still works, you'll just move the map yourself. (The approximate sign-in city in section 2 is looked up from your connection, not from this.)
Language choice and filters	To remember your preferences.	No. Saved on your device only.
App version and platform (e.g. "iOS, 1.0.2")	To tell you when an update is available.	No. Used only to answer the request.
Technical request data: IP address, device or browser type, time and address of the request	Sent automatically whenever the app or website loads data. Used to deliver the service, keep it secure and fix errors.	Kept briefly in our hosting provider's server logs, then deleted automatically.

5. Analytics (Google Analytics)

To understand how our website is used and improve it, we use Google Analytics, provided by Google, on the website only. The mobile app doesn't use analytics.

Only with your consent. Google Analytics is loaded only after you click Accept in the cookie banner.
What is collected: pages you view, actions such as opening a restaurant or its menu, how long you use the site, device type, operating system, language, and approximate location (country and city) derived from your IP address. Google Analytics does not store your full IP address.
Identifiers: a random identifier stored in a cookie so that visits can be counted. We do not send your name or email address to Google Analytics.
Kept separate from ads: Google Signals and advertising features are turned off in Google Analytics, and analytics data is not used for advertising.
Retention: Google Analytics keeps this data for 14 months, after which it is deleted automatically.
Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time with Cookie settings at the bottom of every page. Withdrawing doesn't affect processing that happened before.

6. Advertising (Google AdMob)

The TeraMenu app is free and is funded by ads. When you open a restaurant's menu in the app, a short ad may be shown first. Ads are provided by Google AdMob. There are no ads on this website.

Your choice: in the EU, the UK and Switzerland, the app shows Google's consent form when you first open it. If you consent, Google may show you personalised ads based on your interests. If you choose Do not consent, you see non-personalised ads, which are based only on general context such as the app itself and your approximate location. On iPhone, the app also asks whether you allow tracking; if you don't, Google doesn't receive your device's advertising identifier.
What Google receives: your device's advertising identifier (on iPhone only if you allow tracking in the iOS prompt; on Android the Android advertising ID), IP address, approximate location, device type, operating system, app information, and how you interact with ads (views and taps).
Non-personalised ads still use some data: Google uses limited data to prevent fraud, limit how often you see the same ad, and measure ad performance.
Google's role: Google processes this data as an independent controller under the Google Privacy Policy. See also how Google uses information from apps that use its services. We don't receive your advertising identifier or ad data that identifies you, and we never share your name or email with advertisers.
Legal basis: personalised ads and access to your advertising identifier: your consent (GDPR Art. 6(1)(a)). Non-personalised ads: our legitimate interest in funding a free app (Art. 6(1)(f)).
Changing your mind: in the EU, the UK and Switzerland, change your choice at any time in the app under Account → Privacy choices. On iPhone you can allow or stop tracking in Settings → Privacy & Security → Tracking. You can also reset or delete your advertising ID in your phone's settings (Android: Settings → Google → Ads; iPhone: Settings → Privacy & Security → Tracking).

7. Google Maps and restaurant content

The map in the app is provided by Google Maps, and restaurant photos, ratings and review counts come from Google. When the map or a photo loads, your device connects directly to Google, which receives your IP address and device information. Tapping Get Directions opens your maps app, which handles your route under its own privacy terms.

8. Restaurants

TeraMenu lists restaurants using public business information from Google Maps: name, address, location, phone number, website, opening status, rating, photos and, where published, a business email address. We use this to show restaurants in the app and to contact restaurants about adding their menu. Legal basis: our legitimate interest in providing an accurate restaurant and menu guide (GDPR Art. 6(1)(f)).

Each restaurant gets a private link and access code to edit its weekly menu. Menus entered by a restaurant are shown publicly. If you run a restaurant and want your details corrected or your listing removed, email info@teramenu.com and we'll do it promptly.

9. Legal bases at a glance

Your account: contract (Art. 6(1)(b)).
Analytics and analytics cookies: consent (Art. 6(1)(a)).
Personalised ads and advertising identifiers: consent (Art. 6(1)(a)); non-personalised ads: legitimate interest in funding a free app (Art. 6(1)(f)).
Location: consent, given through your phone's permission prompt.
Credits and invites: contract (Art. 6(1)(b)); invite link and phone fingerprints: legitimate interest in linking invites and preventing abuse (Art. 6(1)(f)).
Approximate sign-in location: legitimate interest in keeping accounts secure (Art. 6(1)(f)).
Server logs, security and update checks: legitimate interest in running a secure, working service (Art. 6(1)(f)).
Restaurant information: legitimate interest (Art. 6(1)(f)).

10. Who processes data for us

Google (Google Ireland Ltd. / Google LLC): Sign in with Google, Google Analytics on the website, push notifications on Android (Firebase Cloud Messaging), Google Maps, restaurant photos and ratings, and Google AdMob ads (as an independent controller, see section 6).
Apple (Apple Distribution International Ltd. / Apple Inc.): Sign in with Apple, and push notifications on iPhone.
Vercel Inc.: hosts our website and API, keeps short-term server logs, and looks up the approximate city and country of connections (see section 2).
Prisma Data, Inc.: hosts our database (accounts, restaurants and menus).
Apple and Google: distribute the app through the App Store and Google Play, under their own privacy policies.

Some of these providers are based in, or transfer data to, the United States. Such transfers are protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

11. How long we keep data

Account data: until you delete your account (deleted within 30 days of your request).
Approximate sign-in location: kept with each signed-in device, and deleted when you sign out there, when the sign-in expires after 180 days without use, or when you delete your account.
Credit history, invites and phone fingerprints: until you delete your account.
Invite link fingerprints: 7 days, then deleted automatically.
Analytics data: 14 months (see section 5).
Advertising data: kept by Google according to its own retention policies (see section 6). We don't store it.
Server logs: deleted automatically by our hosting provider after a short period, typically within 30 days.
Restaurant listings and menus: for as long as the restaurant is listed, or until it asks us to remove them.
Your cookie choice: 6 months, after which we ask again.

12. Your rights

Under the GDPR you have the right to access your personal data, to correct it, to have it deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. To make a request, email info@teramenu.com; we'll reply within one month.

You can also complain to the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11, www.naih.hu.

13. Cookies and similar storage

The website shows a cookie banner on your first visit. Analytics cookies are set only if you click Accept; Reject is just as easy. You can change your choice at any time with Cookie settings at the bottom of every page.

Name	Purpose	Type	Kept for
`teramenu:consent`	Remembers your cookie choice	Necessary (browser storage)	6 months
`_ga`	Google Analytics: distinguishes visitors	Analytics, only with consent	2 years
`_ga_<ID>`	Google Analytics: keeps track of your visit	Analytics, only with consent	2 years
`teramenu:admin`, `teramenu:access:…`	Keeps administrators and restaurants signed in to their menu editor	Necessary (browser storage)	Up to 1 week / until the tab is closed

This website doesn't use advertising cookies. Ads appear only in the mobile app, where your choice is handled as described in section 6.

14. Children

TeraMenu is a general-audience restaurant guide and is not directed at children under 16. We don't knowingly collect data from children; if you believe a child has created an account, contact us and we'll delete it.

15. Changes to this policy

If we change this policy, we'll update the date at the top of this page. For significant changes, we'll also let you know in the app or by email.

16. Contact

Questions about privacy? Email info@teramenu.com.