Privacy policy

ManyMenu is a product of JABB, based in Casablanca, Morocco. JABB is the data controller for the personal data described here.

Contact for anything about your data: hello@jabb.cx.

For the content of a published menu (dishes, prices, photos), the restaurant that publishes it is responsible for that content; we host and display it for them.

• Request-access form: your name, venue name, city, kind of place, phone or WhatsApp number, email, number of venues, your optional message, and how you found us (campaign tags in the link, the website you came from, the first page you opened). We also record when you accepted this policy.
• Account: name, email, a password stored only as a one-way hash, your role, sign-in dates, the activation code you used, and your credit balance and history.
• Menu content: what you or the AI put in your menu (restaurant details, dishes, prices, descriptions, translations), the photos of your paper menu, your logo and dish photos.
• Technical and security data: IP address and browser details, used to limit abuse (for example how many requests come from one connection) and kept with scan and chat logs.
• Questions asked to Many, the guide on our home page: the question, the answer, the page and the language, with the IP address for abuse prevention.
• Visits to published menus: see “Menu analytics” below. No cookie and no IP address are kept.

• To answer your access request and send your activation code (your consent and our steps before a contract).
• To provide the service: create and run your account, read your menu photos, publish your menu, count your credits (performance of our contract with you).
• To keep ManyMenu safe and working: rate limits, fraud and abuse prevention, debugging (our legitimate interest).
• To understand how our site is used and measure our ads, only if you accept analytics or marketing cookies (your consent).
• To meet legal obligations, for example keeping accounting records.

We do not sell your personal data and we do not use your menu photos to train AI models.

Reading a menu, finding your logo, writing descriptions, translating and generating dish photos are done by AI models. To do this, the photos and text of your menu are sent to:

• OpenAI models through Microsoft Azure OpenAI Service (menu reading, writing assistant, translation, the Many guide);
• Google Gemini (logo detection, image generation and, as a fallback, menu reading).

These providers process the data on our behalf to return a result. Under their business terms, data sent through their APIs is not used to train their models. Please avoid putting personal data of other people (for example staff phone numbers) in your menu photos.

AI can make mistakes: always check prices, allergens and names before publishing.

When a guest opens a menu published with ManyMenu, we record anonymous events so the restaurant can see what is read: views, dishes opened, categories, searches, filters and language. Each visit gets a random id kept in the browser tab's session storage, not a cookie. We keep the device type, operating system, browser, the country and city provided by our hosting, how the guest arrived (QR code, link or TV) and the referring website. The IP address is never stored. These events are deleted automatically after 180 days.

Some of these providers are outside Morocco and the European Union. We use them under their data-processing terms, which include contractual safeguards for international transfers.

• Account and menu data: as long as your account exists. When an account is deleted, its menus, photos and credit history are deleted too.
• Access requests: up to 12 months after our last exchange, unless you become a customer.
• Security logs, scan and chat logs: up to 12 months. Rate-limit counters expire within 24 hours.
• Menu analytics events: 180 days.
• Demo menus made without an account: 7 days.
• Cookies: see our cookie policy.

Under Moroccan law 09-08 you can access your data, have it corrected, and object to its processing for legitimate reasons. If you are in the European Union, the GDPR also gives you the right to erasure, to restrict processing, to data portability and to withdraw your consent at any time.

To use these rights, write to hello@jabb.cx from the email linked to your request or account. We answer within 30 days.

You can also complain to the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel) in Morocco, or to the data protection authority of your EU country.

Connections are encrypted (HTTPS), passwords are hashed, sessions are signed, and access to the admin console is limited to a few people at JABB. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

ManyMenu is a tool for businesses. It is not meant for children under 16 and we do not knowingly collect their data.

We will update this page when our service or providers change, and show the date at the top. Important changes will be announced in the app or by email.