Legal
Privacy Policy
Last updated: 3 August 2026
This policy explains which personal data the MenuPanels mobile app (Google Play ID: com.menupanels.app), the management panel at menupanels.com and the go.menupanels.com website process, why we collect it, and how long we keep it.
Data controller
MenuPanels
info@menupanels.com1. Data we collect in the mobile app
The MenuPanels app requires an account so you can manage your restaurant. The following data is processed through the app:
- Account details: first name, last name, email address and password. Passwords are stored on our servers only as an irreversible hash.
- Business content: your menu categories, products, prices, images and order records.
- Notification identifier: your device's push token (Firebase Cloud Messaging), used to deliver new-order alerts.
- Technical logs: connection data such as IP address, device model and operating system version, for security and debugging.
2. Why the app requests permissions
The app requests a few Android permissions. None of them is used for tracking or advertising:
- Bluetooth and location: Used solely to discover and connect to a nearby thermal receipt printer. Android requires the location permission before an app may scan for Bluetooth devices. Your location is not recorded, not sent to our servers and not shared with third parties.
- Storage: Used to save QR codes and receipt images to your device; those files stay on the device.
- Network state: Used to detect whether your connection is online.
3. Data we collect on the website
We do not track visitors on go.menupanels.com.
- Enquiry form: your name, business name, phone number, email address and message — used only to reply to your request.
- We use no analytics or advertising trackers; no tool such as Google Analytics is embedded in the site.
- We do not set cookies for visitors. The only cookie on the site is a technical session cookie created when signing in to our admin panel.
4. Why we process your data
We process your personal data only for the purposes below, on the corresponding legal bases:
- Creating your account and providing the service — performance of a contract.
- Delivering order notifications to your device — performance of a contract.
- Maintaining security and detecting abuse or errors — legitimate interest.
- Responding to your enquiries — at your request.
- Meeting our legal obligations — legal obligation.
5. Sharing with third parties
We do not sell your personal data and we do not share it for advertising. Data is shared only with the service providers needed to run the service:
- Google Firebase Cloud Messaging — to deliver push notifications to your device.
- Our server and hosting provider — the infrastructure where data is stored.
- Public authorities, where we are legally required to disclose.
6. Retention periods
- Your account and business data are kept for as long as your account is active.
- After a deletion request, your data is erased within 30 days at the latest; records we are legally required to retain are exempt.
- Enquiry form entries are kept for a maximum of 24 months.
7. Deleting your account and data
If you want your account and all associated data deleted, email us from the address registered to your account with the subject "Account deletion". Once we have verified your identity we will delete your account and data within 30 days at the latest.
8. Security
All traffic between the app and our servers is encrypted with HTTPS. Passwords are stored irreversibly. Access to the administration interface is restricted and logged.
9. Your rights
Under the GDPR (and Turkey's KVKK, Law No. 6698) you have the following rights:
- Access your data and request a copy of it
- Have inaccurate or incomplete data corrected
- Request erasure of your data
- Request restriction of processing
- Receive your data in a portable format
- Object to processing and withdraw consent you have given
To exercise these rights, simply email us; we will resolve your request within 30 days at the latest. You also have the right to lodge a complaint with the competent data protection authority.
10. Children's privacy
MenuPanels is a service for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.
11. Changes to this policy
When we update this policy we change the "last updated" date on this page. For material changes we will also notify you in the app or by email.
12. Contact
For any privacy question or request, you can reach us at: